Re: [ANNOUNCE] New NiFi PMC member Drew Lim

2020-05-29 Thread Andrew Lim
Thanks everyone! Excited about NiFi's future with you all!

-Drew

On Fri, May 29, 2020 at 5:24 PM Mike Thomsen  wrote:

> Congratulations!
>
> On Fri, May 29, 2020 at 4:56 PM Peter Turcsanyi 
> wrote:
>
> > Congrats Drew!
> >
> > On Fri, May 29, 2020 at 10:50 PM Joe Witt  wrote:
> >
> > > congrats Drew!  youve been helping make nifi easier to use for a long
> > time
> > >
> > > On Fri, May 29, 2020 at 1:32 PM Andy LoPresto 
> > > wrote:
> > >
> > > > Congratulations and welcome Drew. The work you’ve done makes the
> > > community
> > > > so much more accessible and drives user success everywhere. I refer
> to
> > > your
> > > > work myself all the time. Looking forward for your continued
> > > contributions.
> > > >
> > > > Andy LoPresto
> > > > alopre...@apache.org
> > > > alopresto.apa...@gmail.com
> > > > He/Him
> > > > PGP Fingerprint: 70EC B3E5 98A6 5A3F D3C4  BACE 3C6E F65B 2F7D EF69
> > > >
> > > > > On May 29, 2020, at 1:18 PM, Pierre Villard <
> > > pierre.villard...@gmail.com>
> > > > wrote:
> > > > >
> > > > > Awesome Drew! Congrats! Your work is super useful for all the
> > > community,
> > > > > well deserved!
> > > > >
> > > > > Le ven. 29 mai 2020 à 21:55, Tony Kurc  a écrit
> :
> > > > >
> > > > >> NiFi Community,
> > > > >>
> > > > >> On behalf of the Apache NiFi PMC, I am pleased to announce that
> Drew
> > > Lim
> > > > >> has accepted the PMC's invitation to join the Apache NiFi PMC.
> > > > >>
> > > > >> Drew has been doing an amazing job for several years making NiFi
> > more
> > > > >> approachable and usable. He's contributed to almost every part of
> > > NiFi;
> > > > >> going over and beyond to improve documentation and usability.
> > > > >>
> > > > >> Please join us in congratulating and welcoming Drew to the Apache
> > NiFi
> > > > PMC.
> > > > >>
> > > > >> Congratulations Drew!
> > > > >>
> > > > >> Tony
> > > > >>
> > > >
> > > >
> > >
> >
>


Re: [ANNOUNCE] New NiFi PMC member Arpad Boda

2020-05-29 Thread Mike Thomsen
Congratulations!

On Fri, May 29, 2020 at 4:55 PM Peter Turcsanyi 
wrote:

> Congrats Arpad!
>
> On Fri, May 29, 2020 at 10:46 PM Joe Witt  wrote:
>
> > Congrats and thank you!
> >
> > On Fri, May 29, 2020 at 1:32 PM Andy LoPresto 
> > wrote:
> >
> > > Congratulations Arpad, very well deserved and excited to see your
> > > continued contributions. Pálinka on me next time I’m in Budapest.
> > >
> > > Andy LoPresto
> > > alopre...@apache.org
> > > alopresto.apa...@gmail.com
> > > He/Him
> > > PGP Fingerprint: 70EC B3E5 98A6 5A3F D3C4  BACE 3C6E F65B 2F7D EF69
> > >
> > > > On May 29, 2020, at 1:16 PM, Pierre Villard <
> > pierre.villard...@gmail.com>
> > > wrote:
> > > >
> > > > Congrats Arpad, very well deserved!
> > > >
> > > > Le ven. 29 mai 2020 à 21:48, Tony Kurc  a écrit :
> > > >
> > > >> NiFi Community,
> > > >>
> > > >> On behalf of the Apache NiFi PMC, I am pleased to announce that
> Arpad
> > > Boda
> > > >> has accepted the PMC's invitation to join the Apache NiFi PMC.
> > > >>
> > > >> In addition to being a regular code contributor and engaged
> community
> > > >> member with the project, (especially MiNiFi C++!) for quite some
> time,
> > > >> Arpad has done the arduous task of being a release manager for both
> > NiFi
> > > >> Registry and MiNiFi C++, which is a challenging and detail oriented
> > > task.
> > > >>
> > > >> Please join us in congratulating and welcoming Arpad to the Apache
> > NiFi
> > > >> PMC.
> > > >>
> > > >> Congratulations Arpad!
> > > >>
> > > >> Tony
> > > >>
> > >
> > >
> >
>


Re: [ANNOUNCE] New NiFi PMC member Drew Lim

2020-05-29 Thread Mike Thomsen
Congratulations!

