Uploaded image for project: 'Apache NiFi'
  1. Apache NiFi
  2. NIFI-2561

Need to separate SPNEGO and service principals for Kerberos

    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 1.0.0
    • Fix Version/s: 1.0.0
    • Component/s: Core Framework
    • Labels:

      Description

      Today we have a single principal used for interacting with NiFi via SPNEGO and when operating as a service. We should offer a way to specify/establish these principals separately such as

      nifi.kerberos.service.principal=nifi/hostname@REALM
      nifi.kerberos.service.keytab=path
      nifi.kerberos.spnego.principal=HTTP/hostname@REALM
      nifi.kerberos.spnego.keytab=path

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                mcgilman Matt Gilman
                Reporter:
                joewitt Joe Witt
              • Votes:
                0 Vote for this issue
                Watchers:
                4 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: