[jira] [Resolved] (NIFI-10467) Unable to access API with OIDC login "Anonymous authentication has not been configured."

["David Handermann (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/NIFI-10467?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

David Handermann resolved NIFI-10467.
-------------------------------------
    Fix Version/s:     (was: 1.16.3)
         Assignee: David Handermann
       Resolution: Information Provided

NiFi supports X.509 client certificate authentication in addition to other types of authentication, including OIDC.

In this scenario, it is possible to issue a client certificate to the monitoring server and use it for mutual TLS authentication to the NiFi REST API. This requires configuring the certificate subject distinguished name in the list of authorized users, and it requires that a trusted certificate authority issues the certificate.

See the NiFi documentation on TLS configuration, and feel free to follow up if there are additional questions.

https://nifi.apache.org/docs/nifi-docs/html/walkthroughs.html#securing-nifi-with-tls

> Unable to access API with OIDC login "Anonymous authentication has not been configured."
> ----------------------------------------------------------------------------------------
>
>                 Key: NIFI-10467
>                 URL: https://issues.apache.org/jira/browse/NIFI-10467
>             Project: Apache NiFi
>          Issue Type: Wish
>          Components: Configuration
>    Affects Versions: 1.16.3
>            Reporter: Jack Burton
>            Assignee: David Handermann
>            Priority: Major
>
> We have a problem with the health check monitoring cluster nifi with zabbix
> After create web scenario for monitoring nifi and trying to check status cluster, we receive 401 http error for https://nificluster/nifi-api/flow/cluster/summary
> The step for monitoring are:
> 1 - connecting to site https://nificluster/nifi/ (using zabbix basic login) and it's ok with http 200
> 2 - connecting to api nifi  https://nificluster/nifi-api/flow/cluster/summary error 401.
> In our nifi cluster is configurate oidc login.
> If I try to connect to  https://nificluster/nifi/ via browser and switch url in  https://nificluster/nifi-api/flow/cluster/summary it's ok, I see the status cluster but not from zabbix.
> there is a method to resolve this issue or a bash scripting that can to resolve it? Or how I can montoring the status cluster with other methods?



--
This message was sent by Atlassian Jira
(v8.20.10#820010)