About BGabor

BGabor · ‎06-13-2022

Use Influx or Prometheus as a "storage" layer. Influx has a better NiFi Processor, than the built-in NiFi. You can download the nar from Influx's site.

RajeshBodolla · ‎06-29-2021

I have upgraded from 7.1.1 to 7.1.6 and "Upgrade Ranger database and apply patches" is grayed out.

Nandinin · ‎05-04-2021

Hello @BGabor This error "TrustManager is not specified" can be thrown due to some of the following issues - Missing cert files or missing/wrong values for the below configs Make sure following properties are set:- xasecure.policymgr.clientssl.keystore.credential.file=jceks://file/{{credential_file}} xasecure.policymgr.clientssl.truststore.credential.file=jceks://file/{{credential_file}} xasecure.policymgr.clientssl.truststore=/path/to/truststore Also came across these Ranger jiras which indicates that the truststore info not specified in cacert or cacert needs to be manually configured. Note - they are fixed in Ranger 2.0.1, so you may also want to check the ranger version. https://issues.apache.org/jira/browse/RANGER-2611 https://issues.apache.org/jira/browse/RANGER-2907

BGabor · ‎04-22-2021

I think you can solve it with JOLT Transform.

BGabor · ‎11-24-2020

Just simple print it.

BGabor · ‎11-24-2020

Hi, nifi user will run this. If you saving a keytab to a folder to which nifi user has the read access, you can use kinit in bash to initialize an another user. BR, Gabor

BGabor · ‎10-09-2020

It's working for me now with our AD. I had to add the group as external with @domainname.com, even if Ranger imports this without. You don't have to do anything else. The reason for this: in our environment if I executing groups [userid], I get the AD Groups in FQDN format, so you have to have it in Ranger in FQDN format too.

venkii · ‎08-25-2020

@BGabor thanks for your response I'm trying to understand the difference between two blocks given in the document #BLOCK1 activeDirectoryRealm = org.apache.zeppelin.realm.ActiveDirectoryGroupRealm activeDirectoryRealm.systemUsername = userNameA activeDirectoryRealm.systemPassword = passwordA activeDirectoryRealm.searchBase = CN=Users,DC=SOME_GROUP,DC=COMPANY,DC=COM activeDirectoryRealm.url = ldap://ldap.test.com:389 activeDirectoryRealm.groupRolesMap = "CN=aGroupName,OU=groups,DC=SOME_GROUP,DC=COMPANY,DC=COM":"group1" activeDirectoryRealm.authorizationCachingEnabled = false activeDirectoryRealm.principalSuffix = @corp.company.net ##BLOCK2 ldapRealm = org.apache.zeppelin.realm.LdapGroupRealm # search base for ldap groups (only relevant for LdapGroupRealm): ldapRealm.contextFactory.environment[ldap.searchBase] = dc=COMPANY,dc=COM ldapRealm.contextFactory.url = ldap://ldap.test.com:389 ldapRealm.userDnTemplate = uid={0},ou=Users,dc=COMPANY,dc=COM ldapRealm.contextFactory.authenticationMechanism = simple also define roles/groups that you want to have in the system, like below; [roles] admin = * hr = * finance = * group1 = * . could you help me understand? i want to extract only one group and users from AD, which block should I use. thanks

BGabor · ‎10-03-2019

You can change the variables with REST API, but I wouldn't suggest this. 1. In this case within NIFI Cluster version numbers could be different between Nodes 2. After variable update a restart is required for controller and processor too (it doesn't matter if you changing it with REST API, or with other methods), you can check the process, when you manually changing it. It's better to create a flowfile with attributes, or write-back data to sources (if it's a database), and compare it from there if possible. If you have an another solution, please share it :).

Online	Offline
Last Visited	‎06-08-2023 12:18 PM

Member Since	‎08-28-2019 07:37 AM
Last Visited	‎06-08-2023 12:18 PM
Posts	17
Kudos received	1

Cloudera Community

Re: Unable to Publish Invokehttp Response to Grafa...

Re: Cloudera Atlas 2.0; error when acess any item,...

Re: Kafka Ranger SSL integration issue

Re: Nifi Nested JSON flowfile into multiple flowfi...

Re: NiFi: ExecuteStreamCommand STDIN and STDOUT

Re: NiFi: ExecuteStreamCommand

Re: Ranger LDAP groups not working

Re: Apache Zeppelin - AD integration Version 0.8.2

Re: Apache NIFI - how I can change value of globa...