Hello,
I would like to use NiFi and NiFi Registry in secured context (with LDAP auth) on my server. User login with credentials works, but I receive the following error when I attempt to get buckets from NiFi Registry:
"Unable to obtain listing of buckets: org.apache.nifi.registry.client.NiFiRegistryException: Error retrieving all buckets: An Authentication object was not found in the SecurityContext Contact the system administrator."
My set-up:
* docker-compose with nifi and nifi-registry:
version: '3'
services:
nifi:
image: apache/nifi:latest
ports:
- "8443:8443"
volumes:
- /srv/nifi/certs:/opt/certs
environment:
AUTH: ldap
KEYSTORE_PATH: /opt/certs/keystore.p12
KEYSTORE_TYPE: PKCS12
KEYSTORE_PASSWORD: changed
TRUSTSTORE_PATH: /opt/certs/truststore.jks
TRUSTSTORE_PASSWORD: changed
TRUSTSTORE_TYPE: JKS
INITIAL_ADMIN_IDENTITY: 'foo.bar'
LDAP_AUTHENTICATION_STRATEGY: 'SIMPLE'
LDAP_MANAGER_DN: 'cn=admin,dc=mydomain,dc=com'
LDAP_MANAGER_PASSWORD: 'changed'
LDAP_USER_SEARCH_BASE: 'ou=people,dc=mydomain,dc=com'
LDAP_USER_SEARCH_FILTER: 'uid={0}'
LDAP_IDENTITY_STRATEGY: 'USE_USERNAME'
LDAP_URL: 'ldap://my-ip:389'
networks:
- nifi
nifi-registry:
image: apache/nifi-registry:latest
ports:
- "18443:18443"
volumes:
- /srv/nifi/certs:/opt/certs
environment:
AUTH: ldap
KEYSTORE_PATH: /opt/certs/keystore.p12
KEYSTORE_TYPE: PKCS12
KEYSTORE_PASSWORD: changed
TRUSTSTORE_PATH: /opt/certs/truststore.jks
TRUSTSTORE_PASSWORD: changed
TRUSTSTORE_TYPE: JKS
INITIAL_ADMIN_IDENTITY: 'foo.bar'
LDAP_AUTHENTICATION_STRATEGY: 'SIMPLE'
LDAP_MANAGER_DN: 'cn=admin,dc=mydomain,dc=com'
LDAP_MANAGER_PASSWORD: 'changed'
LDAP_USER_SEARCH_BASE: 'ou=people,dc=mydomain,dc=com'
LDAP_USER_SEARCH_FILTER: 'uid={0}'
LDAP_IDENTITY_STRATEGY: 'USE_USERNAME'
LDAP_URL: 'ldap://my-ip:389'
networks:
- nifi
networks:
nifi:
driver: bridge
* LDAP server using SIMPLE authentication
* nginx on one server with two subdomains:
NiFi subdomain:
server
{
listen 443 ssl;
server_name nifi.mydomain.com;
access_log /var/log/nginx/nifi.mydomain.com_access.log;
error_log /var/log/nginx/nifi.mydomain.com_error.log;
ssl_certificate /srv/certs/fullchain.pem;
ssl_certificate_key /srv/certs/privkey.pem;
location ^~ /.well-known/acme-challenge/ { allow all; root /var/www; }
location /
{
proxy_pass https://localhost:8443/;
}
}
NiFi Registry:
server
{
listen 443 ssl;
server_name registry.mydomain.com;
access_log /var/log/nginx/registry.mydomain.com_access.log;
error_log /var/log/nginx/registry.mydomain.com_error.log;
ssl_certificate /srv/certs/fullchain.pem;
ssl_certificate_key /srv/certs/privkey.pem;
location ^~ /.well-known/acme-challenge/ { allow all; root /var/www; }
location /
{
proxy_pass https://localhost:18443/;
}
}
Is there any config that I have missed? Thanks!
