Re: Ranger-plugin authorises "anonymous" for /flow

2018-04-09 Thread Meixner, Johannes
identity, the anonymous user is only used in an unsecured NiFi when > there is not authentication/authorization taking place. > > > On Mon, Apr 9, 2018 at 9:51 AM, Meixner, Johannes > <johan...@perceivon.net> wrote: > > Hi Bryan, > > > > It's a placeholder in R

Ranger-plugin authorises "anonymous" for /flow

2018-04-09 Thread Meixner, Johannes
I'm trying to harden my NiFi instance's authorizations and auditing using Ranger (which is backed by an LDAP instance). In Ranger I have defined a couple of resources defined to be authorized for the nifi nodes' CNs (from SSL certs), `{USER}` and `{OWNER}`. Turns out that if I add `{USER}` to

Re: Ranger-plugin authorises "anonymous" for /flow

2018-04-09 Thread Meixner, Johannes
identity? > > I haven't seen that syntax before so just trying to understand what > {USER} and {OWNER} mean here. > > -Bryan > > > On Mon, Apr 9, 2018 at 3:55 AM, Meixner, Johannes > <johan...@perceivon.net> wrote: > > I'm trying to harden my NiFi instance's au