On Fri, May 29, 2020 at 4:56 PM Peter Turcsanyi 
wrote:

> Congrats Drew!
>
> On Fri, May 29, 2020 at 10:50 PM Joe Witt  wrote:
>
> > congrats Drew!  youve been helping make nifi easier to use for a long
> time
> >
> > On Fri, May 29, 2020 at 1:32 PM Andy LoPresto 
> > wrote:
> >
> > > Congratulations and welcome Drew. The work you’ve done makes the
> > community
> > > so much more accessible and drives user success everywhere. I refer to
> > your
> > > work myself all the time. Looking forward for your continued
> > contributions.
> > >
> > > Andy LoPresto
> > > alopre...@apache.org
> > > alopresto.apa...@gmail.com
> > > He/Him
> > > PGP Fingerprint: 70EC B3E5 98A6 5A3F D3C4  BACE 3C6E F65B 2F7D EF69
> > >
> > > > On May 29, 2020, at 1:18 PM, Pierre Villard <
> > pierre.villard...@gmail.com>
> > > wrote:
> > > >
> > > > Awesome Drew! Congrats! Your work is super useful for all the
> > community,
> > > > well deserved!
> > > >
> > > > Le ven. 29 mai 2020 à 21:55, Tony Kurc  a écrit :
> > > >
> > > >> NiFi Community,
> > > >>
> > > >> On behalf of the Apache NiFi PMC, I am pleased to announce that Drew
> > Lim
> > > >> has accepted the PMC's invitation to join the Apache NiFi PMC.
> > > >>
> > > >> Drew has been doing an amazing job for several years making NiFi
> more
> > > >> approachable and usable. He's contributed to almost every part of
> > NiFi;
> > > >> going over and beyond to improve documentation and usability.
> > > >>
> > > >> Please join us in congratulating and welcoming Drew to the Apache
> NiFi
> > > PMC.
> > > >>
> > > >> Congratulations Drew!
> > > >>
> > > >> Tony
> > > >>
> > >
> > >
> >
>


Re: [ANNOUNCE] New NiFi PMC member Drew Lim

2020-05-29 Thread Peter Turcsanyi
Congrats Drew!

On Fri, May 29, 2020 at 10:50 PM Joe Witt  wrote:

> congrats Drew!  youve been helping make nifi easier to use for a long time
>
> On Fri, May 29, 2020 at 1:32 PM Andy LoPresto 
> wrote:
>
> > Congratulations and welcome Drew. The work you’ve done makes the
> community
> > so much more accessible and drives user success everywhere. I refer to
> your
> > work myself all the time. Looking forward for your continued
> contributions.
> >
> > Andy LoPresto
> > alopre...@apache.org
> > alopresto.apa...@gmail.com
> > He/Him
> > PGP Fingerprint: 70EC B3E5 98A6 5A3F D3C4  BACE 3C6E F65B 2F7D EF69
> >
> > > On May 29, 2020, at 1:18 PM, Pierre Villard <
> pierre.villard...@gmail.com>
> > wrote:
> > >
> > > Awesome Drew! Congrats! Your work is super useful for all the
> community,
> > > well deserved!
> > >
> > > Le ven. 29 mai 2020 à 21:55, Tony Kurc  a écrit :
> > >
> > >> NiFi Community,
> > >>
> > >> On behalf of the Apache NiFi PMC, I am pleased to announce that Drew
> Lim
> > >> has accepted the PMC's invitation to join the Apache NiFi PMC.
> > >>
> > >> Drew has been doing an amazing job for several years making NiFi more
> > >> approachable and usable. He's contributed to almost every part of
> NiFi;
> > >> going over and beyond to improve documentation and usability.
> > >>
> > >> Please join us in congratulating and welcoming Drew to the Apache NiFi
> > PMC.
> > >>
> > >> Congratulations Drew!
> > >>
> > >> Tony
> > >>
> >
> >
>


Re: [ANNOUNCE] New NiFi PMC member Arpad Boda

2020-05-29 Thread Peter Turcsanyi
Congrats Arpad!

