Re: IBM MQ message selector

Hi Marc, Great, thanks for the feedback. Best, Peter On Mon, Aug 3, 2020 at 3:16 PM Marc Recht wrote: > Hi Peter, > > I tested it now quite a bit and it works like a charm! Thanks for > implementing it so swiftly. > > Best, > > Marc > On 27/07/2020 13:40, Peter Turcsanyi wrote: > > Hi Marc, >

Re: cluster stick in "Attempted to register Leader Election for role 'Cluster Coordinator' but this role is already registered"

On a related note, I noticed that the ACL are getting set, but also for each znode under the /nifi, the Read ACL for world is being set. Is there a way to have nifi only set with the sasl? zk: nifi1-5.X.net:2181(CONNECTED) 12] getAcl /nifi 'sasl,'n...@x.net : cdrwa 'world,'anyone : r On Wed,

Re: cluster stick in "Attempted to register Leader Election for role 'Cluster Coordinator' but this role is already registered"

Dan, Can you grab a thread dump and provide that? Specifically, the “main” thread is the important one with startup. The note that the role is already registered is normal. It probably could be changed to a DEBUG level, really. It should not be concerning. A thread dump, though, would show us

Re: cluster stick in "Attempted to register Leader Election for role 'Cluster Coordinator' but this role is already registered"

Hello Mark, Attached is a dump from one of the nodesI replaced the domain related entries with X/x. I'm not sure if it's relevant or not, but I did notice that in the log there's entries "Looking for keys for n...@x.net" the x (domain) is lowercase whereas in the keytab file it's uppercase

cluster stick in "Attempted to register Leader Election for role 'Cluster Coordinator' but this role is already registered"

Hello, Running nifi 1.11.4, 3 X secure cluster mode and have enabled kerberos/sasl, upon trying to startup the cluster, they seem to get stuck in : 2020-08-05 17:10:18,907 WARN [main] o.a.nifi.controller.StandardFlowService There is currently no Cluster Coordinator. This often happens upon

Re: cluster stick in "Attempted to register Leader Election for role 'Cluster Coordinator' but this role is already registered"

I don't see how this would relate to the problem, but shouldn't the ACL be set to "Creator" when Sasl/Kerberos is setup correctly? In addition to the nifi configs you showed, you would also need a jaas conf file specified in bootstrap.conf and in that file you would need the jaas entry for the ZK

Re: cluster stick in "Attempted to register Leader Election for role 'Cluster Coordinator' but this role is already registered"

Hello, Sorry for all the noise...doohwas due to the realm in the jaas.conf being lowercase...i'm a knucklehead... Dano On Wed, Aug 5, 2020 at 1:12 PM Bryan Bende wrote: > I don't see how this would relate to the problem, but shouldn't the ACL be > set to "Creator" when Sasl/Kerberos is

Re: cluster stick in "Attempted to register Leader Election for role 'Cluster Coordinator' but this role is already registered"

No worries, thanks for following up and letting us know! Thanks -Mark On Aug 5, 2020, at 3:42 PM, dan young mailto:danoyo...@gmail.com>> wrote: Hello, Sorry for all the noise...doohwas due to the realm in the jaas.conf being lowercase...i'm a knucklehead... Dano On Wed, Aug 5, 2020 at

Re: cluster stick in "Attempted to register Leader Election for role 'Cluster Coordinator' but this role is already registered"

I'll make that change, was going off the comments in the state-management.xml -Open -CreatorOnly Let me try Creator... On Wed, Aug 5, 2020 at 1:12 PM Bryan Bende wrote: > I don't see how this would relate to the problem, but shouldn't the ACL be > set to "Creator" when Sasl/Kerberos is setup

Re: cluster stick in "Attempted to register Leader Election for role 'Cluster Coordinator' but this role is already registered"

Hello Bryan, Same issue. I have a jaas.conf and config in the bootstrap.cof Client { com.sun.security.auth.module.Krb5LoginModule required useKeyTab=true keyTab="/opt/nifi/conf/nifi.keytab" storeKey=true useTicketCache=false principal="n...@x.net "; };

Re: cluster stick in "Attempted to register Leader Election for role 'Cluster Coordinator' but this role is already registered"

Dan, Thanks for reporting this. Case-sensitivity in these kinds of things is important but it also seems like low-hanging fruit for us to at least detect & alert on when errors occur. “Failed to connect to external service X with principal n...@x.net …. Did you mean