Re: [EXT] Re: GitHub Stuff

2019-06-12 Thread Mike Thomsen
I tried once to publish a GPG key I generated on my MBP, but didn't seem to be able to get far with it. Are there any good ASF-centric resources for setting up a GPG key? Thanks, Mike On Wed, Jun 12, 2019 at 2:20 AM Koji Kawamura wrote: > Thanks Bryan for the heads up. > > My GPG key had been

Re: [EXT] Re: GitHub Stuff

2019-06-12 Thread Bryan Bende
We have a nice guide linked off the website that I think Andy wrote: https://nifi.apache.org/gpg.html >From the perspective of Github verified commits, I think it only really relies on you having added the public GPG key into your account under settings "SSH and GPG keys", and the fact that the e

NiFi Toolkit CLI Token Creation

2019-06-12 Thread Shawn Weeks
I work in an environment reluctant to create self signed ssl certificates and I’m looking at the feasibility of having the toolkit cli authenticate via Kerberos. I was expecting it to be as simple as adding another way to get the authentication token but I’m having trouble figuring out exactly w

Re: NiFi Toolkit CLI Token Creation

2019-06-12 Thread Andy LoPresto
Shawn, I’m not sure I understand your question. I am in the process of refactoring the TLS Toolkit to integrate with public certificate authorities, so in the near future it will be easier to use certificates signed by external authorities rather than self-signed. My understanding is that y

Re: NiFi Toolkit CLI Token Creation

2019-06-12 Thread Bryan Bende
Right now the idea is that whoever is running the CLI would have access to a NiFi server certificate and then you can proxy any user you want. There should be examples of this in the readme or toolkit guide. Supporting Kerberos auth was something I wanted to do, but it’s definitely not a trivial e

Re: NiFi Toolkit CLI Token Creation

2019-06-12 Thread Bryan Bende
I meant to say that you obviously could generate certs for CLI users, but I was just mentioning an alternative where you can proxy an identity. Right now the CLI never obtains a token because it is all cert based. On Wed, Jun 12, 2019 at 1:03 PM Bryan Bende wrote: > Right now the idea is that w