On Fri, May 29, 2020 at 10:46 PM Joe Witt  wrote:

> Congrats and thank you!
>
> On Fri, May 29, 2020 at 1:32 PM Andy LoPresto 
> wrote:
>
> > Congratulations Arpad, very well deserved and excited to see your
> > continued contributions. Pálinka on me next time I’m in Budapest.
> >
> > Andy LoPresto
> > alopre...@apache.org
> > alopresto.apa...@gmail.com
> > He/Him
> > PGP Fingerprint: 70EC B3E5 98A6 5A3F D3C4  BACE 3C6E F65B 2F7D EF69
> >
> > > On May 29, 2020, at 1:16 PM, Pierre Villard <
> pierre.villard...@gmail.com>
> > wrote:
> > >
> > > Congrats Arpad, very well deserved!
> > >
> > > Le ven. 29 mai 2020 à 21:48, Tony Kurc  a écrit :
> > >
> > >> NiFi Community,
> > >>
> > >> On behalf of the Apache NiFi PMC, I am pleased to announce that Arpad
> > Boda
> > >> has accepted the PMC's invitation to join the Apache NiFi PMC.
> > >>
> > >> In addition to being a regular code contributor and engaged community
> > >> member with the project, (especially MiNiFi C++!) for quite some time,
> > >> Arpad has done the arduous task of being a release manager for both
> NiFi
> > >> Registry and MiNiFi C++, which is a challenging and detail oriented
> > task.
> > >>
> > >> Please join us in congratulating and welcoming Arpad to the Apache
> NiFi
> > >> PMC.
> > >>
> > >> Congratulations Arpad!
> > >>
> > >> Tony
> > >>
> >
> >
>


Re: [ANNOUNCE] New NiFi PMC member Drew Lim

2020-05-29 Thread Joe Witt
congrats Drew!  youve been helping make nifi easier to use for a long time

On Fri, May 29, 2020 at 1:32 PM Andy LoPresto  wrote:

> Congratulations and welcome Drew. The work you’ve done makes the community
> so much more accessible and drives user success everywhere. I refer to your
> work myself all the time. Looking forward for your continued contributions.
>
> Andy LoPresto
> alopre...@apache.org
> alopresto.apa...@gmail.com
> He/Him
> PGP Fingerprint: 70EC B3E5 98A6 5A3F D3C4  BACE 3C6E F65B 2F7D EF69
>
> > On May 29, 2020, at 1:18 PM, Pierre Villard 
> wrote:
> >
> > Awesome Drew! Congrats! Your work is super useful for all the community,
> > well deserved!
> >
> > Le ven. 29 mai 2020 à 21:55, Tony Kurc  a écrit :
> >
> >> NiFi Community,
> >>
> >> On behalf of the Apache NiFi PMC, I am pleased to announce that Drew Lim
> >> has accepted the PMC's invitation to join the Apache NiFi PMC.
> >>
> >> Drew has been doing an amazing job for several years making NiFi more
> >> approachable and usable. He's contributed to almost every part of NiFi;
> >> going over and beyond to improve documentation and usability.
> >>
> >> Please join us in congratulating and welcoming Drew to the Apache NiFi
> PMC.
> >>
> >> Congratulations Drew!
> >>
> >> Tony
> >>
>
>


Re: [ANNOUNCE] New NiFi PMC member Arpad Boda

2020-05-29 Thread Joe Witt
Congrats and thank you!

