[jira] [Commented] (NIFI-7555) LDAP user group provider throws PartialResults Exception when referral strategy = IGNORE
[
https://issues.apache.org/jira/browse/NIFI-7555?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17472200#comment-17472200
]
Joe Witt commented on NIFI-7555:
Hello. I'm not aware of any specific work for this particular item so if you
are interested in filing a patch that would be great. Thanks
> LDAP user group provider throws PartialResults Exception when referral
> strategy = IGNORE
>
>
> Key: NIFI-7555
> URL: https://issues.apache.org/jira/browse/NIFI-7555
> Project: Apache NiFi
> Issue Type: Bug
> Components: Core Framework
>Affects Versions: 1.11.4
> Environment: AWS Instance running Ubuntu 18.04
> LDAPS user group provider
>Reporter: Melissa Clark
>Priority: Major
>
> We are using LDAPS for authentication and for user-group provision.
> At the level I need to search the LDAP tree, two referrals are returned. If I
> tell Nifi to IGNORE referrals in the "referral strategy" option in
> authorizers.xml, Nifi throws a "PartialResults" exception and stops.
> This is unexpected as, by saying that referrals should be ignored, I have
> indicated that I am happy with the partial results.
>
> {noformat}
> 2020-06-29 08:57:09,052 ERROR [main] o.s.web.context.ContextLoader Context
> initialization failed
> org.springframework.beans.factory.UnsatisfiedDependencyException: Error
> creating bean with name
> 'org.springframework.security.config.annotation.web.configuration.WebSecurityConfiguration':
> Unsatisfied dependency expressed through method
> 'setFilterChainProxySecurityConfigurer' parameter 1; nested exception is
> org.springframework.beans.factory.BeanExpressionException: Expression parsing
> failed; nested exception is
> org.springframework.beans.factory.UnsatisfiedDependencyException: Error
> creating bean with name
> 'org.apache.nifi.web.NiFiWebApiSecurityConfiguration': Unsatisfied dependency
> expressed through method 'setKnoxAuthenticationProvider' parameter 0; nested
> exception is org.springframework.beans.factory.BeanCreationException: Error
> creating bean with name 'knoxAuthenticationProvider' defined in class path
> resource [nifi-web-security-context.xml]: Cannot resolve reference to bean
> 'authorizer' while setting constructor argument; nested exception is
> org.springframework.beans.factory.BeanCreationException: Error creating bean
> with name 'authorizer': FactoryBean threw exception on object creation;
> nested exception is org.springframework.ldap.PartialResultException:
> Unprocessed Continuation Reference(s); nested exception is
> javax.naming.PartialResultException: Unprocessed Continuation Reference(s);
> remaining name 'dc=myroot, dc=com'
> at
> org.springframework.beans.factory.annotation.AutowiredAnnotationBeanPostProcessor$AutowiredMethodElement.inject(AutowiredAnnotationBeanPostProcessor.java:666)
> at
> org.springframework.beans.factory.annotation.InjectionMetadata.inject(InjectionMetadata.java:87)
> at
> org.springframework.beans.factory.annotation.AutowiredAnnotationBeanPostProcessor.postProcessPropertyValues(AutowiredAnnotationBeanPostProcessor.java:366)
> at
> org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.populateBean(AbstractAutowireCapableBeanFactory.java:1269)
> at
> org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:551)
> at
> org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:481)
> at
> org.springframework.beans.factory.support.AbstractBeanFactory$1.getObject(AbstractBeanFactory.java:312)
> at
> org.springframework.beans.factory.support.DefaultSingletonBeanRegistry.getSingleton(DefaultSingletonBeanRegistry.java:230)
> at
> org.springframework.beans.factory.support.AbstractBeanFactory.doGetBean(AbstractBeanFactory.java:308)
> at
> org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:197)
> at
> org.springframework.beans.factory.support.DefaultListableBeanFactory.preInstantiateSingletons(DefaultListableBeanFactory.java:761)
> at
> org.springframework.context.support.AbstractApplicationContext.finishBeanFactoryInitialization(AbstractApplicationContext.java:867)
> at
> org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:543)
> at
> org.springframework.web.context.ContextLoader.configureAndRefreshWebApplicationContext(ContextLoader.java:443)
> at
> org.springframework.web.context.ContextLoader.initWebApplicationContext(ContextLoader.java:325)
> at
>
[jira] [Commented] (NIFI-7555) LDAP user group provider throws PartialResults Exception when referral strategy = IGNORE
[
https://issues.apache.org/jira/browse/NIFI-7555?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17472198#comment-17472198
]
Greg Senia commented on NIFI-7555:
--
[~joewitt] is anyone working on this or can I provide a patch for this problem
as I ran into this today when I was attempting to spin up NiFi in my K8S
environment with NiFi 1.14. As I have a sub AD forest that has the same user id.
