[
https://issues.apache.org/jira/browse/NIFI-2525?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15435987#comment-15435987
]
ASF GitHub Bot commented on NIFI-2525:
--------------------------------------
Github user YolandaMDavis commented on the issue:
https://github.com/apache/nifi/pull/915
I setup 2 standalone nifi instances on separate hosts and created a 3rd
host to serve as proxy server using Apache Web. NiFi server A was set as the
push server which generated 10MB Flow Files every 10 seconds. Server A referred
to server B via a RPG. Server B received input flowfiles and saved them to disk
via PutFile. The following test configurations were performed:
1) Unsecured NiFi instances with no Proxy - Data was exchanged and saved
on Server B as expected
2) Unsecured NiFi instance with Proxy (Basic/Digest Auth) - when attempting
to post via Proxy on Server B endpoint nifi-api/data-transfer/input-ports,
proxy logged connection attempt with Status 407 415 (authentication required,
post method). Proxy logged subsequent responses of 201 or 202 for these
attempts. For deletes, 407/415 were logged and subsequent 200 was received
(OK). No exception seen in log on either server. Data exchange completed
successfully
4) Secured NiFi Instances with no Proxy - After required policy updates in
NiFi data was exchanged and performed as expected
5) Secured NiFi Instances with Proxy (Basic/Digest Auth) - Results same as
test #2 however proxy logs did not detail resource endpoints accessed (I
believe due to SSL enabled)
6) Secured NiFi instances with Proxy (No User/Pass Provided) - NiFi logged
error indicating : Unable to refresh Remote Group's peers due to response code
407:Proxy Authentication Required with explanation: null. Error Message was
expected and resolved once user/pass provided for proxy.
Given the above tests I believe that proxy authentication is working as
expected with this patch
+1
Will merge into master shortly
> HTTP Site-to-Site fails with java.nio.channels.AsynchronousCloseException
> when sending through proxy that requires authentication
> ---------------------------------------------------------------------------------------------------------------------------------
>
> Key: NIFI-2525
> URL: https://issues.apache.org/jira/browse/NIFI-2525
> Project: Apache NiFi
> Issue Type: Bug
> Components: Core Framework
> Affects Versions: 1.0.0
> Reporter: Koji Kawamura
> Fix For: 1.0.0
>
>
> Pulling data using Remote Process Group from output port works.
> However, pushing data using Remote Process Group to input port fails with
> AsynchronousCloseException.
> A RPG sends data via POST, then a proxy server returns 407: proxy auth
> required. After this, the RPG should resend the request with credential, but
> the data channel is already closed.
> Currently, it uses chunked encoding so that it can stream data to send.
> Sending actual data twice won't be efficient. We need to do the
> authentication before start reading flow-file stream.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
