Re: ldap authentication and initial admin identity

2019-08-22 Thread Nicolas Delsaux
In that case, i guess the simplest way to improve things is to understand where I got lost. I successfully accessed the controller settings panel to add the nifi registry. But it was when I tried to add a process group that the permission issue byte me. So indeed, a tooltip (beside the disabled

Re: ldap authentication and initial admin identity

2019-08-22 Thread Pierre Villard
Yeah me know we should try make things easier. On one side we want to have a very fine-grained multi-tenant model for permissions and on the other side we want user to quickly get up and running. If you have ideas to improve the overall experience, any feedback is greatly appreciated. I guess we c

Re: ldap authentication and initial admin identity

2019-08-22 Thread Nicolas Delsaux
Well, ok, i've understood by clicking everywhere :-) (discoverability of permission in nifi is ... ok ;-) ). So, i've clicked the "manage access policies" item in the right-click menu of the canvas and added my user everywhere, and now I can use the UI. Thanks for your patience :-) Le 22/08/201

Re: ldap authentication and initial admin identity

2019-08-22 Thread Pierre Villard
By default the initial admin does not have permissions to do anything on the canvas: the initial admin is usually used to manage users/groups and apply policies to grant permissions to users/groups. If you want to grant permissions to do something on the canvas, this is done at process group level

Re: ldap authentication and initial admin identity

2019-08-22 Thread Nicolas Delsaux
Well, I sort of sorted it out. I can indeed login with my ldap, which is cool, but the whole UI is ... grayed : I can't create process groups jor import existing ones. So i took a look at the user screen. My permissions are as follows Global policy to access all policies                write G

Re: ldap authentication and initial admin identity

2019-08-20 Thread Pierre Villard
Cool! Glad you got it sorted out! Le mar. 20 août 2019 à 11:30, Nicolas Delsaux a écrit : > Wow, I'm really REALLY puzzled. > > I'm using Nifi through the docker image, and docker-compose. > > I was used to do docker-compose up/down, and it failed. > > But this time, I did a docker-compose down,

Re: ldap authentication and initial admin identity

2019-08-20 Thread Nicolas Delsaux
Wow, I'm really REALLY puzzled. I'm using Nifi through the docker image, and docker-compose. I was used to do docker-compose up/down, and it failed. But this time, I did a docker-compose down, AND destroyed the folder in which the application is deployed. And this time, it worked ! I'm now logg

Re: ldap authentication and initial admin identity

2019-08-20 Thread Pierre Villard
Something that I can suggest: the users.xml and authorizations.xml files are generated when NiFi starts for the first time. If you did some modifications (such as the initial admin identity), the files users/authorizations won't be updated with your configuration change... Something you could try:

Re: ldap authentication and initial admin identity

2019-08-20 Thread Nicolas Delsaux
When I try to login, UI shows Insufficient Permissions Unable to view the user interface. Contact the system administrator. The log file contains 2019-08-20 08:22:18,808 INFO [main] o.a.n.a.FileAccessPolicyProvider Authorizations file loaded at Tue Aug 20 08:22:18 UTC 2019 2019-08-20 08:28:24,4

Re: ldap authentication and initial admin identity

2019-08-19 Thread Pierre Villard
Hi Nicolas, Can you share the message you get when accessing the UI? The logs from the nifi-user.log file? As well as having a look at the users.xml and authorizations.xml file generated the first time NiFi is starting based on your configuration? Thanks, Pierre Le lun. 19 août 2019 à 11:35, Nic