[
https://issues.apache.org/jira/browse/NIFI-2561?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15424845#comment-15424845
]
Matt Gilman commented on NIFI-2561:
-----------------------------------
Properties previously used for SPNEGO have been renamed...
{code}
nifi.kerberos.service.principal=
nifi.kerberos.keytab.location=
{code}
to
{code}
nifi.kerberos.spnego.principal=
nifi.kerberos.spnego.keytab.location=
{code}
in order to disambiguate sevice from SPNEGO principles.
> Need to separate SPNEGO and service principals for Kerberos
> -----------------------------------------------------------
>
> Key: NIFI-2561
> URL: https://issues.apache.org/jira/browse/NIFI-2561
> Project: Apache NiFi
> Issue Type: Bug
> Components: Core Framework
> Affects Versions: 1.0.0
> Reporter: Joseph Witt
> Assignee: Matt Gilman
> Labels: migration
> Fix For: 1.0.0
>
>
> Today we have a single principal used for interacting with NiFi via SPNEGO
> and when operating as a service. We should offer a way to specify/establish
> these principals separately such as
> nifi.kerberos.service.principal=nifi/hostname@REALM
> nifi.kerberos.service.keytab=path
> nifi.kerberos.spnego.principal=HTTP/hostname@REALM
> nifi.kerberos.spnego.keytab=path
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
