[NIFI-9307] Nifi 1.14.0 does not work when LDAP is configured

• Type: Bug
• Status: Resolved
• Priority: Blocker
• Resolution: Fixed
• Affects Version/s: 1.14.0
• Fix Version/s: 1.15.0
• Labels: Authentication LDAP bug

Environment

Machine
Windows 10
Version 1909
OS Build 18363.1801
WLS2 Ubuntu 20.04 (Focal Fossa)

NIFI
Docker image: apache/nifi:1.14.0
Environment Variables:
      KEYSTORE_PATH: ./conf/keystore.jks
      KEYSTORE_TYPE: JKS
      KEYSTORE_PASSWORD: some-password
      TRUSTSTORE_PATH: ./conf/truststore.jks
      TRUSTSTORE_PASSWORD: some-password
      TRUSTSTORE_TYPE: JKS
      AUTH: ldap
      LDAP_AUTHENTICATION_STRATEGY: SIMPLE
      LDAP_USER_SEARCH_BASE: OU=some-value
      LDAP_USER_SEARCH_FILTER: cn={0}
      LDAP_IDENTITY_STRATEGY: USE_USERNAME
      LDAP_MANAGER_DN: "some-identity"
      LDAP_URL: "ldap://proxy:389"
      INITIAL_ADMIN_IDENTITY: "some-identity"
      NIFI_WEB_HTTPS_PORT: "9443"

• Assignee: David Handermann
• Reporter: Guilherme Caixeta
• Created: 18/Oct/21 15:33
• Updated: 17/Nov/21 13:58
• Resolved: 17/Nov/21 13:58

Description

I tried to run the Nifi from docker with LDAP configured, although is thrown an error on NIFI related to the single user configuration.

Below a copy of log:

