Hi Kevin,
 
Thanks a lot for your help.
I tried to modify the property " nifi.security.needClientAuth " from true to false, unfortunately, it didn't work, displayed the same error.
 
However, I find that the  "nifi.security.user.login.identity.provider"  is not set to any value in the nifi.properties.
 
So in this case, what should I do to send a HTTPS request to the Nifi Restful API to do something like start/stop the processor using curl?
 
Thanks & Best Regards
 
Joey(Tian) Deng
-------------------------------------------------------------------------------------------
IT Specialist
IBM China Global Delivery Center
Tel: (+86) 27 59269644
E-mail: [email protected]
WhatsApp: +86 15671158671
-------------------------------------------------------------------------------------------
 
 
----- Original message -----
From: Kevin Doran <[email protected]>
To: <[email protected]>
Cc:
Subject: Re: Error when sending HTTPS request to Nifi using the Restful API
Date: Fri, Mar 16, 2018 9:58 PM
 

When using access tokens, make sure your NiFi instance is configured to not require client certificates for the TLS certificates:

 

nifi.security.needClientAuth=false

 

This is because you only want the NiFi server (not the client) to establish its identity with a TLS certificate; the client will establish identity after the TLS connection is established by passing the username and password credentials that will be validated by the Login Identity Provider you configured for NiFi. For example:

 

nifi.security.user.login.identity.provider=ldap-provider

 

where “ldap-provider” is configured in login-identity-providers.xml

 

Hope this helps!

Kevin

 

From: Tian TD Deng <[email protected]>
Reply-To: <[email protected]>
Date: Friday, March 16, 2018 at 04:51
To: <[email protected]>
Subject: Error when sending HTTPS request to Nifi using the Restful API

 

 

I was trying to send HTTPS request to Nifi using the Restful API via curl, however, it didn't work as expected.

 

curl -k --tlsv1.2  https://localhost:8443/nifi-api/access/token --data 'username=test&password=password'

 

cid:152117863809417

 

Could you please help to give some advice about this?

Thanks a lot!

 

Thanks & Best Regards
 

Joey(Tian) Deng

-------------------------------------------------------------------------------------------
IT Specialist
IBM China Global Delivery Center
Tel: (+86) 27 59269644
E-mail: [email protected]

WhatsApp: +86 15671158671
-------------------------------------------------------------------------------------------



 

Reply via email to