Hello, I am setting up an HDF 3.2 cluster that's fully Kerberized and I am trying to handle authorization through Ranger. We have a single Active Directory which also acts as KDC. The technical users (for example the service principals automatically created by HDF) are mapped in the following organization unit: OU=HDF,DC=example,DC=com while "normal" users (devs/admins) are mapped in OU=USERS,DC=example,DC=com The problem is that after enabling NiFi plugin and Kafka plugin I have not been able to use any of the two (I added my username to the "admin" policies of both services in ranger). Since the two problems are probably linked, I will start from NiFi and if necessary expand on Kafka in another post. NiFi authentication works (the user is recognized) but I receive the following error: "Unable to view the user interface. Contact the system administrator." When I check the audit log I notice that the User is indicated with the full qualified domain name USER@EXAMPLE.COM (instead of just the username) and the access is denied. nifi.security.user.login.identity.provider=kerberos-provider I tried the following NiFi properties without success: nifi.security.identity.mapping.pattern.kerb=^(.?)@(.?)$ nifi.security.identity.mapping.value.kerb=$1 Could you help me solve this problem? Thanks ... View more