On Fri, May 29, 2020 at 1:32 PM Andy LoPresto  wrote:

> Congratulations Arpad, very well deserved and excited to see your
> continued contributions. Pálinka on me next time I’m in Budapest.
>
> Andy LoPresto
> alopre...@apache.org
> alopresto.apa...@gmail.com
> He/Him
> PGP Fingerprint: 70EC B3E5 98A6 5A3F D3C4  BACE 3C6E F65B 2F7D EF69
>
> > On May 29, 2020, at 1:16 PM, Pierre Villard 
> wrote:
> >
> > Congrats Arpad, very well deserved!
> >
> > Le ven. 29 mai 2020 à 21:48, Tony Kurc  a écrit :
> >
> >> NiFi Community,
> >>
> >> On behalf of the Apache NiFi PMC, I am pleased to announce that Arpad
> Boda
> >> has accepted the PMC's invitation to join the Apache NiFi PMC.
> >>
> >> In addition to being a regular code contributor and engaged community
> >> member with the project, (especially MiNiFi C++!) for quite some time,
> >> Arpad has done the arduous task of being a release manager for both NiFi
> >> Registry and MiNiFi C++, which is a challenging and detail oriented
> task.
> >>
> >> Please join us in congratulating and welcoming Arpad to the Apache NiFi
> >> PMC.
> >>
> >> Congratulations Arpad!
> >>
> >> Tony
> >>
>
>


Re: [ANNOUNCE] New NiFi PMC member Drew Lim

2020-05-29 Thread Andy LoPresto
Congratulations and welcome Drew. The work you’ve done makes the community so 
much more accessible and drives user success everywhere. I refer to your work 
myself all the time. Looking forward for your continued contributions. 

Andy LoPresto
alopre...@apache.org
alopresto.apa...@gmail.com
He/Him
PGP Fingerprint: 70EC B3E5 98A6 5A3F D3C4  BACE 3C6E F65B 2F7D EF69

> On May 29, 2020, at 1:18 PM, Pierre Villard  
> wrote:
> 
> Awesome Drew! Congrats! Your work is super useful for all the community,
> well deserved!
> 
> Le ven. 29 mai 2020 à 21:55, Tony Kurc  a écrit :
> 
>> NiFi Community,
>> 
>> On behalf of the Apache NiFi PMC, I am pleased to announce that Drew Lim
>> has accepted the PMC's invitation to join the Apache NiFi PMC.
>> 
>> Drew has been doing an amazing job for several years making NiFi more
>> approachable and usable. He's contributed to almost every part of NiFi;
>> going over and beyond to improve documentation and usability.
>> 
>> Please join us in congratulating and welcoming Drew to the Apache NiFi PMC.
>> 
>> Congratulations Drew!
>> 
>> Tony
>> 



Re: [ANNOUNCE] New NiFi PMC member Arpad Boda

2020-05-29 Thread Andy LoPresto
Congratulations Arpad, very well deserved and excited to see your continued 
contributions. Pálinka on me next time I’m in Budapest. 

Andy LoPresto
alopre...@apache.org
alopresto.apa...@gmail.com
He/Him
PGP Fingerprint: 70EC B3E5 98A6 5A3F D3C4  BACE 3C6E F65B 2F7D EF69

> On May 29, 2020, at 1:16 PM, Pierre Villard  
> wrote:
> 
> Congrats Arpad, very well deserved!
> 
> Le ven. 29 mai 2020 à 21:48, Tony Kurc  a écrit :
> 
>> NiFi Community,
>> 
>> On behalf of the Apache NiFi PMC, I am pleased to announce that Arpad Boda
>> has accepted the PMC's invitation to join the Apache NiFi PMC.
>> 
>> In addition to being a regular code contributor and engaged community
>> member with the project, (especially MiNiFi C++!) for quite some time,
>> Arpad has done the arduous task of being a release manager for both NiFi
>> Registry and MiNiFi C++, which is a challenging and detail oriented task.
>> 
>> Please join us in congratulating and welcoming Arpad to the Apache NiFi
>> PMC.
>> 
>> Congratulations Arpad!
>> 
>> Tony
>> 



Re: [ANNOUNCE] New NiFi PMC member Drew Lim

2020-05-29 Thread Pierre Villard
Awesome Drew! Congrats! Your work is super useful for all the community,
well deserved!

