Support Questions

linssab · ‎07-07-2022

I am trying to import an *.xml template made with NiFi version 1.13.2 into a 1.14 version client (in docker).

When trying to upload the *.xml file with the Upload Template button under the Operate panel, I get the following error message:

<html> <head> <meta http-equiv="Content-Type" content="text/html;charset=utf-8"/> <title>Error 403 Forbidden</title> </head> <body><h2>HTTP ERROR 403 Forbidden</h2> <table> <tr><th>URI:</th><td>/nifi-api/process-groups/8f8e29ed-0181-1000-d7d0-76467ebfce01/templates/upload</td></tr> <tr><th>STATUS:</th><td>403</td></tr> <tr><th>MESSAGE:</th><td>Forbidden</td></tr> <tr><th>SERVLET:</th><td>jerseySpring</td></tr> </table> <hr><a href="https://eclipse.org/jetty">Powered by Jetty:// 9.4.42.v20210604</a><hr/> </body> </html>

I have never seen this error before. Any clue of what the problem is?

DigitalPlumber · ‎07-07-2022

@linssab I am not well versed with the docker aspect of this however I see this:

GET http://localhost:8443/nifi-api/flow/current-user

That is going to http

I feel the reason this is happening is because you have this in your yaml file:

ports:
            - '8443:8080'
        cpus : 2
        mem_limit: 2G
        mem_reservation: 2G
        environment:
            - NIFI_WEB_HTTP_PORT=8080

That to me tells me that anything going in on 8443 route it to 8080 and 8080 is set on nifi.properties as the value for nifi.web.http.port= because you are passing in through your yaml file:

NIFI_WEB_HTTP_PORT=8080

I recommend that you change

ports:
            - '8443:8080'

to

ports:
           - '8443:8443'


AND

environment:
            - NIFI_WEB_HTTP_PORT=8080

to

environment:
            - NIFI_WEB_HTTPS_PORT=8443

notice the "S" in HTTP<S>

Then NiFi should start up securely and you will get a login page where you can pass it the values you set for:

- SINGLE_USER_CREDENTIALS_USERNAME=
- SINGLE_USER_CREDENTIALS_PASSWORD=

View solution in original post

DigitalPlumber · ‎07-07-2022

Hello,

Is the NiFi secure? What do you see in app and user log?

linssab · ‎07-07-2022

Hey @DigitalPlumber,

Yes, it is "secure". It's a very simple docker image with SINGLE_USER_AUTHENTICATION and a PROPS_KEY.
The user log shows me anonymous user, which may be the cause of the problem. However, I fail to understand (and sorry the ignorance with NiFi auth methods) how to properly login as an user. NiFi does not prompt me an username or password when accessing the canvas.

2022-07-07 12:47:01,537 INFO [NiFi Web Server-20] o.a.n.w.s.NiFiAuthenticationFilter Attempting request for (<anonymous>) GET http://localhost:8443/nifi-api/flow/current-user (source ip: 172.21.0.1)                                       
2022-07-07 12:47:01,541 INFO [NiFi Web Server-20] o.a.n.w.s.NiFiAuthenticationFilter Authentication success for anonymous

Just in case I'm adding the docker-compose yaml file link here

DigitalPlumber · ‎07-07-2022

@linssab I am not well versed with the docker aspect of this however I see this:

GET http://localhost:8443/nifi-api/flow/current-user

That is going to http

I feel the reason this is happening is because you have this in your yaml file:

ports:
            - '8443:8080'
        cpus : 2
        mem_limit: 2G
        mem_reservation: 2G
        environment:
            - NIFI_WEB_HTTP_PORT=8080

That to me tells me that anything going in on 8443 route it to 8080 and 8080 is set on nifi.properties as the value for nifi.web.http.port= because you are passing in through your yaml file:

NIFI_WEB_HTTP_PORT=8080

I recommend that you change

ports:
            - '8443:8080'

to

ports:
           - '8443:8443'


AND

environment:
            - NIFI_WEB_HTTP_PORT=8080

to

environment:
            - NIFI_WEB_HTTPS_PORT=8443

notice the "S" in HTTP<S>

Then NiFi should start up securely and you will get a login page where you can pass it the values you set for:

- SINGLE_USER_CREDENTIALS_USERNAME=
- SINGLE_USER_CREDENTIALS_PASSWORD=

araujo · ‎07-07-2022

@linssab ,

You are probably running into this issue described in NIFI-9241, which has been fixed on NiFi 1.15.

Cheers,

André

--
Was your question answered? Please take some time to click on "Accept as Solution" below this post.
If you find a reply useful, say thanks by clicking on the thumbs up button.

Cloudera Community

Support Questions

Template import error