Created 08-26-2016 09:52 AM
Created 08-26-2016 12:00 PM
NiFi only supports user controlled access when it is configured to run securely over HTTPS.
The HTTPS configuration of NiFi will require a keystore and truststore is created/provided. If you don't have a corporately provided PKI infrastructure that can provide your with TLS certificates for this purpose, you can create your own. The following HCC article will walk you through manually creating your own:
Once your NiFi is setup securely, you will need to enable user access to the UI.
There are two parts to successful access:
1. User authentication <-- This can accomplished via TLS certificates, LDAP, or Kerberos. Setting up NiFi to use one of these login identity providers is covered here:
https://nifi.apache.org/docs/nifi-docs/html/administration-guide.html#user-authentication
2. User Authorization <-- This is accomplished through NiFi via the authorized-users.xml file. This process is documented here:
https://nifi.apache.org/docs/nifi-docs/html/administration-guide.html#controlling-levels-of-access
You will need to manually populate the Authorized-users.xml file with your first "Admin" role user. That Admin user will be able to approve access to other users who have passed the authentication phase and submitted a UI based authorization request.
Thanks,
Matt
Created 08-26-2016 12:00 PM
NiFi only supports user controlled access when it is configured to run securely over HTTPS.
The HTTPS configuration of NiFi will require a keystore and truststore is created/provided. If you don't have a corporately provided PKI infrastructure that can provide your with TLS certificates for this purpose, you can create your own. The following HCC article will walk you through manually creating your own:
Once your NiFi is setup securely, you will need to enable user access to the UI.
There are two parts to successful access:
1. User authentication <-- This can accomplished via TLS certificates, LDAP, or Kerberos. Setting up NiFi to use one of these login identity providers is covered here:
https://nifi.apache.org/docs/nifi-docs/html/administration-guide.html#user-authentication
2. User Authorization <-- This is accomplished through NiFi via the authorized-users.xml file. This process is documented here:
https://nifi.apache.org/docs/nifi-docs/html/administration-guide.html#controlling-levels-of-access
You will need to manually populate the Authorized-users.xml file with your first "Admin" role user. That Admin user will be able to approve access to other users who have passed the authentication phase and submitted a UI based authorization request.
Thanks,
Matt