Le ven. 29 mai 2020 à 21:55, Tony Kurc  a écrit :

> NiFi Community,
>
> On behalf of the Apache NiFi PMC, I am pleased to announce that Drew Lim
> has accepted the PMC's invitation to join the Apache NiFi PMC.
>
> Drew has been doing an amazing job for several years making NiFi more
> approachable and usable. He's contributed to almost every part of NiFi;
> going over and beyond to improve documentation and usability.
>
> Please join us in congratulating and welcoming Drew to the Apache NiFi PMC.
>
> Congratulations Drew!
>
> Tony
>


Re: [ANNOUNCE] New NiFi PMC member Arpad Boda

2020-05-29 Thread Pierre Villard
Congrats Arpad, very well deserved!

Le ven. 29 mai 2020 à 21:48, Tony Kurc  a écrit :

> NiFi Community,
>
> On behalf of the Apache NiFi PMC, I am pleased to announce that Arpad Boda
> has accepted the PMC's invitation to join the Apache NiFi PMC.
>
> In addition to being a regular code contributor and engaged community
> member with the project, (especially MiNiFi C++!) for quite some time,
> Arpad has done the arduous task of being a release manager for both NiFi
> Registry and MiNiFi C++, which is a challenging and detail oriented task.
>
> Please join us in congratulating and welcoming Arpad to the Apache NiFi
> PMC.
>
> Congratulations Arpad!
>
> Tony
>


[ANNOUNCE] New NiFi PMC member Drew Lim

2020-05-29 Thread Tony Kurc
NiFi Community,

On behalf of the Apache NiFi PMC, I am pleased to announce that Drew Lim
has accepted the PMC's invitation to join the Apache NiFi PMC.

Drew has been doing an amazing job for several years making NiFi more
approachable and usable. He's contributed to almost every part of NiFi;
going over and beyond to improve documentation and usability.

Please join us in congratulating and welcoming Drew to the Apache NiFi PMC.

Congratulations Drew!

Tony


[ANNOUNCE] New NiFi PMC member Arpad Boda

2020-05-29 Thread Tony Kurc
NiFi Community,

On behalf of the Apache NiFi PMC, I am pleased to announce that Arpad Boda
has accepted the PMC's invitation to join the Apache NiFi PMC.

In addition to being a regular code contributor and engaged community
member with the project, (especially MiNiFi C++!) for quite some time,
Arpad has done the arduous task of being a release manager for both NiFi
Registry and MiNiFi C++, which is a challenging and detail oriented task.

Please join us in congratulating and welcoming Arpad to the Apache NiFi PMC.

Congratulations Arpad!

Tony


Re: Nifi Over HTTPS

2020-05-29 Thread MYERS, KYLE


On 2020/05/29 18:40:02, "MYERS, KYLE"  wrote:
> Hello,>
>
> I am trying to set up Nifi over SSL/TLS connections. I am following the guide 
> https://nifi.apache.org/docs/nifi-docs/html/toolkit-guide.html#tls_intermediate_ca.>

>
> My scenarios is this:>
>
> I have an internal CA stood up using openssl, which I am using to sign 
> certificates. I have been attempting to set up the keystore and trustore but 
> have not had luck establishing trust between nifi and my cert signed by my 
> ca. I provide the ca-cert.pem to the trust store and add my nifi-cert.pem and 
> nifi-key.key to the keystore but still nothing.>

>
> I have verified that the nifi-cert.pem and ca-cert.pem have a chain of trust, 
> but nifi will still not trust my cert. Is there any specific configurations I 
> need to perform to get things working?>

>
> Any help or point in the right direction ASAP would be great.>
>
>
> Thank you,>
>
> Kyle Myers>
> AT&T CyberSecurity>
>


Re: Nifi Over HTTPS

2020-05-29 Thread James Srinivasan
Have you found the walkthroughs?

https://nifi.apache.org/docs/nifi-docs/html/walkthroughs.html#securing-nifi-with-tls


On Fri, 29 May 2020, 19:41 MYERS, KYLE,  wrote:

