[GitHub] nifi issue #2552: NIFI-4917: Externalize Keytab and Principal configuration ...

[markap14 <gi...@git.apache.org>]

Github user markap14 commented on the issue:

    https://github.com/apache/nifi/pull/2552
  
    @pvillard31 no, we don't want the ALLOW_EXPLICIT_KEYTAB stuff in nifi.properties for a couple of reasons. For one, it is really intended to be a fairly short-lived thing - eventually we will want to remove the properties for principal & keytab from the processors all together. They are allowed there now only in order to ease the transition of upgrading, so that we don't immediately force all users to reconfigure all processors that use keytabs. So adding it to nifi.properties in that respect feels a bit odd.
    
    Additionally, processors themselves don't have access to nifi.properties. These are system-level properties, not intended to be used by processors. (Processors probably could still get access to the properties if you really want to desperately enough, but it would mean doing some rather hack-ish things in code, I do believe, as they are not intended to be used by processors).
    
    Finally, we don't want to allow someone to access the NiFiProperties class and call setProperty in order to disable this checking.


---