Re: Configuring NiFi for OIDC

Fri, 06 Dec 2024 13:32:43 -0800

Hi Alan,
Until you get a better response, you should check if NiFi can reach the https://oidc.stage.elogin…../.well-known/openid-configuration URL.
If you’re running NiFi in docker, you’ll need to check from inside the container.

Sent from my iPhone

On Dec 6, 2024, at 13:53, LAFLEUR, ALAN <[email protected]> wrote:


Thanks David.  I'm attempting to add the app logs as an attachment.  Assuming it works, is that the stacktrace you mentioned?  



From: David Handermann <[email protected]>
Sent: Friday, December 6, 2024 9:01 AM
To: [email protected] <[email protected]>
Subject: Re: Configuring NiFi for OIDC
 
This Message Is From an External Sender
This message came from outside AT&T. Click for additional detail.
 
Hi Alan,

There should be a stack trace following the metadata URL retrieval
error. That should provide additional details related to error.

Regards,
David Handermann

On Fri, Dec 6, 2024 at 10:16 AM LAFLEUR, ALAN <[email protected]> wrote:
>
> Hi All,
> I'm fairly new to NiFi and have my Ubuntu instance running fine with single identity config.  However, I am now trying to configure NiFi for OIDC but when I start the nifi process it dies with the error below.  A curl shows that at least basic connectivity is working to the IDP.   Any ideas what could be causing this?  I can provide my nifi.properties and/or authorizers.xml if needed.
> 2024-11-20 00:22:09,786 ERROR [main] o.s.web.context.ContextLoader Context initialization failed
> org.springframework.beans.factory.UnsatisfiedDependencyException: Error creating bean with name 'org.springframework.security.config.annotation.web.configuration.WebSecurityConfiguration': Unsatisfied dependency
> expressed through method 'setFilterChains' parameter 0; nested exception is org.springframework.beans.factory.UnsatisfiedDependencyException: Error creating bean with name 'securityFilterChain' defined in org.a
> pache.nifi.web.security.configuration.WebSecurityConfiguration: Unsatisfied dependency expressed through method 'securityFilterChain' parameter 7; nested exception is org.springframework.beans.factory.BeanCreati
> onException: Error creating bean with name 'oAuth2LoginAuthenticationFilter' defined in org.apache.nifi.web.security.configuration.OidcSecurityConfiguration: Bean instantiation via factory method failed; nested
> exception is org.springframework.beans.BeanInstantiationException: Failed to instantiate [org.springframework.security.oauth2.client.web.OAuth2LoginAuthenticationFilter]: Factory method 'oAuth2LoginAuthenticatio
> nFilter' threw exception; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'clientRegistrationRepository' defined in org.apache.nifi.web.security.configu
> ration.OidcSecurityConfiguration: Bean instantiation via factory method failed; nested exception is org.springframework.beans.BeanInstantiationException: Failed to instantiate [org.springframework.security.oauth
> 2.client.registration.ClientRegistrationRepository]: Factory method 'clientRegistrationRepository' threw exception; nested exception is org.apache.nifi.web.security.oidc.OidcConfigurationException: OpenID Connec
> t Metadata URL [https://oidc.stage.elogin.att.com/mga/sps/oauth/oauth20/metadata/ATTOIDC/.well-known/openid-configur...] retrieval failed
> Thanks for any assistance you can provide,
> Alan LaFleur
>
<nifi-app.log>

Reply via email to