You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@nifi.apache.org by Fabian Reiber <re...@dfn-cert.de> on 2023/10/05 11:31:50 UTC

ACLs in RedisDistributedMapCacheClientService

Hi people,

I would like to use ACLs of my redis sentinel cluster with NiFi. But the 
"RedisDistributedMapCacheClientService" does not allow this. It is 
possible to configure a password (for the server and the sentinel), but 
not possible to use a different username for both. I expect, NiFi uses 
the default user to connect to the server and sentinel!?

I already opened an issue: https://issues.apache.org/jira/browse/NIFI-12140

Are there any future plans to implement it?

Kind regards
Fabian

-- 
Fabian Reiber, M.Sc.                      (Projekt- u. Entwicklungsteam)
Phone: +49 40 808077-689 Fax: +49 40 808077-556 Mail: reiber@dfn-cert.de

DFN-CERT Services GmbH, https://www.dfn-cert.de/, Phone  +49 40 808077-555
Sitz / Register: Hamburg, AG Hamburg, HRB 88805,  Ust-IdNr.:  DE 232129737
Nagelsweg 41, 20097 Hamburg, Germany. CEO: Dr. Klaus-Peter Kossakowski


Re: ACLs in RedisDistributedMapCacheClientService

Posted by Fabian Reiber <re...@dfn-cert.de>.
Hi,

On 10/5/23 18:40, Bryan Bende wrote:
> Hello,
>
> I think the change would actually be in the RedisConnectionPool services
> since that is where the password fields are specified right?

Yes I would expect it there.

>
> It looks like the connection factory can be configured with a username and
> a sentinel username, and we currently don't set either.

I would expect, that NiFi uses "default" as username in both cases, 
because this is the default username in redis.

>
> Are you asking to expose these two username fields as properties on the
> connection pool service?

Yes, I do :)


Thanks for your help!
Kind regards
Fabian
> On Thu, Oct 5, 2023 at 7:33 AM Fabian Reiber <re...@dfn-cert.de> wrote:
>
>> Hi people,
>>
>> I would like to use ACLs of my redis sentinel cluster with NiFi. But the
>> "RedisDistributedMapCacheClientService" does not allow this. It is
>> possible to configure a password (for the server and the sentinel), but
>> not possible to use a different username for both. I expect, NiFi uses
>> the default user to connect to the server and sentinel!?
>>
>> I already opened an issue:
>> https://issues.apache.org/jira/browse/NIFI-12140
>>
>> Are there any future plans to implement it?
>>
>> Kind regards
>> Fabian
>>
>> --
>> Fabian Reiber, M.Sc.                      (Projekt- u. Entwicklungsteam)
>> Phone: +49 40 808077-689 Fax: +49 40 808077-556 Mail: reiber@dfn-cert.de
>>
>> DFN-CERT Services GmbH, https://www.dfn-cert.de/, Phone  +49 40 808077-555
>> Sitz / Register: Hamburg, AG Hamburg, HRB 88805,  Ust-IdNr.:  DE 232129737
>> Nagelsweg 41, 20097 Hamburg, Germany. CEO: Dr. Klaus-Peter Kossakowski
>>
>>

-- 
Fabian Reiber, M.Sc.                      (Projekt- u. Entwicklungsteam)
Phone: +49 40 808077-689 Fax: +49 40 808077-556 Mail: reiber@dfn-cert.de

DFN-CERT Services GmbH, https://www.dfn-cert.de/, Phone  +49 40 808077-555
Sitz / Register: Hamburg, AG Hamburg, HRB 88805,  Ust-IdNr.:  DE 232129737
Nagelsweg 41, 20097 Hamburg, Germany. CEO: Dr. Klaus-Peter Kossakowski


Re: ACLs in RedisDistributedMapCacheClientService

Posted by Bryan Bende <bb...@gmail.com>.
Hello,

I think the change would actually be in the RedisConnectionPool services
since that is where the password fields are specified right?

It looks like the connection factory can be configured with a username and
a sentinel username, and we currently don't set either.

Are you asking to expose these two username fields as properties on the
connection pool service?

Thanks,

Bryan

On Thu, Oct 5, 2023 at 7:33 AM Fabian Reiber <re...@dfn-cert.de> wrote:

> Hi people,
>
> I would like to use ACLs of my redis sentinel cluster with NiFi. But the
> "RedisDistributedMapCacheClientService" does not allow this. It is
> possible to configure a password (for the server and the sentinel), but
> not possible to use a different username for both. I expect, NiFi uses
> the default user to connect to the server and sentinel!?
>
> I already opened an issue:
> https://issues.apache.org/jira/browse/NIFI-12140
>
> Are there any future plans to implement it?
>
> Kind regards
> Fabian
>
> --
> Fabian Reiber, M.Sc.                      (Projekt- u. Entwicklungsteam)
> Phone: +49 40 808077-689 Fax: +49 40 808077-556 Mail: reiber@dfn-cert.de
>
> DFN-CERT Services GmbH, https://www.dfn-cert.de/, Phone  +49 40 808077-555
> Sitz / Register: Hamburg, AG Hamburg, HRB 88805,  Ust-IdNr.:  DE 232129737
> Nagelsweg 41, 20097 Hamburg, Germany. CEO: Dr. Klaus-Peter Kossakowski
>
>