Re: setting up secure nifi

2018-02-01 Thread Matt Burgess
They work for me, perhaps there was a connectivity issue or something? On Thu, Feb 1, 2018 at 10:56 AM, Anil Rai wrote: > The below links does not work. Have they moved somewhere else? > >

Re: setting up secure nifi

2018-02-01 Thread Anil Rai
The below links does not work. Have they moved somewhere else? https://bryanbende.com/development/2016/08/17/apache-nifi-1-0-0-authorization-and-multi-tenancy https://blog.rosander.ninja/nifi/toolkit/tls/2016/09/19/tls-toolkit-intro.html https://blog.rosander.ninja/nifi/toolkit/tls/2016/

Re: setting up secure nifi

2018-02-01 Thread Anil Rai
Thanks Andy. It did resolve my issue. I got it working. Thanks again for all the links. Very helpful. Cheers Anil On Thu, Feb 1, 2018 at 10:14 AM, Andy LoPresto wrote: > Hi Anil, > > In addition to Bryan’s explanation, there are a number of blog posts and > articles

Re: setting up secure nifi

2018-02-01 Thread Andy LoPresto
Hi Anil, In addition to Bryan’s explanation, there are a number of blog posts and articles covering this topic: * Authorization and Multi-Tenancy by Bryan Bende [1] * Secured Cluster Setup by Pierre Villard [2] * TLS Generation Toolkit section of Apache NiFi Admin Guide [3] * Initial Admin

Re: setting up secure nifi

2018-02-01 Thread Andy LoPresto
Hi Anil, In addition to Bryan’s explanation, there are a number of blog posts and articles covering this topic: * Authorization and Multi-Tenancy by Bryan Bende [1] * Secured Cluster Setup by Pierre Villard [2] * TLS Generation Toolkit section of Apache NiFi Admin Guide [3] * Initial Admin

Re: setting up secure nifi

2018-02-01 Thread Andy LoPresto
Hi Anil, In addition to Bryan’s explanation, there are a number of blog posts and articles covering this topic: * Authorization and Multi-Tenancy by Bryan Bende [1] * Secured Cluster Setup by Pierre Villard [2] * TLS Generation Toolkit section of Apache NiFi Admin Guide [3] * Initial Admin

Re: setting up secure nifi

2018-01-31 Thread Bryan Bende
It’s the same problem, your initial admin should be: CN=TC, OU=NIFI Not CN=TC,OU=NIFI,dc=example,dc=com The first one is the DN of your client cert, the second one is not. On Wed, Jan 31, 2018 at 7:23 PM Anil Rai wrote: > Hi Bryan, > > Thanks for the quick reply. I

Re: setting up secure nifi

2018-01-31 Thread Anil Rai
Hi Bryan, Thanks for the quick reply. I did followed your steps. But I am seeing the same error. Now the entry looks like CN=TC,OU=NIFI,dc=example, dc=com Also what does dc stand for after CN and OU. Is that a problem. Is there a blog that talks about installing and making it https using

Re: setting up secure nifi

2018-01-31 Thread Bryan Bende
Hello, The identity in authorizers.xml for your initial admin does not match the identity of your client cert. You should be putting “CN=TC, OU=NIFI” as the initial admin because that is the DN of your client cert. You’ll need to stop NiFi, edit authorizers.xml, delete users.xml and

setting up secure nifi

2018-01-31 Thread Anil Rai
All, I am trying to install nifi 1.5 and making it https. Below is the steps followed and the error i am getting. Below is the config and log files content. Please help 1. Installed nifi 1.5 2. Installed nifi toolkit 1.5 3. Ran toolkit - ./tls-toolkit.sh standalone -n 'localhost' -C