> Hello,
>
> I am trying to set up Nifi over SSL/TLS connections. I am following the
> guide
> https://nifi.apache.org/docs/nifi-docs/html/toolkit-guide.html#tls_intermediate_ca
> .
>
> My scenarios is this:
>
> I have an internal CA stood up using openssl, which I am using to sign
> certificates. I have been attempting to set up the keystore and trustore
> but have not had luck establishing trust between nifi and my cert signed by
> my ca. I provide the ca-cert.pem to the trust store and add my
> nifi-cert.pem and nifi-key.key to the keystore but still nothing.
>
> I have verified that the nifi-cert.pem and ca-cert.pem have a chain of
> trust, but nifi will still not trust my cert. Is there any specific
> configurations I need to perform to get things working?
>
> Any help or point in the right direction ASAP would be great.
>
>
> Thank you,
>
> Kyle Myers
> AT&T CyberSecurity
>


Nifi Over HTTPS

2020-05-29 Thread MYERS, KYLE
Hello,

I am trying to set up Nifi over SSL/TLS connections. I am following the guide 
https://nifi.apache.org/docs/nifi-docs/html/toolkit-guide.html#tls_intermediate_ca.

My scenarios is this:

I have an internal CA stood up using openssl, which I am using to sign 
certificates. I have been attempting to set up the keystore and trustore but 
have not had luck establishing trust between nifi and my cert signed by my ca. 
I provide the ca-cert.pem to the trust store and add my nifi-cert.pem and 
nifi-key.key to the keystore but still nothing.

I have verified that the nifi-cert.pem and ca-cert.pem have a chain of trust, 
but nifi will still not trust my cert. Is there any specific configurations I 
need to perform to get things working?

Any help or point in the right direction ASAP would be great.


Thank you,

Kyle Myers
AT&T CyberSecurity


Re: Please guide [how to do user authentication in NIfi with SSL]

2020-05-29 Thread Pierre Villard
Hi,

Can you make sure the host where NiFi is running has its time correctly
sync'ed (with systems like TLSdate or NTP)?
Sounds like there is a time difference between the NiFi host server and the
server issuing the token.

Thanks,
Pierre

Le ven. 29 mai 2020 à 18:54, Ashutosh Kumar (Group)
 a écrit :