2022-01-10 17:49:56,806 INFO [NiFi Bootstrap Command Listener]
org.apache.nifi.bootstrap.RunNiFi Apache NiFi now running and listening for
Bootstrap requests on port 45529
2022-01-10 17:50:12,439 ERROR [NiFi logging handler] org.apache.nifi.StdErr
Failed to start web server: Error creating bean with name
'org.springframework.security.config.annotation.web.configuration.WebSecurityConfiguration':
Unsatisfied dependency expressed through method
'setFilterChainProxySecurityConfigurer' parameter 1; nested exception is
org.springframework.beans.factory.BeanExpressionException: Expression parsing
failed; nested exception is
org.springframework.beans.factory.UnsatisfiedDependencyException: Error
creating bean with name 'org.apache.nifi.web.NiFiWebApiSecurityConfiguration':
Unsatisfied dependency expressed through method 'setJwtAuthenticationProvider'
parameter 0; nested exception is
org.springframework.beans.factory.BeanCreationException: Error creating bean
with name 'jwtAuthenticationProvider' defined in class path resource
[nifi-web-security-context.xml]: Cannot resolve reference to bean 'authorizer'
while setting constructor argument; nested exception is
org.springframework.beans.factory.BeanCreationException: Error creating bean
with name 'authorizer': FactoryBean threw exception on object creation; nested
exception is org.springframework.ldap.PartialResultException: Unprocessed
Continuation Reference(s); nested exception is
javax.naming.PartialResultException: Unprocessed Continuation Reference(s);
remaining name 'DC=hdpusr,DC=senia,DC=org'
2022-01-10 17:50:12,439 ERROR [NiFi logging handler] org.apache.nifi.StdErr
Shutting down...
2022-01-10 17:50:52,091 INFO [main] o.a.n.b.NotificationServiceManager
Successfully loaded the fol
> LDAP user group provider throws PartialResults Exception when referral
> strategy = IGNORE
>
>
> Key: NIFI-7555
> URL: https://issues.apache.org/jira/browse/NIFI-7555
> Project: Apache NiFi
> Issue Type: Bug
> Components: Core Framework
>Affects Versions: 1.11.4
> Environment: AWS Instance running Ubuntu 18.04
> LDAPS user group provider
>Reporter: Melissa Clark
>Priority: Major
>
> We are using LDAPS for authentication and for user-group provision.
> At the level I need to search the LDAP tree, two referrals are returned. If I
> tell Nifi to IGNORE referrals in the "referral strategy" option in
> authorizers.xml, Nifi throws a "PartialResults" exception and stops.
> This is unexpected as, by saying that referrals should be ignored, I have
> indicated that I am happy with the partial results.
>
> {noformat}
> 2020-06-29 08:57:09,052 ERROR [main] o.s.web.context.ContextLoader Context
> initialization failed
> org.springframework.beans.factory.UnsatisfiedDependencyException: Error
> creating bean with name
> 'org.springframework.security.config.annotation.web.configuration.WebSecurityConfiguration':
> Unsatisfied dependency expressed through method
> 'setFilterChainProxySecurityConfigurer' parameter 1; nested exception is
> org.springframework.beans.factory.BeanExpressionException: Expression parsing
> failed; nested exception is
> org.springframework.beans.factory.UnsatisfiedDependencyException: Error
> creating bean with name
> 'org.apache.nifi.web.NiFiWebApiSecurityConfiguration': Unsatisfied dependency
> expressed through method 'setKnoxAuthenticationProvider' parameter 0; nested
> exception is org.springframework.beans.factory.BeanCreationException: Error
> creating bean with name 'knoxAuthenticationProvider' defined in class path
> resource [nifi-web-security-context.xml]: Cannot resolve reference to bean
> 'authorizer' while setting constructor argument; nested exception is
> org.springframework.beans.factory.BeanCreationException: Error creating bean
> with name 'authorizer': FactoryBean threw exception on object creation;
> nested exception is org.springframework.ldap.PartialResultException:
> Unprocessed Continuation Reference(s); nested exception is
> javax.naming.PartialResultException: Unprocessed Continuation Reference(s);
> remaining name 'dc=myroot, dc=com'
> at
> org.springframework.beans.factory.annotation.AutowiredAnnotationBeanPostProcessor$AutowiredMethodElement.inject(AutowiredAnnotationBeanPostProcessor.java:666)
> at
>
[jira] [Commented] (NIFI-7555) LDAP user group provider throws PartialResults Exception when referral strategy = IGNORE
[
https://issues.apache.org/jira/browse/NIFI-7555?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17147636#comment-17147636
]
Melissa Clark commented on NIFI-7555:
-
Hi [~pvillard]! Added to the description!
> LDAP user group provider throws PartialResults Exception when referral
> strategy = IGNORE
>
>
> Key: NIFI-7555
> URL: https://issues.apache.org/jira/browse/NIFI-7555
> Project: Apache NiFi
> Issue Type: Bug
> Components: Core Framework
>Affects Versions: 1.11.4
> Environment: AWS Instance running Ubuntu 18.04
> LDAPS user group provider
>Reporter: Melissa Clark
>Priority: Major
>
> We are using LDAPS for authentication and for user-group provision.
