Re: SAML based identity provider

2018-08-31 Thread Andy LoPresto
Hi Vijay, Currently there are no community-supported SAML login identity providers. You can use the existing LDAP [1], Kerberos [2], and OIDC [3] implementations as examples on which to base your implementation. The LIP are not currently exposed as a first-class extension point, but you can

SAML based identity provider

2018-08-31 Thread Vijay Chhipa
Hello, I am setting up NiFi in the company, but the out-of-the-box authentication modules are not an option for me. I would like to write a SAML based login identity provider, Is there one out there already ? I am on NiFi 1.7.1, with Java 8, SAML 2.0, What do I need to get started with

saving record into different tables?

2018-08-31 Thread l vic
Hi, I have a json record that contains array "mylst": { "id": 0, "name": "Root", "mylist": [{ "id": 10, "info": "2am-3am" }, { "id": 11, "info": "3AM-4AM" }, { "id": 12, "info": "4am-5am" }] } I have to save root data into one

Re: SAML based identity provider

2018-08-31 Thread Curtis Ruck
I've been trying to figure out how to improve this area of NiFi. They support OpenID Direct Connect (OIDC), but when you combine it with a reverse proxy or their default/hardcoded PKI configuration, it's near impossible to use. Ideally the entire authn/z stack needs rearchitecting for better

Re: Nifi RecordReader for Json?

2018-08-31 Thread l vic
What would be the right processor to use JsonTreeReader to get json attributes as name/value pairs and to write them into the file? Thanks again, On Thu, Aug 30, 2018 at 2:09 PM Otto Fowler wrote: > What he said. > > > On August 30, 2018 at 13:31:54, Joe Witt (joe.w...@gmail.com) wrote: > >

Re: Best practices for running Apache NiFi in production in a Docker container

2018-08-31 Thread Peter Wilcsinszky
Hi, I haven't done extensive research in this area but ran through the articles and also found another one [1]. From what I understand UseCGroupMemoryLimitForHeap is just the dynamic version of setting memory limits manually using Xmx and Xms which is currently done by the NiFi start script

Re: Secure NiFi cluster on kubernetes.

2018-08-31 Thread Varun Tomar
Hi Peter, We started using nifi as statefulset last year you but moved to deployment. -CICD tool Spinnaker does not support statefulsets. - We have also customized logback.xml as it was log within log issue which was not getting parsed properly in ELK - For ports and cluster IP I pass them as

Re: Secure NiFi cluster on kubernetes.

2018-08-31 Thread Peter Wilcsinszky
On Fri, 31 Aug 2018, 16:51 Varun Tomar, wrote: > Hi Peter, > > We started using nifi as statefulset last year you but moved to deployment. > > -CICD tool Spinnaker does not support statefulsets. > - We have also customized logback.xml as it was log within log issue which > was not getting parsed