{{2021-10-18 15:13:27,670 INFO [main] org.eclipse.jetty.server.Server Started @69849ms}}
{{ 2021-10-18 15:13:27,671 WARN [main] org.apache.nifi.web.server.JettyServer Failed to start web server... shutting down.}}
{{ org.springframework.beans.factory.UnsatisfiedDependencyException: Error creating bean with name 'org.springframework.security.config.annotation.web.configuration.WebSecurityConfiguration': Unsatisfied dependency expressed through method 'setFilterChainProxySecurityConfigurer' parameter 1; nested exception is org.springframework.beans.factory.BeanExpressionException: Expression parsing failed; nested exception is org.springframework.beans.factory.UnsatisfiedDependencyException: Error creating bean with name 'org.apache.nifi.web.NiFiWebApiSecurityConfiguration': Unsatisfied dependency expressed through method 'setJwtAuthenticationProvider' parameter 0; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'jwtAuthenticationProvider' defined in class path resource [nifi-web-security-context.xml]: Cannot resolve reference to bean 'authorizer' while setting constructor argument; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'authorizer': FactoryBean threw exception on object creation; nested exception is java.lang.reflect.InvocationTargetException}}
{{ {{ at org.springframework.beans.factory.annotation.AutowiredAnnotationBeanPostProcessor$AutowiredMethodElement.resolveMethodArguments(AutowiredAnnotationBeanPostProcessor.java:768)}}}}
{{ {{ at org.springframework.beans.factory.annotation.AutowiredAnnotationBeanPostProcessor$AutowiredMethodElement.inject(AutowiredAnnotationBeanPostProcessor.java:720)}}}}
{{ {{ at org.springframework.beans.factory.annotation.InjectionMetadata.inject(InjectionMetadata.java:119)}}}}
{{ {{ at org.springframework.beans.factory.annotation.AutowiredAnnotationBeanPostProcessor.postProcessProperties(AutowiredAnnotationBeanPostProcessor.java:399)}}}}
{{ {{ at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.populateBean(AbstractAutowireCapableBeanFactory.java:1413)}}}}
{{ {{ at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:601)}}}}
{{ {{ at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:524)}}}}
{{ {{ at org.springframework.beans.factory.support.AbstractBeanFactory.lambda$doGetBean$0(AbstractBeanFactory.java:335)}}}}
{{ {{ at org.springframework.beans.factory.support.DefaultSingletonBeanRegistry.getSingleton(DefaultSingletonBeanRegistry.java:234) }}}}
{{ {{ at org.springframework.beans.factory.support.AbstractBeanFactory.doGetBean(AbstractBeanFactory.java:333)}}}}
{{ {{ at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:208)}}}}
{{ {{ at org.springframework.beans.factory.support.DefaultListableBeanFactory.preInstantiateSingletons(DefaultListableBeanFactory.java:944)}}}}
{{ {{ at org.springframework.context.support.AbstractApplicationContext.finishBeanFactoryInitialization(AbstractApplicationContext.java:918)}}}}
{{ {{ at org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:583)}}}}
{{ {{ at org.springframework.web.context.ContextLoader.configureAndRefreshWebApplicationContext(ContextLoader.java:401)}}}}
{{ {{ at org.springframework.web.context.ContextLoader.initWebApplicationContext(ContextLoader.java:292)}}}}
{{ {{ at org.springframework.web.context.ContextLoaderListener.contextInitialized(ContextLoaderListener.java:103)}}}}
{{ {{ at org.eclipse.jetty.server.handler.ContextHandler.callContextInitialized(ContextHandler.java:1068)}}}}
{{ {{ at org.eclipse.jetty.servlet.ServletContextHandler.callContextInitialized(ServletContextHandler.java:572)}}}}
{{ {{ at org.eclipse.jetty.server.handler.ContextHandler.contextInitialized(ContextHandler.java:997)}}}}
{{ {{ at org.eclipse.jetty.servlet.ServletHandler.initialize(ServletHandler.java:746)}}}}
{{ {{ at org.eclipse.jetty.servlet.ServletContextHandler.startContext(ServletContextHandler.java:379)}}}}
{{ {{ at org.eclipse.jetty.webapp.WebAppContext.startWebapp(WebAppContext.java:1449)}}}}
{{ {{ at org.eclipse.jetty.webapp.WebAppContext.startContext(WebAppContext.java:1414)}}}}
{{ {{ at org.eclipse.jetty.server.handler.ContextHandler.doStart(ContextHandler.java:911)}}}}
{{ {{ at org.eclipse.jetty.servlet.ServletContextHandler.doStart(ServletContextHandler.java:288)}}}}
