[
https://issues.apache.org/jira/browse/NIFI-4710?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16573170#comment-16573170
]
ASF GitHub Bot commented on NIFI-4710:
--------------------------------------
Github user pepov commented on the issue:
https://github.com/apache/nifi/pull/2866
@SarthakSahu we didn't mean to discourage you, I beleive it would be great
to have the SPNEGO setup working and it's not far from the proposed changeset
at all. When you create the user principal you can also create another one (the
SPN) for NiFi as well and save the keytab.
It can be as easy as:
```
addprinc -randkey HTTP/example.com
ktadd -k nifi.keytab HTTP/example.com
```
Then you need to get `nifi.keytab` add it to your volume mount and
configure the `nifi.kerberos.spnego.principal` and
`nifi.kerberos.spnego.keytab.location` properties and you should be ready to go.
To test it you need to use `kinit` on your local machine and configure your
browser to be able to use SPNEGO. For an example see:
https://bryanbende.com/development/2016/08/31/apache-nifi-1.0.0-kerberos-authentication
> Kerberos
> --------
>
> Key: NIFI-4710
> URL: https://issues.apache.org/jira/browse/NIFI-4710
> Project: Apache NiFi
> Issue Type: Sub-task
> Components: Docker
> Reporter: Aldrin Piri
> Assignee: Sarthak
> Priority: Major
>
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
