[
https://issues.apache.org/jira/browse/NIFI-14045?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
christofe lintermans updated NIFI-14045:
----------------------------------------
Description:
* The "auth environment variable" refers to an environment variable that NiFi
expects to indicate the type of user authentication (TLS, LDAP, Kerberos).
* The problem here is that without a properly set environment variable for
AUTH, where I just want to use simple user/pw, the entire SSL security chain is
also not triggered effectively. NiFi starts up and generates a custom keystore
& truststore PCKS12. I have no way of controlling these certificates, except
by setting the "AUTH" environment variable. The issue is probably that when
the auth is not specified, it doesn't execute the secure.sh script.
was:
* The "auth environment variable" refers to an environment variable that NiFi
expects to indicate the type of user authentication (TLS, LDAP, Kerberos).
* The problem here is that without a properly set environment variable for
AUTH, the entire SSL security chain is also not triggered effectively. NiFi
starts up and generates a custom keystore & truststore PCKS12. I have no way
of controlling these certificates, except by setting the "AUTH" environment
variable. The issue is probably that when the auth is not specified, it
doesn't execute the secure.sh script.
> Auth environment variable not set, key and trust store environment variables
> are not implied.
> ---------------------------------------------------------------------------------------------
>
> Key: NIFI-14045
> URL: https://issues.apache.org/jira/browse/NIFI-14045
> Project: Apache NiFi
> Issue Type: Bug
> Components: Docker, Security
> Affects Versions: 2.0.0
> Environment: single VM, single NiFi (unclustered)
> docker ce
> official apache/nifi:2.0.0 image
> Reporter: christofe lintermans
> Priority: Critical
> Fix For: 2.0.0
>
>
> * The "auth environment variable" refers to an environment variable that NiFi
> expects to indicate the type of user authentication (TLS, LDAP, Kerberos).
> * The problem here is that without a properly set environment variable for
> AUTH, where I just want to use simple user/pw, the entire SSL security chain
> is also not triggered effectively. NiFi starts up and generates a custom
> keystore & truststore PCKS12. I have no way of controlling these
> certificates, except by setting the "AUTH" environment variable. The issue
> is probably that when the auth is not specified, it doesn't execute the
> secure.sh script.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
