[
https://issues.apache.org/jira/browse/NIFI-6206?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16815667#comment-16815667
]
Bryan Bende commented on NIFI-6206:
-----------------------------------
[~markbean] this is actually already how it is supposed to work..
[https://github.com/apache/nifi/blob/master/nifi-nar-bundles/nifi-framework-bundle/nifi-framework/nifi-framework-core/src/main/java/org/apache/nifi/controller/StandardFlowSynchronizer.java#L469-L474]
It will only inherit if the node has no users or policies locally. A common
issue is if the node has no flow or users/policies, but has an "Initial Admin"
in the authorizers.xml, then when it starts up it will first generate the local
user and policies, then attempt to join the cluster and will likely be in
conflict if the cluster has any other users and policies. So you have to make
sure to clear out the Initial Admin when attempting to inherit everything.
> flow inheritance should include authorizations.xml and users.xml
> ----------------------------------------------------------------
>
> Key: NIFI-6206
> URL: https://issues.apache.org/jira/browse/NIFI-6206
> Project: Apache NiFi
> Issue Type: Improvement
> Components: Core Framework
> Affects Versions: 1.9.2
> Reporter: Mark Bean
> Priority: Major
>
> When a Node joins a cluster and does not contain a flow.xml.gz file, the file
> is downloaded from the Cluster. The same is not true for either
> authorizations.xml nor users.xml. However, both of these files contain
> elements of the flow that are verified for consistency before a Node is
> allowed to join the Cluster.
> Recommended change: just as in the case of flow.xml.gz, a missing
> authorizations.xml and/or users.xml file should be inherited and downloaded
> from the Cluster.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
