Hi all,
I tried to integrate secured NiFi with secured Ranger for Authorization Management in HDF-3.1.0.0.
Refer to the article：
https://community.hortonworks.com/content/kbentry/60001/hdf-20-integrating-secured-nifi-with-secured-range.html
After all steps are complete, I run the connection test on Ranger NiFi service and get 403 status code.
It seems authentication success but authorization fail, but I cant figure out the problem in a long time.
(CN=ranger, OU=NiFi is the DN of Ranger's certificate)
(CN=ambari03.xxxx.xxxx, OU=NiFi is the DN of NiFi node's certificate)
(Both DN of Ranger and NiFi nodes user manually created in Ranger admin UI as internal)
Why NiFi cant sync policies from Ranger(message in nifi-app.log).
2018-08-30 09:18:28,095 WARN [Thread-22] o.a.r.admin.client.RangerAdminRESTClient Error getting policies. secureMode=false, user=nifi (auth:SIMPLE), response={"httpStatusCode":400,"statusCode":0}, serviceName=hdf_nifi
2018-08-30 09:18:28,095 WARN [Thread-22] o.a.ranger.plugin.util.PolicyRefresher cache file does not exist or not readable '/etc/ranger/hdf_nifi/policycache/hdf_nifi_hdf_nifi.json'
Here is my config and some log files.
authorizers.xml:
nifi-app.log:
xa_portal.log:
The following are the information of configuration:
(1)HDF：
#3 nodes cluster
#Kerberos security is disabled
(2)NiFi：
#install on node1~3
#SSL enabled with certificates manually installed
#Authenticate by AD using SIMPLE connection
(3)Ranger：
#install on node1(Admin & Usersync)
#SSL enabled
#Authenticate by AD
#Sync User from AD
Thanks for your help.
... View more
