@GangWar  thank you so much for your help I assigned myself as "Power User" and it worked like charm. However I'm bit surprised as my user is admin user still I had to assign a power user role. ... View more

@GangWar any suggestion how to go about resolving this issue ? ... View more

Hi @GangWar  thank you for your reply. I tried Developer tool and I'm getting error as attached, could you suggest a possible fix ?  ... View more

@Shelton thank you for your response I did go through prerequisite and support matrix, it looks ok.   My on premise cluster is running on CDH&CM 6.3.0. Do let me know if you have more inputs ... View more

@MattWho I deleted local NIFI state directory and it worked like magic :), I finally have my first 7 node secured NIFI cluster accessible using client cert.   Thanks a ton for your valuable inputs and detailed explanations without which I might have been still stuck, highly appreciated. ... View more

@MattWho  from here does nifi picks up node Information for forming cluster ? Is this information stored in some directory or file?  ... View more

@MattWho ill try to delete local state directory and restart nodes , is there anything else I should look into ?  ... View more

@MattWho    thanks for the inputs I was able to resolve user certificate issue, but my UI is stuck with below issue. I' m not sure why its still referring to http port. It's kind of weird , can you please advise ?   java.net.ConnectException: Failed to connect to hostname/ip:8080 ... View more

@MattWho  I added client certificate in my browser . Below are steps i followed   I setup initial admin indentity in nifi conf as "Admin" Got client cert for "Admin" from IT team added cert in my browser.   Below is logline from my nifi-user.log.   "2020-02-10 11:18:54,677 INFO [main] o.a.n.a.FileAccessPolicyProvider Populating authorizations for Initial Admin: Admin 2020-02-10 11:18:54,693 INFO [main] o.a.n.a.FileAccessPolicyProvider Authorizations file loaded at Mon Feb 10 11:18:54 SGT 2020 2020-02-10 11:19:12,609 INFO [NiFi Web Server-48] o.a.n.w.a.c.IllegalStateExceptionMapper java.lang.IllegalStateException: Kerberos ticket login not supported by this NiFi.. Returning Conflict response. 2020-02-10 11:19:12,641 INFO [NiFi Web Server-36] o.a.n.w.a.c.IllegalStateExceptionMapper java.lang.IllegalStateException: OpenId Connect is not configured.. Returning Conflict response." 2020-02-10 11:19:12,666 INFO [NiFi Web Server-48] o.a.n.w.s.NiFiAuthenticationFilter Attempting request for (CN=nifi-host1, OU=nifi, O=Liongate, L=nifi, ST=SG, C=SG) GET https://localhost:8443/nifi-api/flow/current-user (source ip: <ip>) 2020-02-10 11:19:12,673 INFO [NiFi Web Server-48] o.a.n.w.s.NiFiAuthenticationFilter Authentication success for CN=nifi-host1, OU=nifi, O=nifi, L=SG, ST=SG, C=SG 2020-02-10 11:19:12,738 INFO [NiFi Web Server-48] o.a.n.w.a.c.AccessDeniedExceptionMapper identity[CN=nifi-host1, OU=nifi, O=nifi, L=SG, ST=SG, C=SG], groups[] does not have permission to access the requested resource. Unable to view the user interface. Returning Forbidden response. 2020-02-10 11:22:11,245 INFO [main] o.a.n.a.FileUserGroupProvider Users/Groups file loaded at Mon Feb 10 11:22:11 SGT 2020 ... View more