> Hello Experts,
>
>
>
> I am new to Apache NiFi and  running 1.4.11.
>
>
>
> Wanted to set up NiFI SSL and authenticate user whoever is accessing this.
>
>
>
> I have spent almost 2 weeks but I am not able to achieve this. The
> documentation and online help is also not helping me.
>
> Wrote to multiple forums but no answers.
>
>
>
> Request you to please provide some guide or documentation so that I could
> succeed in this.
>
>
>
> Attaching my nifi.properties, authorizers.xml, users.xml and
> authrizations.xml for reference.
>
>
>
> I am getting below error when trying to authenticate using google OpenID.
>
>
>
> Please , please have a look and suggest what I am doing wrong.
>
>
>
> Thanks and Regards,
>
> Ashutosh
>
>
>
>
>
> 2020-05-29 12:21:40,514 INFO [NiFi Web Server-17]
> o.a.n.w.a.c.AccessDeniedExceptionMapper identity[anonymous], groups[none]
> does not have permission to access the requested resource. Unknown user
> with identity 'anonymous'. Returning Unauthorized response.
>
> 2020-05-29 12:21:42,915 ERROR [NiFi Web Server-23]
> org.apache.nifi.web.api.AccessResource Unable to exchange authorization for
> ID token: Unable to parse the response from the Token request: JWT issue
> time ahead of current time
>
> java.lang.RuntimeException: Unable to parse the response from the Token
> request: JWT issue time ahead of current time
>
> at
> org.apache.nifi.web.security.oidc.StandardOidcIdentityProvider.exchangeAuthorizationCode(StandardOidcIdentityProvider.java:330)
>
> at
> org.apache.nifi.web.security.oidc.OidcService.exchangeAuthorizationCode(OidcService.java:201)
>
> at
> org.apache.nifi.web.api.AccessResource.oidcCallback(AccessResource.java:257)
>
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>
> at
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
>
> at
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
>
> at java.lang.reflect.Method.invoke(Method.java:498)
>
> at
> org.glassfish.jersey.server.model.internal.ResourceMethodInvocationHandlerFactory.lambda$static$0(ResourceMethodInvocationHandlerFactory.java:76)
>
> at
> org.glassfish.jersey.server.model.internal.AbstractJavaResourceMethodDispatcher$1.run(AbstractJavaResourceMethodDispatcher.java:148)
>
> at
> org.glassfish.jersey.server.model.internal.AbstractJavaResourceMethodDispatcher.invoke(AbstractJavaResourceMethodDispatcher.java:191)
>
> at
> org.glassfish.jersey.server.model.internal.JavaResourceMethodDispatcherProvider$VoidOutInvoker.doDispatch(JavaResourceMethodDispatcherProvider.java:183)
>
> at
> org.glassfish.jersey.server.model.internal.AbstractJavaResourceMethodDispatcher.dispatch(AbstractJavaResourceMethodDispatcher.java:103)
>
> at
> org.glassfish.jersey.server.model.ResourceMethodInvoker.invoke(ResourceMethodInvoker.java:493)
>
> at
> org.glassfish.jersey.server.model.ResourceMethodInvoker.apply(ResourceMethodInvoker.java:415)
>
> at
> org.glassfish.jersey.server.model.ResourceMethodInvoker.apply(ResourceMethodInvoker.java:104)
>
> at
> org.glassfish.jersey.server.ServerRuntime$1.run(ServerRuntime.java:277)
>
> at org.glassfish.jersey.internal.Errors$1.call(Errors.java:272)
>
> at org.glassfish.jersey.internal.Errors$1.call(Errors.java:268)
>
> at org.glassfish.jersey.internal.Errors.process(Errors.java:316)
>
> at org.glassfish.jersey.internal.Errors.process(Errors.java:298)
>
> at org.glassfish.jersey.internal.Errors.process(Errors.java:268)
>
> at
> org.glassfish.jersey.process.internal.RequestScope.runInScope(RequestScope.java:289)
>
> at
> org.glassfish.jersey.server.ServerRuntime.process(ServerRuntime.java:256)
>
> at
> org.glassfish.jersey.server.ApplicationHandler.handle(ApplicationHandler.java:703)
>
> at
> org.glassfish.jersey.servlet.WebComponent.serviceImpl(WebComponent.java:416)
>
> at
> org.glassfish.jersey.servlet.WebComponent.service(WebComponent.java:370)
>
> at
> org.glassfish.jersey.servlet.ServletContainer.service(ServletContainer.java:389)
>
> at
> org.glassfish.jersey.servlet.ServletContainer.service(ServletContainer.java:342)
>
> at
> org.glassfish.jersey.servlet.ServletContainer.service(ServletContainer.java:229)
>
> at
> org.eclipse.jetty.servlet.ServletHolder.handle(ServletHolder.java:876)
>
> at
> org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1623)
>
> at
> org.apache.nifi.web.filter.RequestLogger.doFilter(RequestLogger.java:66

Please guide [how to do user authentication in NIfi with SSL]

2020-05-29 Thread Ashutosh Kumar (Group)
Hello Experts,

I am new to Apache NiFi and  running 1.4.11.

Wanted to set up NiFI SSL and authenticate user whoever is accessing this.

I have spent almost 2 weeks but I am not able to achieve this. The 
documentation and online help is also not helping me.
Wrote to multiple forums but no answers.

Request you to please provide some guide or documentation so that I could 
succeed in this.

Attaching my nifi.properties, authorizers.xml, users.xml and authrizations.xml 
for reference.

I am getting below error when trying to authenticate using google OpenID.

Please , please have a look and suggest what I am doing wrong.

