Re: site-to-site configuration

2017-02-23 Thread Andrew Lim
I created a Jira to make sure we update that paragraph in the 1.x User Guide: https://issues.apache.org/jira/browse/NIFI-3526 -Drew > On Feb 23, 2017, at 1:48 PM, Bryan Bende wrote: > > Mark, > > I think you are correct that the paragraph in the user guide should be > updated for 1.x. > > I

Re: site-to-site configuration

2017-02-23 Thread Bryan Bende
Mark, I think you are correct that the paragraph in the user guide should be updated for 1.x. I know the admin guide has a section about users and policies in general, but not necessarily specific to site-to-site: https://nifi.apache.org/docs/nifi-docs/html/administration-guide.html#config-users

Re: site-to-site configuration

2017-02-23 Thread Mark Bean
Ok. Understood. I created the policy and added the user (server.) All is working as expected now. Is this process of manipulating policies required for secure site-to-site documented anywhere? The User Guide still talked about Access Control and the NiFi Role which seems to apply only to 0.x. Tha

Re: site-to-site configuration

2017-02-23 Thread Bryan Bende
Mark, When you are looking at the "receive data via site-to-site" for the input port, is there a link across the top to "Create Policy"? I think you need to create a policy first then you can add users. Thanks, Bryan On Thu, Feb 23, 2017 at 1:01 PM, Mark Bean wrote: > Bryan, > > The server is

Re: site-to-site configuration

2017-02-23 Thread Mark Bean
Bryan, The server is listed on the global policy for "retrieve site-to-site details". However, I am not able to add users to the "receive data via site-to-site" policy for the given Input Port (the add user button is grayed out.) Under global access policies, "access all policies/modify", I am lis

Re: site-to-site configuration

2017-02-23 Thread Bryan Bende
Hi Mark, There are two policies needed for secure site-to-site... In the global policies there needs to be a policy for "retrieve site-to-site details" with the user of the server added. In the policies for the port (from the palette on the left when the port is selected) there needs to be a pol

site-to-site configuration

2017-02-23 Thread Mark Bean
I am attempting to setup secure site-to-site using NiFi 1.1.1. I have secured NiFi, and am able to access the UI securely via HTTPS. I have set the following security-related properties: nifi.sensitive.props.key= nifi.sensitive.props.key.protected= nifi.sensitive.props.algorithm=PBEWITHMD5AND256BI