- Subscribe to RSS Feed
- Mark Question as New
- Mark Question as Read
- Float this Question for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Multi user configuration in Nifi, how to?
- Labels:
-
Apache NiFi
-
Cloudera DataFlow (CDF)
Created 07-12-2022 09:36 AM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hello all,
I do not know how to configure multi users on 3 nodes Nifi Cluster:
Currently, i use the following to generate client & server certificates using TLS toolkit:
./tls-toolkit.sh standalone -B password -C 'CN=nifiadmin, OU=NIFI' -n 'node1,node2,node3' --nifiDnPrefix 'CN=' --nifiDnSuffix ', OU=NIFI' -o /shared_folder/vm_shared/certs_100722/ -K password -P password -S password
I want to configure 3 users for this 3 nodes cluster.
Your help would be greatly appreciated.
Thank you.
Created 07-14-2022 08:56 AM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
@rafy
Once you have created the certificates for your other two users as @DigitalPlumber suggested, you would need to connect to your NiFi as the admin user you setup during initial securing of your NiFi and these two new users via the NiFi global menu (upper right corner) --> Users. Then you would need to authorize those new user identities against any policies needed for them to perform the actions you want them to be allowed.
https://nifi.apache.org/docs/nifi-docs/html/administration-guide.html#config-users-access-policies
Hope this helps,
Matt
Created 07-12-2022 12:35 PM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi @rafy please refer to the user authentication portion of this doc:
https://nifi.apache.org/docs/nifi-docs/html/administration-guide.html#user_authentication
Given that you are familiar with the toolkit and you only want to autheticate 3 users, then creating 3 user certs is simplest approach.
Just have them add the created certs to their browser.
Created 07-14-2022 08:56 AM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
@rafy
Once you have created the certificates for your other two users as @DigitalPlumber suggested, you would need to connect to your NiFi as the admin user you setup during initial securing of your NiFi and these two new users via the NiFi global menu (upper right corner) --> Users. Then you would need to authorize those new user identities against any policies needed for them to perform the actions you want them to be allowed.
https://nifi.apache.org/docs/nifi-docs/html/administration-guide.html#config-users-access-policies
Hope this helps,
Matt
Created 07-14-2022 09:33 AM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thank you sir. I was able to generate more users/client certificates by specifying multiple "-C CN=user1, OU=nifi" in addition to the initial command i have.
