[
https://issues.apache.org/jira/browse/NIFI-10467?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
David Handermann resolved NIFI-10467.
-------------------------------------
Fix Version/s: (was: 1.16.3)
Assignee: David Handermann
Resolution: Information Provided
NiFi supports X.509 client certificate authentication in addition to other
types of authentication, including OIDC.
In this scenario, it is possible to issue a client certificate to the
monitoring server and use it for mutual TLS authentication to the NiFi REST
API. This requires configuring the certificate subject distinguished name in
the list of authorized users, and it requires that a trusted certificate
authority issues the certificate.
See the NiFi documentation on TLS configuration, and feel free to follow up if
there are additional questions.
https://nifi.apache.org/docs/nifi-docs/html/walkthroughs.html#securing-nifi-with-tls
> Unable to access API with OIDC login "Anonymous authentication has not been
> configured."
> ----------------------------------------------------------------------------------------
>
> Key: NIFI-10467
> URL: https://issues.apache.org/jira/browse/NIFI-10467
> Project: Apache NiFi
> Issue Type: Wish
> Components: Configuration
> Affects Versions: 1.16.3
> Reporter: Jack Burton
> Assignee: David Handermann
> Priority: Major
>
> We have a problem with the health check monitoring cluster nifi with zabbix
> After create web scenario for monitoring nifi and trying to check status
> cluster, we receive 401 http error for
> https://nificluster/nifi-api/flow/cluster/summary
> The step for monitoring are:
> 1 - connecting to site https://nificluster/nifi/ (using zabbix basic login)
> and it's ok with http 200
> 2 - connecting to api nifi https://nificluster/nifi-api/flow/cluster/summary
> error 401.
> In our nifi cluster is configurate oidc login.
> If I try to connect to https://nificluster/nifi/ via browser and switch url
> in https://nificluster/nifi-api/flow/cluster/summary it's ok, I see the
> status cluster but not from zabbix.
> there is a method to resolve this issue or a bash scripting that can to
> resolve it? Or how I can montoring the status cluster with other methods?
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
