Re: Nifi authentication through Kerberos issues

2021-04-01 Thread Derek Richardson
That was it! I pulled out the line "renew_lifetime = 7d" and it worked! Thank you so much. On Thu, Apr 1, 2021 at 7:40 AM Bryan Bende wrote: > The important part is: > > Caused by: sun.security.krb5.internal.KrbApErrException: Message stream > modified (41) > > The code that produces this

Re: Nifi authentication through Kerberos issues

2021-04-01 Thread Bryan Bende
The important part is: Caused by: sun.security.krb5.internal.KrbApErrException: Message stream modified (41) The code that produces this exception looks like this: // Reply to a renewable request should be renewable, but if request does // not contain renewable, KDC is free to issue a renewable

Re: Nifi authentication through Kerberos issues

2021-03-31 Thread Derek Richardson
It doesn't look like anything to me, but here's the stacktrace for when logback.xml has all of the user_file stuff in debug mode: 2021-03-31 22:54:13,670 INFO [NiFi Web Server-22] o.a.n.w.a.c.IllegalArgumentExceptionMapper java.lang.IllegalArgumentException: The supplied username and password are

Re: Nifi authentication through Kerberos issues

2021-03-31 Thread Derek Richardson
Correct. # kinit admin@MY.REALM Password for admin@MY.REALM: # klist Ticket cache: FILE:/tmp/krb5cc_0 Default principal: admin@MY.REALM Valid starting Expires Service principal 03/31/2021 22:42:10 04/01/2021 22:42:10 krbtgt/MY.REALM@MY.REALM On Wed, Mar 31, 2021, 1:13 PM

Re: Nifi authentication through Kerberos issues

2021-03-31 Thread Bryan Bende
So from a terminal on the nifi server, you can run "kinit admin@MY.REALM" and enter the password and it works, and this same principal and password entered into NiFi's login screen does not work? On Wed, Mar 31, 2021 at 2:19 PM Derek Richardson wrote: > > I'm working on transitioning a nifi

Nifi authentication through Kerberos issues

2021-03-31 Thread Derek Richardson
I'm working on transitioning a nifi instance we deploy with Kerberos and I'm having some trouble authenticating. Everything looks correct, but when I try to log in with any of my created users, I get an error message: The supplied username and password are not valid. Everything on nifi without