Repository: nifi Updated Branches: refs/heads/master 36846e0fe -> bc005e339
NIFI-2772: Unsecure RAW Site-to-Site fails with User DN is not known This closes #1019. Signed-off-by: Bryan Bende <[email protected]> Project: http://git-wip-us.apache.org/repos/asf/nifi/repo Commit: http://git-wip-us.apache.org/repos/asf/nifi/commit/bc005e33 Tree: http://git-wip-us.apache.org/repos/asf/nifi/tree/bc005e33 Diff: http://git-wip-us.apache.org/repos/asf/nifi/diff/bc005e33 Branch: refs/heads/master Commit: bc005e3398c2a73b8149d85fd3598dd4b5616b11 Parents: 36846e0 Author: Koji Kawamura <[email protected]> Authored: Wed Sep 14 09:36:46 2016 +0900 Committer: Bryan Bende <[email protected]> Committed: Wed Sep 14 10:39:11 2016 -0400 ---------------------------------------------------------------------- .../main/java/org/apache/nifi/remote/StandardRootGroupPort.java | 4 ++++ 1 file changed, 4 insertions(+) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/nifi/blob/bc005e33/nifi-nar-bundles/nifi-framework-bundle/nifi-framework/nifi-site-to-site/src/main/java/org/apache/nifi/remote/StandardRootGroupPort.java ---------------------------------------------------------------------- diff --git a/nifi-nar-bundles/nifi-framework-bundle/nifi-framework/nifi-site-to-site/src/main/java/org/apache/nifi/remote/StandardRootGroupPort.java b/nifi-nar-bundles/nifi-framework-bundle/nifi-framework/nifi-site-to-site/src/main/java/org/apache/nifi/remote/StandardRootGroupPort.java index a8bf127..a496652 100644 --- a/nifi-nar-bundles/nifi-framework-bundle/nifi-framework/nifi-site-to-site/src/main/java/org/apache/nifi/remote/StandardRootGroupPort.java +++ b/nifi-nar-bundles/nifi-framework-bundle/nifi-framework/nifi-site-to-site/src/main/java/org/apache/nifi/remote/StandardRootGroupPort.java @@ -346,6 +346,10 @@ public class StandardRootGroupPort extends AbstractPort implements RootGroupPort @Override public PortAuthorizationResult checkUserAuthorization(final String dn) { + if (!secure) { + return new StandardPortAuthorizationResult(true, "Site-to-Site is not Secure"); + } + if (dn == null) { final String message = String.format("%s authorization failed for user %s because the DN is unknown", this, dn); logger.warn(message);