{{ {{ at org.eclipse.jetty.webapp.WebAppContext.doStart(WebAppContext.java:524)}}}}
{{ {{ at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:73)}}}}
{{ {{ at org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:169)}}}}
{{ {{ at org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:117)}}}}
{{ {{ at org.eclipse.jetty.server.handler.AbstractHandler.doStart(AbstractHandler.java:97)}}}}
{{ {{ at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:73)}}}}
{{ {{ at org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:169)}}}}
{{ {{ at org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:110)}}}}
{{ {{ at org.eclipse.jetty.server.handler.AbstractHandler.doStart(AbstractHandler.java:97)}}}}
{{ {{ at org.eclipse.jetty.server.handler.gzip.GzipHandler.doStart(GzipHandler.java:426)}}}}
{{ {{ at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:73)}}}}
{{ {{ at org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:169)}}}}
{{ {{ at org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:117)}}}}
{{ {{ at org.eclipse.jetty.server.handler.AbstractHandler.doStart(AbstractHandler.java:97)}}}}
{{ {{ at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:73)}}}}
{{ {{ at org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:169)}}}}
{{ {{ at org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:117)}}}}
{{ {{ at org.eclipse.jetty.server.handler.AbstractHandler.doStart(AbstractHandler.java:97)}}}}
{{ {{ at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:73)}}}}
{{ {{ at org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:169)}}}}
{{ {{ at org.eclipse.jetty.server.Server.start(Server.java:423)}}}}
{{ {{ at org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:110)}}}}
{{ {{ at org.eclipse.jetty.server.handler.AbstractHandler.doStart(AbstractHandler.java:97)}}}}
{{ {{ at org.eclipse.jetty.server.Server.doStart(Server.java:387)}}}}
{{ {{ at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:73)}}}}
{{ {{ at org.apache.nifi.web.server.JettyServer.start(JettyServer.java:1129)}}}}
{{ {{ at org.apache.nifi.NiFi.<init>(NiFi.java:159)}}}}
{{ {{ at org.apache.nifi.NiFi.<init>(NiFi.java:71)}}}}
{{ {{ at org.apache.nifi.NiFi.main(NiFi.java:303)}}}}
{{ {{Caused by: org.springframework.beans.factory.BeanExpressionException: Expression parsing failed; nested exception is org.springframework.beans.factory.UnsatisfiedDependencyException: Error creating bean with name 'org.apache.nifi.web.NiFiWebApiSecurityConfiguration': }}}}
{{ Unsatisfied dependency expressed through method 'setJwtAuthenticationProvider' parameter 0; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'jwtAuthenticationProvider' defined in class path resource [nifi-web-security-context.xml]: Cannot resolve reference to bean 'authorizer' while setting constructor argument; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'authorizer': FactoryBean threw exception on object creation; nested exception is java.lang.reflect.InvocationTargetException}}
{{ {{ at org.springframework.context.expression.StandardBeanExpressionResolver.evaluate(StandardBeanExpressionResolver.java:169) }}}}
{{ {{ at org.springframework.beans.factory.support.AbstractBeanFactory.evaluateBeanDefinitionString(AbstractBeanFactory.java:1631) }}}}
{{ {{ at org.springframework.beans.factory.support.DefaultListableBeanFactory.doResolveDependency(DefaultListableBeanFactory.java:1324)}}}}
{{ {{ at org.springframework.beans.factory.support.DefaultListableBeanFactory.resolveDependency(DefaultListableBeanFactory.java:1300)}}}}
{{ {{ at org.springframework.beans.factory.annotation.AutowiredAnnotationBeanPostProcessor$AutowiredMethodElement.resolveMethodArguments(AutowiredAnnotationBeanPostProcessor.java:760)}}}}
{{ {{ ... 54 common frames omitted}}}}
{{ Caused by: org.springframework.beans.factory.UnsatisfiedDependencyException: Error creating bean with name 'org.apache.nifi.web.NiFiWebApiSecurityConfiguration': Unsatisfied dependency expressed through method 'setJwtAuthenticationProvider' parameter 0; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'jwtAuthenticationProvider' defined in class path resource [nifi-web-security-context.xml]: Cannot resolve reference to bean 'authorizer' while setting constructor argument; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'authorizer': FactoryBean threw exception on object creation; nested exception is java.lang.reflect.InvocationTargetException}}