> At the level I need to search the LDAP tree, two referrals are returned. If I
> tell Nifi to IGNORE referrals in the "referral strategy" option in
> authorizers.xml, Nifi throws a "PartialResults" exception and stops.
> This is unexpected as, by saying that referrals should be ignored, I have
> indicated that I am happy with the partial results.
>
> {noformat}
> 2020-06-29 08:57:09,052 ERROR [main] o.s.web.context.ContextLoader Context
> initialization failed
> org.springframework.beans.factory.UnsatisfiedDependencyException: Error
> creating bean with name
> 'org.springframework.security.config.annotation.web.configuration.WebSecurityConfiguration':
> Unsatisfied dependency expressed through method
> 'setFilterChainProxySecurityConfigurer' parameter 1; nested exception is
> org.springframework.beans.factory.BeanExpressionException: Expression parsing
> failed; nested exception is
> org.springframework.beans.factory.UnsatisfiedDependencyException: Error
> creating bean with name
> 'org.apache.nifi.web.NiFiWebApiSecurityConfiguration': Unsatisfied dependency
> expressed through method 'setKnoxAuthenticationProvider' parameter 0; nested
> exception is org.springframework.beans.factory.BeanCreationException: Error
> creating bean with name 'knoxAuthenticationProvider' defined in class path
> resource [nifi-web-security-context.xml]: Cannot resolve reference to bean
> 'authorizer' while setting constructor argument; nested exception is
> org.springframework.beans.factory.BeanCreationException: Error creating bean
> with name 'authorizer': FactoryBean threw exception on object creation;
> nested exception is org.springframework.ldap.PartialResultException:
> Unprocessed Continuation Reference(s); nested exception is
> javax.naming.PartialResultException: Unprocessed Continuation Reference(s);
> remaining name 'dc=myroot, dc=com'
> at
> org.springframework.beans.factory.annotation.AutowiredAnnotationBeanPostProcessor$AutowiredMethodElement.inject(AutowiredAnnotationBeanPostProcessor.java:666)
> at
> org.springframework.beans.factory.annotation.InjectionMetadata.inject(InjectionMetadata.java:87)
> at
> org.springframework.beans.factory.annotation.AutowiredAnnotationBeanPostProcessor.postProcessPropertyValues(AutowiredAnnotationBeanPostProcessor.java:366)
> at
> org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.populateBean(AbstractAutowireCapableBeanFactory.java:1269)
> at
> org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:551)
> at
> org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:481)
> at
> org.springframework.beans.factory.support.AbstractBeanFactory$1.getObject(AbstractBeanFactory.java:312)
> at
> org.springframework.beans.factory.support.DefaultSingletonBeanRegistry.getSingleton(DefaultSingletonBeanRegistry.java:230)
> at
> org.springframework.beans.factory.support.AbstractBeanFactory.doGetBean(AbstractBeanFactory.java:308)
> at
> org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:197)
> at
> org.springframework.beans.factory.support.DefaultListableBeanFactory.preInstantiateSingletons(DefaultListableBeanFactory.java:761)
> at
> org.springframework.context.support.AbstractApplicationContext.finishBeanFactoryInitialization(AbstractApplicationContext.java:867)
> at
> org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:543)
> at
> org.springframework.web.context.ContextLoader.configureAndRefreshWebApplicationContext(ContextLoader.java:443)
> at
> org.springframework.web.context.ContextLoader.initWebApplicationContext(ContextLoader.java:325)
> at
> org.springframework.web.context.ContextLoaderListener.contextInitialized(ContextLoaderListener.java:107)
> at
>
[jira] [Commented] (NIFI-7555) LDAP user group provider throws PartialResults Exception when referral strategy = IGNORE
[ https://issues.apache.org/jira/browse/NIFI-7555?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17146396#comment-17146396 ] Pierre Villard commented on NIFI-7555: -- Hi [~mlclark] - do you mind sharing the stack trace? > LDAP user group provider throws PartialResults Exception when referral > strategy = IGNORE > > > Key: NIFI-7555 > URL: https://issues.apache.org/jira/browse/NIFI-7555 > Project: Apache NiFi > Issue Type: Bug > Components: Core Framework >Affects Versions: 1.11.4 > Environment: AWS Instance running Ubuntu 18.04 > LDAPS user group provider >Reporter: Melissa Clark >Priority: Major > > We are using LDAPS for authentication and for user-group provision. > At the level I need to search the LDAP tree, two referrals are returned. If I > tell Nifi to IGNORE referrals in the "referral strategy" option in > authorizers.xml, Nifi throws a "PartialResults" exception and stops. > This is unexpected as, by saying that referrals should be ignored, I have > indicated that I am happy with the partial results. -- This message was sent by Atlassian Jira (v8.3.4#803005)
