Peter Wicks created NIFI-2757:
---------------------------------

             Summary: Site-to-Site Auth Breaks when using DN Identity Mapping 
Patterns
                 Key: NIFI-2757
                 URL: https://issues.apache.org/jira/browse/NIFI-2757
             Project: Apache NiFi
          Issue Type: Bug
          Components: Core Framework
    Affects Versions: 1.0.0
            Reporter: Peter Wicks


If you setup a nifi.security.identity.mapping for DN's Site-to-Site won't be 
able to authenticate against the server with identity mappings unless you 
create two user accounts, one for the identity mapped one and another with the 
full DN from the certificate.

Maybe look at StandardRootGroupPort.java, 

final CommunicationsSession commsSession = peer.getCommunicationsSession();
        final String sourceDn = commsSession.getUserDn();

......

final PortAuthorizationResult authorizationResult = 
checkUserAuthorization(sourceDn);



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to