{{ {{ at org.springframework.beans.factory.annotation.AutowiredAnnotationBeanPostProcessor$AutowiredMethodElement.resolveMethodArguments(AutowiredAnnotationBeanPostProcessor.java:768)}}}}
{{ {{ at org.springframework.beans.factory.annotation.AutowiredAnnotationBeanPostProcessor$AutowiredMethodElement.inject(AutowiredAnnotationBeanPostProcessor.java:720)}}}}
{{ {{ at org.springframework.beans.factory.annotation.InjectionMetadata.inject(InjectionMetadata.java:119)}}}}
{{ {{ at org.springframework.beans.factory.annotation.AutowiredAnnotationBeanPostProcessor.postProcessProperties(AutowiredAnnotationBeanPostProcessor.java:399)}}}}
{{ {{ at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.populateBean(AbstractAutowireCapableBeanFactory.java:1413)}}}}
{{ {{ at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:601)}}}}
{{ {{ at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:524)}}}}
{{ {{ at org.springframework.beans.factory.support.AbstractBeanFactory.lambda$doGetBean$0(AbstractBeanFactory.java:335)}}}}
{{ {{ at org.springframework.beans.factory.support.DefaultSingletonBeanRegistry.getSingleton(DefaultSingletonBeanRegistry.java:234) }}}}
{{ {{ at org.springframework.beans.factory.support.AbstractBeanFactory.doGetBean(AbstractBeanFactory.java:333)}}}}
{{ {{ at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:208)}}}}
{{ {{ at org.springframework.beans.factory.support.DefaultListableBeanFactory.getBeansOfType(DefaultListableBeanFactory.java:671) }}}}
{{ {{ at org.springframework.beans.factory.support.DefaultListableBeanFactory.getBeansOfType(DefaultListableBeanFactory.java:659) }}}}
{{ {{ at org.springframework.security.config.annotation.web.configuration.AutowiredWebSecurityConfigurersIgnoreParents.getWebSecurityConfigurers(AutowiredWebSecurityConfigurersIgnoreParents.java:51)}}}}
{{ {{ at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)}}}}
{{ {{ at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)}}}}
{{ {{ at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)}}}}
{{ {{ at java.lang.reflect.Method.invoke(Method.java:498)}}}}
{{ {{ at org.springframework.expression.spel.support.ReflectiveMethodExecutor.execute(ReflectiveMethodExecutor.java:129)}}}}
{{ {{ at org.springframework.expression.spel.ast.MethodReference.getValueInternal(MethodReference.java:139)}}}}
{{ {{ at org.springframework.expression.spel.ast.MethodReference.access$000(MethodReference.java:55)}}}}
{{ {{ at org.springframework.expression.spel.ast.MethodReference$MethodValueRef.getValue(MethodReference.java:387)}}}}
{{ {{ at org.springframework.expression.spel.ast.CompoundExpression.getValueInternal(CompoundExpression.java:92)}}}}
{{ {{ at org.springframework.expression.spel.ast.SpelNodeImpl.getValue(SpelNodeImpl.java:112)}}}}
{{ {{ at org.springframework.expression.spel.standard.SpelExpression.getValue(SpelExpression.java:272)}}}}
{{ {{ at org.springframework.context.expression.StandardBeanExpressionResolver.evaluate(StandardBeanExpressionResolver.java:166) }}}}
{{ {{ ... 58 common frames omitted}}}}
{{ {{Caused by: org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'jwtAuthenticationProvider' defined }}}}
{{ in class path resource [nifi-web-security-context.xml]: Cannot resolve reference to bean 'authorizer' while setting constructor argument; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'authorizer': FactoryBean threw exception on object creation; nested exception is java.lang.reflect.InvocationTargetException}}
{{ {{ at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveReference(BeanDefinitionValueResolver.java:342)}}}}
{{ {{ at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveValueIfNecessary(BeanDefinitionValueResolver.java:113)}}}}
{{ {{ at org.springframework.beans.factory.support.ConstructorResolver.resolveConstructorArguments(ConstructorResolver.java:693) }}}}
{{ {{ at org.springframework.beans.factory.support.ConstructorResolver.autowireConstructor(ConstructorResolver.java:198)}}}}
