@johannes_meixne    The only place you would use "{0}" would be in the ldap-provider used for user authentication.  The {0} gets replaced with the username entered in the login UI.  The LdapUserGroupProvider however is used by the nifi authorizer to assemble a list of users and group strings (along with the association/membership between those user and groups) which can be used to assign authorizations against.  The LdapUserGroupProvider executes on NiFi startup and then on a configured schedule to refresh the synced users and groups.  Since it takes no input you can not use "{0}" in the search filter. ... View more

Thanks for the prompt answer, @jpercivall. I see HandleHttpRequest and Response listed in the supported processors out of the box for minifi (Section 4.2: https://docs.hortonworks.com/HDPDocuments/HDF2/HDF-2.1.0/bk_dataflow-minifi-quick-start/content/ch_minifi-quick-start.html), and also listed as processors in the minifi logs on minifi startup. Do you have any idea when minifi with the controller services functionality will be released? ... View more

Is this one way trust encrypted between kdc and ad? ... View more