[NIFI-4701] Support encrypted properties in authorizers.xml

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.5.0
• Component/s: Configuration
• Assignee: Kevin Doran
• Reporter: Kevin Doran
• Created: 17/Dec/17 16:34
• Updated: 06/Aug/21 13:00
• Resolved: 31/Dec/17 23:14

Description

Since the addition of LdapUserGroupProvider (see NIFI-4059) in v1.4.0, authorizers.xml can now contain properties for LDAP Server credentials.

This ticket is to enable properties in authorizers.xml to be encrypted, so that the LDAP Server Manager credentials can be protected similar to LdapProvider which is configured via login-identity-providers.xml.

The main changes are in nifi-authorizers are:

• authorizers.xsd to add an encryption attribute to Property
• to PropertyAuthorizerFactoryBean to check for that attribute and decrypt the property value if necessary when creating the the configuration context

Additionally, support for creating an encrypted authorizers.xml, protected by the NiFi master key, should be added to the Encrypt Tool in NiFi Toolkit.

Issue Links

• relates to: NIFI-6402 Update Login Identity Provider and Authorizers to use SSPP
• links to: GitHub Pull Request #2350