[GitHub] nifi issue #1216: NIFI-2654 Enabled encryption coverage for login-identity-p...

2016-11-14 Thread YolandaMDavis
Github user YolandaMDavis commented on the issue:

https://github.com/apache/nifi/pull/1216
  
@alopresto I was able to test encrypt-config update with the following 
scenarios:

tested encryption using new -l flag along with -n, - b, and -p flags (no 
migration). nifi.properties and login provider identity files encrypted 
properties as expected. Master key appears as expected in bootstrap.con

tested encryption using -l, -n, and - b flag with migration of password 
using -m -w.  nifi.properties and login provider identity files encrypted as 
expected. Master key appears as expected in bootstrap.conf

Also tested encrypted configurations with secured NiFi against OpenLDAP 
(SIMPLE and TLS). In both scenarios NiFi was able to decrypt values and access 
LDAP for authentication as needed.

+1

Thanks @alopresto! Will merge this in shortly



---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] nifi issue #1216: NIFI-2654 Enabled encryption coverage for login-identity-p...

2016-11-14 Thread YolandaMDavis
Github user YolandaMDavis commented on the issue:

https://github.com/apache/nifi/pull/1216
  
@alopresto will review


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] nifi issue #1216: NIFI-2654 Enabled encryption coverage for login-identity-p...

2016-11-14 Thread alopresto
Github user alopresto commented on the issue:

https://github.com/apache/nifi/pull/1216
  
Ran all tests with both `128-bit` and `256-bit` encryption enabled. I set 
up an LDAP server using Vagrant and set up the `login-identity-providers.xml` 
file with both plain and encrypted configuration values and verified the 
connection was successful. 


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---