Spoke too soon. See https://issues.apache.org/jira/browse/NIFI-6988
On 1/23/20, 4:23 PM, "Shawn Weeks" <[email protected]> wrote: Password based Kerberos is in the works and might have made it in 1.11. I’ve been seeing the pull requests for a while now. Thanks Shawn Sent from my iPhone > On Jan 23, 2020, at 11:22 AM, Pat White <[email protected]> wrote: > > Hi Folks, > > Is there any support for Kerberos authentication using Pkinit versus > keytabs, now or planned? > > Don't believe i saw anything documented, in Jira or in the src yet, but > wanted to ask in case i've missed something. Specifically looking at use by > processors, such as a service like the KeytabCredentialsService, as > opposed to user or ZK authentication. > > If not, any thoughts on an implementation approach? It seemed as though > creating a peer service, or adding an x509 API to the existing service was > reasonable, however it looks like significant work is needed to have > Kerberos aware processors support both credential schemes. > > patw
