[jira] [Commented] (NIFI-6206) flow inheritance should include authorizations.xml and users.xml

["Bryan Bende (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/NIFI-6206?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16815667#comment-16815667 ] 

Bryan Bende commented on NIFI-6206:
-----------------------------------

[~markbean] this is actually already how it is supposed to work..

[https://github.com/apache/nifi/blob/master/nifi-nar-bundles/nifi-framework-bundle/nifi-framework/nifi-framework-core/src/main/java/org/apache/nifi/controller/StandardFlowSynchronizer.java#L469-L474]

It will only inherit if the node has no users or policies locally. A common issue is if the node has no flow or users/policies, but has an "Initial Admin" in the authorizers.xml, then when it starts up it will first generate the local user and policies, then attempt to join the cluster and will likely be in conflict if the cluster has any other users and policies. So you have to make sure to clear out the Initial Admin when attempting to inherit everything.

> flow inheritance should include authorizations.xml and users.xml
> ----------------------------------------------------------------
>
>                 Key: NIFI-6206
>                 URL: https://issues.apache.org/jira/browse/NIFI-6206
>             Project: Apache NiFi
>          Issue Type: Improvement
>          Components: Core Framework
>    Affects Versions: 1.9.2
>            Reporter: Mark Bean
>            Priority: Major
>
> When a Node joins a cluster and does not contain a flow.xml.gz file, the file is downloaded from the Cluster. The same is not true for either authorizations.xml nor users.xml. However, both of these files contain elements of the flow that are verified for consistency before a Node is allowed to join the Cluster.
> Recommended change: just as in the case of flow.xml.gz, a missing authorizations.xml and/or users.xml file should be inherited and downloaded from the Cluster.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)