{{ {{ at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.autowireConstructor(AbstractAutowireCapableBeanFactory.java:1354)}}}}
{{ {{ at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBeanInstance(AbstractAutowireCapableBeanFactory.java:1204)}}}}
{{ {{ at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:564)}}}}
{{ {{ at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:524)}}}}
{{ {{ at org.springframework.beans.factory.support.AbstractBeanFactory.lambda$doGetBean$0(AbstractBeanFactory.java:335)}}}}
{{ {{ at org.springframework.beans.factory.support.DefaultSingletonBeanRegistry.getSingleton(DefaultSingletonBeanRegistry.java:234)}}}}
{{ {{ at org.springframework.beans.factory.support.AbstractBeanFactory.doGetBean(AbstractBeanFactory.java:333)}}}}
{{ {{ at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:208)}}}}
{{ {{ at org.springframework.beans.factory.config.DependencyDescriptor.resolveCandidate(DependencyDescriptor.java:276)}}}}
{{ {{ at org.springframework.beans.factory.support.DefaultListableBeanFactory.doResolveDependency(DefaultListableBeanFactory.java:1380)}}}}
{{ {{ at org.springframework.beans.factory.support.DefaultListableBeanFactory.resolveDependency(DefaultListableBeanFactory.java:1300)}}}}
{{ {{ at org.springframework.beans.factory.annotation.AutowiredAnnotationBeanPostProcessor$AutowiredMethodElement.resolveMethodArguments(AutowiredAnnotationBeanPostProcessor.java:760)}}}}
{{ {{ ... 83 common frames omitted}}}}
{{ Caused by: org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'authorizer': FactoryBean threw exception on object creation; nested exception is java.lang.reflect.InvocationTargetException}}
{{ {{ at org.springframework.beans.factory.support.FactoryBeanRegistrySupport.doGetObjectFromFactoryBean(FactoryBeanRegistrySupport.java:176)}}}}
{{ {{ at org.springframework.beans.factory.support.FactoryBeanRegistrySupport.getObjectFromFactoryBean(FactoryBeanRegistrySupport.java:101)}}}}
{{ {{ at org.springframework.beans.factory.support.AbstractBeanFactory.getObjectForBeanInstance(AbstractBeanFactory.java:1884) }}}}
{{ {{ at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.getObjectForBeanInstance(AbstractAutowireCapableBeanFactory.java:1266)}}}}
{{ {{ at org.springframework.beans.factory.support.AbstractBeanFactory.doGetBean(AbstractBeanFactory.java:345)}}}}
{{ {{ at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:208)}}}}
{{ {{ at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveReference(BeanDefinitionValueResolver.java:330)}}}}
{{ {{ ... 98 common frames omitted}}}}
{{ Caused by: java.lang.reflect.InvocationTargetException: null}}
{{ {{ at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)}}}}
{{ {{ at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)}}}}
{{ {{ at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)}}}}
{{ {{ at java.lang.reflect.Method.invoke(Method.java:498)}}}}
{{ {{ at org.apache.nifi.authorization.AuthorizerFactoryBean.performMethodInjection(AuthorizerFactoryBean.java:413)}}}}
{{ {{ at org.apache.nifi.authorization.AuthorizerFactoryBean.createAuthorizer(AuthorizerFactoryBean.java:365)}}}}
{{ {{ at org.apache.nifi.authorization.AuthorizerFactoryBean.getObject(AuthorizerFactoryBean.java:161)}}}}
{{ {{ at org.springframework.beans.factory.support.FactoryBeanRegistrySupport.doGetObjectFromFactoryBean(FactoryBeanRegistrySupport.java:169)}}}}
{{ {{ ... 104 common frames omitted}}}}
{{ Caused by: org.apache.nifi.authorization.exception.AuthorizerCreationException: SingleUserAuthorizer requires org.apache.nifi.authentication.single.user.SingleUserLoginIdentityProvider to be configured}}
{{ {{ at org.apache.nifi.authorization.single.user.SingleUserAuthorizer.setProperties(SingleUserAuthorizer.java:69)}}}}
{{ {{ ... 112 common frames omitted}}}}
{{ 2021-10-18 15:13:27,676 INFO [Thread-1] org.apache.nifi.NiFi Initiating shutdown of Jetty web server...}}
{{ 2021-10-18 15:13:27,685 INFO [Thread-1] o.eclipse.jetty.server.AbstractConnector Stopped ServerConnector@7db5b890{SSL, (ssl, http/1.1)}{{

{3d069ef81dcd:9443}

}}}}
{{ 2021-10-18 15:13:27,686 INFO [Thread-1] org.eclipse.jetty.server.session node0 Stopped scavenging}}

Issue Links

• is fixed by: NIFI-8783 SingleUserAuthorizer fails start up when not used