Support Questions

Find answers, ask questions, and share your expertise
Announcements
Now Live: Explore expert insights and technical deep dives on the new Cloudera Community BlogsRead the Announcement

Need a simple "How To" for Nifi-AD / LDAP integration

avatar
Contributor

Hi all, 

I recently spent a full 2 days over a rainy weekend trying to get a stand alone instance of Nifi v2.5.0 on ubuntu 22.04 trying to integrate with AD,  to use AD for Nifi authentication, but with no joy. It almost worked but couldn't get past a certain point. The problem I discovered is there doesn't seem to exist on the internet  a simple step by step process on how to set up Nifi with AD/LDAP.

My set up is a linux PC called nifi1 and had an old windows 2012 R2 domain controller with LDAP running on it I decided to use.

I created a domain called  testdomain.local and created a domain user called testuser in the AD User OU that I wanted to use as a nifi user. I also created a service account called svc-nifi also in the User OU that is used to log onto AD as a service.

I ran a series of tests using LDAP command line queries from the linux PC whereby the service account could run LDAP queries from linux that proved it could access AD, read the AD info it needed and could connect OK to AD etc. The testuser logon also works fine in logging onto the domain on other PCs.

Is there a documented basic step by step process of how to do this on a linux ( or windows ) PC please? 

I just need the minimum basic working example of nifi.properties, authorizers.xml, uses.xml and authorize.xml etc files please. There are so many variables in each file that make it difficult to work through sequentially, as I dont have expert Nifi knowledge.

I wondered if I had maybe skipped a step or something, like :

    * Do I need to add the linux PC to AD itself first , and if so, how is this set up in the

      config files?

     * What do i need to add to the nifi.properties, authorizers.xml file etc to get it to work please?

      * etc.

Any help appreciated - this should really be simple, but its not...... 

I'm happy to write up a step by process and post it back here once I have it running, to help others.

Thanks in advance. 🙂

 

 

0 REPLIES 0