[jira] [Commented] (NIFI-7219) Authentication fails if nifi.security.keyPasswd is empty

["Andy LoPresto (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/NIFI-7219?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17051468#comment-17051468 ] 

Andy LoPresto commented on NIFI-7219:
-------------------------------------

Gergely, thank you for reporting this. I am closing it as a duplicate of NIFI-7223. It is actively being worked and I believe the last set of testing is being run today. Please continue to track status on that ticket. 

> Authentication fails if nifi.security.keyPasswd is empty
> --------------------------------------------------------
>
>                 Key: NIFI-7219
>                 URL: https://issues.apache.org/jira/browse/NIFI-7219
>             Project: Apache NiFi
>          Issue Type: Bug
>          Components: Configuration
>    Affects Versions: 1.11.3
>            Reporter: Gergely Novák
>            Assignee: Nathan Gough
>            Priority: Major
>
> nifi.properties:
> {code}
> nifi.security.keyPasswd=
> {code}
> The [documentation|https://nifi.apache.org/docs/nifi-docs/html/administration-guide.html#security_configuration] says that "if not set, the value of nifi.security.keystorePasswd will be used." This is true until 1.11.2, but in 1.11.3 with the above setup the authentication fails.
> When using the API, every (replicated) call, e.g. {{/flow/current-user}}, fails with
> {code}
> Unknown user with identity 'anonymous'. Contact the system administrator.
> {code}
> When using the UI, it always redirects to {{/nifi/login}} and then says "You are already logged in."
> Both of the following solves the issue:
> * downgrading to 1.11.2
> * removing {{nifi.security.keyPasswd}} from {{nifi.properties}} completely



--
This message was sent by Atlassian Jira
(v8.3.4#803005)