We use Nifi 1.5.0 with 'nifi-toolkit-1.5.0.3.1.0.0-564' on Windows, standalone (no cluster, we are at the beginning of the nifi-way)
After reconfiguring for SSL, following div. instruction, an testing a lot of different configs, restarting with 'clean' installation etc.; I am stalled:
- Certs etc. are made with nifi toolkit, standalone:
tls-toolkit.bat standalone -n localhost -C "CN=admin,OU=NIFI" - authorizers.xml is like this (only change):
...
<property name="Initial Admin Identity">CN=admin, OU=NIFI</property>
... - keystore and truststore are in ./conf (I also tested with absolute path)
- client cert is imported
Any Configuration like this start up and stops with some exceptions. Without "Initial Admin Identity" attribute in authorizers.xml the server starts normaly, but no one can login due to permission issues.
The nifi-user.log and nifi-bootstrap.log looks ok, but not nifi-app.log:
more or less all exceptions ends up with something like:
2018-02-07 17:06:28,110 INFO [main] o.eclipse.jetty.server.AbstractConnector Started ServerConnector@776a7ec6{SSL,[ssl, http/1.1]}{localhost:9443}
2018-02-07 17:06:28,110 INFO [main] org.eclipse.jetty.server.Server Started @31471ms
2018-02-07 17:06:28,111 WARN [main] org.apache.nifi.web.server.JettyServer Failed to start web server... shutting down.
org.springframework.beans.factory.UnsatisfiedDependencyException: Error creating bean with name 'org.springframework.security.config.annotation.web.configuration.WebSecurityConfiguration': Unsatisfied dependency expressed through method 'setFilterChainProxySecurityConfigurer' parameter 1; nested exception is org.springframework.beans.factory.BeanExpressionException: Expression parsing failed; nested exception is org.springframework.beans.factory.UnsatisfiedDependencyException: Error creating bean with name 'org.apache.nifi.web.NiFiWebApiSecurityConfiguration': Unsatisfied dependency expressed through method 'setX509AuthenticationProvider' parameter 0; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'x509AuthenticationProvider' defined in class path resource [nifi-web-security-context.xml]: Cannot resolve reference to bean 'authorizer' while setting constructor argument; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'authorizer': FactoryBean threw exception on object creation; nested exception is org.apache.nifi.authorization.exception.AuthorizerCreationException: org.apache.nifi.authorization.exception.AuthorizerCreationException: Unable to locate initial admin CN=admin, OU=NIFI to seed policies
at org.springframework.beans.factory.annotation.AutowiredAnnotationBeanPostProcessor$AutowiredMethodElement.inject(AutowiredAnnotationBeanPostProcessor.java:667)
at org.springframework.beans.factory.annotation.InjectionMetadata.inject(InjectionMetadata.java:88)
at org.springframework.beans.factory.annotation.AutowiredAnnotationBeanPostProcessor.postProcessPropertyValues(AutowiredAnnotationBeanPostProcessor.java:366)
....
Caused by: ... AuthorizerCreationException: Unable to locate initial admin CN=admin, OU=NIFI to seed policies
....
....
2018-02-07 17:06:28,122 INFO [Thread-1] org.eclipse.jetty.server.session Stopped scavenging
Any hints?
Thanks a lot; .m.
