[
https://issues.apache.org/jira/browse/NIFIREG-149?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16386755#comment-16386755
]
ASF GitHub Bot commented on NIFIREG-149:
----------------------------------------
GitHub user scottyaslan opened a pull request:
https://github.com/apache/nifi-registry/pull/104
[NIFIREG-149] directs user to login page for LDAP
You can merge this pull request into a Git repository by running:
$ git pull https://github.com/scottyaslan/nifi-registry NIFIREG-149
Alternatively you can review and apply these changes as the patch at:
https://github.com/apache/nifi-registry/pull/104.patch
To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:
This closes #104
----
commit 30b8e19b84acc34fbe20606cf3ec168f371f69b2
Author: Scott Aslan <scottyaslan@...>
Date: 2018-03-05T19:05:38Z
[NIFIREG-149] directs user to login page for LDAP
----
> NiFi Registry UI never directs user to login page for LDAP
> ----------------------------------------------------------
>
> Key: NIFIREG-149
> URL: https://issues.apache.org/jira/browse/NIFIREG-149
> Project: NiFi Registry
> Issue Type: Bug
> Reporter: Kevin Doran
> Assignee: Scott Aslan
> Priority: Blocker
>
> This does not affect any released version, but [the current master (as of
> 2018-03-05)|https://github.com/apache/nifi-registry/commit/24039e63dbb33d61b88235532f059bec8d3a0617]
> exhibits this behavior:
> When using LDAP login, the auth-guard for the UI is not falling through to
> the login page. It is getting stuck in an infinite loop attempting to use
> Kerberos ticket exchange and certificates.
> Steps to reproduce: Configure NiFi Registry with LDAP identity provider /
> user group provider. Access any UI resource such as /nifi-registry or
> /nifi-registry/login. You will be stuck in an infinite loop attempting to
> check the current browser credentials (can view this in the developer tools
> -> network tab)
> *Expected behavior:* It should try Kerberos, then certs, then present the
> user with the user/pass Login page where I can enter LDAP credentials.
> I did not have a NiFi Registry JWT in my browser. This was tested with latest
> Chrome for macOS.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
