Support Questions
Find answers, ask questions, and share your expertise
Announcements
Alert: Welcome to the Unified Cloudera Community. Former HCC members be sure to read and learn how to activate your account here.

How to display NiFi login without kerberos or LDAP

Solved Go to solution
Highlighted

How to display NiFi login without kerberos or LDAP

New Contributor

Hello, everyone,

I'm trying to set up user authentication by username/password in Apache NiFi, but without using Kerberos or LDAP.

her used nifi toolkit to generate ssl certificates, i have started nifi by https. but i want you to ask me to log in as minimally as possible without installing extras.
is this possible? or is it required to have an external user management system?

 

* i am using Ubuntu localhost, one node in my laptop

 

for instance

login.png

1 ACCEPTED SOLUTION

Accepted Solutions

Re: How to display NiFi login without kerberos or LDAP

Master Guru

@Logann 

 

NiFi does not offer local user creation for authentication.  There is no way to create local users and assign them passwords for the purpose of user authentication.

User Authentication require either:
1. User certificates (always requested by NiFi during TLS handshake)
2. Spnego auth (Spnego auth challenge sent to browser if spnego properties configured in nifi.properties.  This request is only sent if 1 did not result in client certificate in response from client)
3. Configured login provider (uses login-provider configured in login-identity-providers.xml and referenced in nifi.properties file.  Only used if both 1 and 2 did not provide client/user authentication already).
4. NiFi will also support other OpenID Connect supported authentication providers.

Hope this helps,

Matt

View solution in original post

1 REPLY 1

Re: How to display NiFi login without kerberos or LDAP

Master Guru

@Logann 

 

NiFi does not offer local user creation for authentication.  There is no way to create local users and assign them passwords for the purpose of user authentication.

User Authentication require either:
1. User certificates (always requested by NiFi during TLS handshake)
2. Spnego auth (Spnego auth challenge sent to browser if spnego properties configured in nifi.properties.  This request is only sent if 1 did not result in client certificate in response from client)
3. Configured login provider (uses login-provider configured in login-identity-providers.xml and referenced in nifi.properties file.  Only used if both 1 and 2 did not provide client/user authentication already).
4. NiFi will also support other OpenID Connect supported authentication providers.

Hope this helps,

Matt

View solution in original post

Don't have an account?
Coming from Hortonworks? Activate your account here