Property

Description

nifi.registry.security.keystore

The full path and name of the keystore. It is blank by default.

nifi.registry.security.keystoreType

The keystore type. It is blank by default.

nifi.registry.security.keystorePasswd

The keystore password. It is blank by default.

nifi.registry.security.keyPasswd

The key password. It is blank by default.

nifi.registry.security.truststore

The full path and name of the truststore. It is blank by default.

nifi.registry.security.truststoreType

The truststore type. It is blank by default.

nifi.registry.security.truststorePasswd

The truststore password. It is blank by default.

nifi.registry.security.needClientAuth

This specifies that connecting clients must authenticate with a client cert. Setting this to false will specify that connecting clients may optionally authenticate with a client cert, but may also login with a username and password against a configured identity provider. The default value is true.

nifi.registry.security.authorizers.configuration.file

This is the location of the file that specifies how authorizers are defined. The default value is ./conf/authorizers.xml.

nifi.registry.security.authorizer

Specifies which of the configured Authorizers in the authorizers.xml file to use. By default, it is set to managed-authorizer.

nifi.registry.security.identity.providers.configuration.file

This is the location of the file that specifies how username/password authentication is performed. This file is only considered if nifi.registry.security.identity.provider is configured with a provider identifier. The default value is ./conf/identity-providers.xml.

nifi.registry.security.identity.provider

This indicates what type of identity provider to use. The default value is blank, can be set to the identifier from a provider in the file specified in nifi.registry.security.identity.providers.configuration.file. Setting this property will trigger NiFi Registry to support username/password authentication.