Member since
08-23-2023
4
Posts
1
Kudos Received
1
Solution
My Accepted Solutions
Title | Views | Posted |
---|---|---|
1061 | 08-24-2023 06:43 AM |
03-06-2024
04:38 AM
1 Kudo
Greetings Cloudera Community, I am encountering a perplexing issue with NiFi's UI HTTP Session when accessed behind an NGINX Reverse Proxy. The error message I'm encountering is as follows: Unauthorized error="invalid_token", error_description="An error occurred while attempting to decode the Jwt: Signed JWT rejected: Another algorithm expected, or no matching key(s) found", error_uri="https://tools.ietf.org/html/rfc6750#section-3.1" It happens after upgrade from 1.11.4 -> 1.23.2 Here's a brief overview of my setup: I have configured Sticky Sessions for nifi.web.https.host. Upstream is configured for each NiFi Instance (https) using IP Address and port 8443. Despite having similar configurations for two other NiFi clusters behind an NGINX Reverse Proxy, I do not encounter any issues with them. What's particularly puzzling is that when accessing NiFi instances directly, the session behaves as expected and does not disconnect. Could anyone provide guidance on how to debug this error or suggest possible solutions? Any insights or experiences shared would be greatly appreciated. Additionally, I would like to highlight that we've observed some errors (401, 502) in the NGINX logs related to node communication within the session. Thank you in advance for your assistance. Warm regards, Pavel Klyuev
... View more
Labels:
- Labels:
-
Apache NiFi
08-24-2023
06:43 AM
Thank you for your response MattWho! I didn't just copy configuration files between versions. I did update core configuration files such as nifi.properties and manage it through Ansible. I just copied certificates (jks), flow.xml.gz (flow file) and authorizations.xml (to save my permissions, it is not related to the flow initialization I guess). Anyway I listen to your recommendations and setup it clearly with fully updated files without any of configuration files from previous versions but no luck. My Flow still cannot be initialized. At least my previous version 1.11.4 won't start with that flow.xml.gz too unfortunately. Seems it some broken there, but I have no clue. One thing I could markup that I installed and used ProtobufProcessor. I have backup flow file behind two months ago and it's worked. I updated NiFi cluster to 1.23.0 and seems its all okay now.
... View more