[ 
https://issues.apache.org/jira/browse/NIFI-5431?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16545288#comment-16545288
 ] 

Tony Mao commented on NIFI-5431:
--------------------------------

[~pvillard], Yes. It existed because I can log into Nifi by this account. So 
the authentication is working for me but the authorization doesn't. And the 
users.xml file wasn't generated successfully by Nifi restarting. 

Setting 'User Identity Attribute' to 'cn' doesn't help. 

Thanks.

> Authorization with LDAP does work for first launch
> --------------------------------------------------
>
>                 Key: NIFI-5431
>                 URL: https://issues.apache.org/jira/browse/NIFI-5431
>             Project: Apache NiFi
>          Issue Type: Bug
>    Affects Versions: 1.7.0
>         Environment: Ubuntu 16.04
>            Reporter: Tony Mao
>            Priority: Major
>         Attachments: authorizers.xml
>
>
> I'm trying to make authorization works with our LDAP server. I have installed 
> a new 1.7.0 instance without any legacy things on my Ubuntu. But when I tried 
> to start the nifi by nifi.sh start command, I got the error from 
> nifi-bootstrap.log like following
> {code:java}
> 2018-07-16 01:34:48,267 ERROR [NiFi logging handler] org.apache.nifi.StdErr 
> Failed to start web server: Error creating bean with name 
> 'org.springframework.security.config.annotation.web.configuration.WebSecurityConfiguration':
>  Unsatisfied dependency expressed through method 
> 'setFilterChainProxySecurityConfigurer' parameter 1; nested exception is 
> org.springframework.beans.factory.BeanExpressionException: Expression parsing 
> failed; nested exception is 
> org.springframework.beans.factory.UnsatisfiedDependencyException: Error 
> creating bean with name 
> 'org.apache.nifi.web.NiFiWebApiSecurityConfiguration': Unsatisfied dependency 
> expressed through method 'setJwtAuthenticationProvider' parameter 0; nested 
> exception is org.springframework.beans.factory.BeanCreationException: Error 
> creating bean with name 'jwtAuthenticationProvider' defined in class path 
> resource [nifi-web-security-context.xml]: Cannot resolve reference to bean 
> 'authorizer' while setting constructor argument; nested exception is 
> org.springframework.beans.factory.BeanCreationException: Error creating bean 
> with name 'authorizer': FactoryBean threw exception on object creation; 
> nested exception is 
> org.apache.nifi.authorization.exception.AuthorizerCreationException: 
> org.apache.nifi.authorization.exception.AuthorizerCreationException: Unable 
> to locate initial admin cn=Tony Mao,ou=Users,ou=Accounts,dc=abc,dc=local to 
> seed policies
> {code}
> Let me attach the config file as well. 
> Need your help please.
> Thanks a lot.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Reply via email to