Member since
08-23-2023
4
Posts
1
Kudos Received
1
Solution
My Accepted Solutions
Title | Views | Posted |
---|---|---|
1060 | 08-24-2023 06:43 AM |
03-06-2024
04:38 AM
1 Kudo
Greetings Cloudera Community, I am encountering a perplexing issue with NiFi's UI HTTP Session when accessed behind an NGINX Reverse Proxy. The error message I'm encountering is as follows: Unauthorized error="invalid_token", error_description="An error occurred while attempting to decode the Jwt: Signed JWT rejected: Another algorithm expected, or no matching key(s) found", error_uri="https://tools.ietf.org/html/rfc6750#section-3.1" It happens after upgrade from 1.11.4 -> 1.23.2 Here's a brief overview of my setup: I have configured Sticky Sessions for nifi.web.https.host. Upstream is configured for each NiFi Instance (https) using IP Address and port 8443. Despite having similar configurations for two other NiFi clusters behind an NGINX Reverse Proxy, I do not encounter any issues with them. What's particularly puzzling is that when accessing NiFi instances directly, the session behaves as expected and does not disconnect. Could anyone provide guidance on how to debug this error or suggest possible solutions? Any insights or experiences shared would be greatly appreciated. Additionally, I would like to highlight that we've observed some errors (401, 502) in the NGINX logs related to node communication within the session. Thank you in advance for your assistance. Warm regards, Pavel Klyuev
... View more
Labels:
- Labels:
-
Apache NiFi
08-24-2023
06:43 AM
Thank you for your response MattWho! I didn't just copy configuration files between versions. I did update core configuration files such as nifi.properties and manage it through Ansible. I just copied certificates (jks), flow.xml.gz (flow file) and authorizations.xml (to save my permissions, it is not related to the flow initialization I guess). Anyway I listen to your recommendations and setup it clearly with fully updated files without any of configuration files from previous versions but no luck. My Flow still cannot be initialized. At least my previous version 1.11.4 won't start with that flow.xml.gz too unfortunately. Seems it some broken there, but I have no clue. One thing I could markup that I installed and used ProtobufProcessor. I have backup flow file behind two months ago and it's worked. I updated NiFi cluster to 1.23.0 and seems its all okay now.
... View more
08-23-2023
01:21 AM
https://wetransfer.com/downloads/c39ec4b6c7435824f883548825be1f9b20230823081945/5e8dfde733816f26c2e40400651b9fb620230823081954/ 3 items nifi-app.log 2.42 MB nifi-bootstrap.log 11 KB nifi-user.log 133 KB
... View more
08-23-2023
01:14 AM
I has NiFi 1.11.4 installed on 3 nodes cluster. I installed the new version of NiFi 1.23.0 in a nearby directory Moved config files: nifi.properties rolled over Ansible autorizations.xml copied from the old version jks files copied from the old version flow.xml.gz copied from the old version Updated sensitive properties: sudo ../bin/nifi.sh set-sensitive-properties-key 'key'
sudo ../bin/nifi.sh set-sensitive-properties-algorithm NIFI_PBKDF2_AES_GCM_256 What does this mean when I do update flow with sensitive props? Flow Configuration Property not specified [null] And now both my versions of NiFi could not initialize it flow, no exceptions or critical errors in logs i've found, some was fixed but nothing helps Cluster coordinator is elected successfully, Zookeeper is available. No any logs in nifi-processors.logs, no any updates on directories for provenance, flowfile, content. I enabled TRACE logs and on Initializing I see only this continuously: 2023-08-23 14:03:20,513 TRACE [Load-Balanced Client Thread-8] o.a.n.c.q.c.c.a.n.NioAsyncLoadBalanceClientTask Was unable to communicate with any client. Will sleep for 10 milliseconds. I've got continuously Flow initializing could you help me? What am I missing?
... View more
Labels:
- Labels:
-
Apache NiFi