Support Questions
Find answers, ask questions, and share your expertise

NiFi DBCPConnectionPool supporting kerberos (or AD credentials)

NiFi DBCPConnectionPool supporting kerberos (or AD credentials)

Explorer

I'm trying to connect to MSSQL Server using the ExecuteSQL processor and a DBCPConnectionPool service.

I'm constrained (or rather, strongly encouraged), to use domain credentials, preferably with kerberos to authenticate to the SQL Server. Reading the docs for DBCPConnectionPool it doesn't seem like this is possible?

Is there any workaround's to achieve this?

2 REPLIES 2
Highlighted

Re: NiFi DBCPConnectionPool supporting kerberos (or AD credentials)

New Contributor

Hello,

I've just set up working example of ExecuteSQL processor and DBCPConnectionPool service with Kerberos auth connecting to MSSQL Server.
I used mssql-jdbc-6.2.2.jre8 driver which allows specifying the principal and the password in jdbc url:

jdbc:sqlserver://server:port;integratedSecurity=true;authenticationScheme=JavaKerberos;userName=user@REALM;password=****

'Database User', 'Password' properties with no values in DBCPConnectionPool service.

Highlighted

Re: NiFi DBCPConnectionPool supporting kerberos (or AD credentials)

New Contributor
@Tomasz Uliński

Thanks for this pointer. I had to do few more things regarding Kerberos settings - adding jaas.conf and krb5.ini. Wrote an article https://medium.com/@danielyahn/nifi-ms-sql-integrated-security-9efc184872db