You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@nifi.apache.org by "christofe lintermans (Jira)" <ji...@apache.org> on 2024/11/25 13:20:00 UTC
[jira] [Updated] (NIFI-14045) Auth environment variable not set, key and trust store environment variables are not implied.
[ https://issues.apache.org/jira/browse/NIFI-14045?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
christofe lintermans updated NIFI-14045:
----------------------------------------
Description:
* The "auth environment variable" refers to an environment variable that NiFi expects to indicate the type of user authentication (TLS, LDAP, Kerberos).
* The problem here is that without a properly set environment variable for AUTH, where I just want to use simple user/pw, the entire SSL security chain is also not triggered effectively. NiFi starts up and generates a custom keystore & truststore PCKS12. I have no way of controlling these certificates, except by setting the "AUTH" environment variable. The issue is probably that when the auth is not specified, it doesn't execute the secure.sh script.
was:
* The "auth environment variable" refers to an environment variable that NiFi expects to indicate the type of user authentication (TLS, LDAP, Kerberos).
* The problem here is that without a properly set environment variable for AUTH, the entire SSL security chain is also not triggered effectively. NiFi starts up and generates a custom keystore & truststore PCKS12. I have no way of controlling these certificates, except by setting the "AUTH" environment variable. The issue is probably that when the auth is not specified, it doesn't execute the secure.sh script.
> Auth environment variable not set, key and trust store environment variables are not implied.
> ---------------------------------------------------------------------------------------------
>
> Key: NIFI-14045
> URL: https://issues.apache.org/jira/browse/NIFI-14045
> Project: Apache NiFi
> Issue Type: Bug
> Components: Docker, Security
> Affects Versions: 2.0.0
> Environment: single VM, single NiFi (unclustered)
> docker ce
> official apache/nifi:2.0.0 image
> Reporter: christofe lintermans
> Priority: Critical
> Fix For: 2.0.0
>
>
> * The "auth environment variable" refers to an environment variable that NiFi expects to indicate the type of user authentication (TLS, LDAP, Kerberos).
> * The problem here is that without a properly set environment variable for AUTH, where I just want to use simple user/pw, the entire SSL security chain is also not triggered effectively. NiFi starts up and generates a custom keystore & truststore PCKS12. I have no way of controlling these certificates, except by setting the "AUTH" environment variable. The issue is probably that when the auth is not specified, it doesn't execute the secure.sh script.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)