Thanks and Regards,
Ashutosh


2020-05-29 12:21:40,514 INFO [NiFi Web Server-17] 
o.a.n.w.a.c.AccessDeniedExceptionMapper identity[anonymous], groups[none] does 
not have permission to access the requested resource. Unknown user with 
identity 'anonymous'. Returning Unauthorized response.
2020-05-29 12:21:42,915 ERROR [NiFi Web Server-23] 
org.apache.nifi.web.api.AccessResource Unable to exchange authorization for ID 
token: Unable to parse the response from the Token request: JWT issue time 
ahead of current time
java.lang.RuntimeException: Unable to parse the response from the Token 
request: JWT issue time ahead of current time
at 
org.apache.nifi.web.security.oidc.StandardOidcIdentityProvider.exchangeAuthorizationCode(StandardOidcIdentityProvider.java:330)
at 
org.apache.nifi.web.security.oidc.OidcService.exchangeAuthorizationCode(OidcService.java:201)
at 
org.apache.nifi.web.api.AccessResource.oidcCallback(AccessResource.java:257)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at 
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at 
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:498)
at 
org.glassfish.jersey.server.model.internal.ResourceMethodInvocationHandlerFactory.lambda$static$0(ResourceMethodInvocationHandlerFactory.java:76)
at 
org.glassfish.jersey.server.model.internal.AbstractJavaResourceMethodDispatcher$1.run(AbstractJavaResourceMethodDispatcher.java:148)
at 
org.glassfish.jersey.server.model.internal.AbstractJavaResourceMethodDispatcher.invoke(AbstractJavaResourceMethodDispatcher.java:191)
at 
org.glassfish.jersey.server.model.internal.JavaResourceMethodDispatcherProvider$VoidOutInvoker.doDispatch(JavaResourceMethodDispatcherProvider.java:183)
at 
org.glassfish.jersey.server.model.internal.AbstractJavaResourceMethodDispatcher.dispatch(AbstractJavaResourceMethodDispatcher.java:103)
at 
org.glassfish.jersey.server.model.ResourceMethodInvoker.invoke(ResourceMethodInvoker.java:493)
at 
org.glassfish.jersey.server.model.ResourceMethodInvoker.apply(ResourceMethodInvoker.java:415)
at 
org.glassfish.jersey.server.model.ResourceMethodInvoker.apply(ResourceMethodInvoker.java:104)
at 
org.glassfish.jersey.server.ServerRuntime$1.run(ServerRuntime.java:277)
at org.glassfish.jersey.internal.Errors$1.call(Errors.java:272)
at org.glassfish.jersey.internal.Errors$1.call(Errors.java:268)
at org.glassfish.jersey.internal.Errors.process(Errors.java:316)
at org.glassfish.jersey.internal.Errors.process(Errors.java:298)
at org.glassfish.jersey.internal.Errors.process(Errors.java:268)
at 
org.glassfish.jersey.process.internal.RequestScope.runInScope(RequestScope.java:289)
at 
org.glassfish.jersey.server.ServerRuntime.process(ServerRuntime.java:256)
at 
org.glassfish.jersey.server.ApplicationHandler.handle(ApplicationHandler.java:703)
at 
org.glassfish.jersey.servlet.WebComponent.serviceImpl(WebComponent.java:416)
at 
org.glassfish.jersey.servlet.WebComponent.service(WebComponent.java:370)
at 
org.glassfish.jersey.servlet.ServletContainer.service(ServletContainer.java:389)
at 
org.glassfish.jersey.servlet.ServletContainer.service(ServletContainer.java:342)
at 
org.glassfish.jersey.servlet.ServletContainer.service(ServletContainer.java:229)
at 
org.eclipse.jetty.servlet.ServletHolder.handle(ServletHolder.java:876)
at 
org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1623)
at 
org.apache.nifi.web.filter.RequestLogger.doFilter(RequestLogger.java:66)
at 
org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1610)
at 
org.springframework.security.web.FilterChainProxy.doFilterInternal(FilterChainProxy.java:208)
at 
org.springframework.security.web.FilterChainProxy.doFilter(FilterChainProxy.java:177)
at 
org.springframework.web.filter.DelegatingFilterProxy.invokeDelegate(DelegatingFilterProxy.java:347)
at 
org.springframework.web.filter.DelegatingFilterProxy.doFilter(DelegatingFilterProxy.java:263)
at 
org.eclipse.jet