Skip to main content
Announcements
Qlik Community Office Hours, March 20th. Former Talend Community users, ask your questions live. SIGN UP
cancel
Showing results for 
Search instead for 
Did you mean: 
Not applicable

Qlikview ticketing for SSO is not working in Qlikview 11

After deploying the latest version of Qlikview, the ticketing functionality for SSO does not seem to be working. The server is running in DMS mode. We are getting a ticket when running the code for it. However if we pass this ticket in the URL it is still asking the user for login details. Has anyone faced this issue?

52 Replies
danielrozental
Master II
Master II

Vlad,

Apparently in QV11 there is something called Webtickets (not sure what the difference is with a regular ticket). I've just tested my code requesting a webticket instead of a ticket and it works almost the same way, with the difference that you can redirect to /QvAJAXZfc/Authenticate.aspx?type=html&webticket=TICKET and get to the Accesspoint.

It also allows for licenses to be leased, through the "Tools, Open QlikView Access Point" option in the developer.

You can find the sample code herehttp://community.qlik.com/docs/DOC-2952

vgutkovsky
Master II
Master II

It says I'm unauthorized to view that document...bummer. I've seen the Tools >> Open QlikView AccessPoint thing before, but never heard of webtickets. I will give this a try at some point, thanks!

Vlad

danielrozental
Master II
Master II

Vlad, I guess could email it to you if you want.

The other problem I'm facing with using ticketing (or webticketing) is that QV11 doesn't allow for manual named CAL assigment. They have removed that option and you need a DSC configured to assign them.

Not applicable
Author

Daniel, would you be able to post the sample code for webtickets as an attachment of your next post? I am interested in it as well but I got the the same "unauthorized to view" message when I clicked on your link.

I have also tested QVS ticketing with V11 and it worked. The problem with QVS ticketing is, it does not go through AccessPoint (AP) so it could not do load balancing in a QVS cluster environment. You always have to specify a specific QVS node name. This web ticketing thing seems to go through AP and therefore it should be able to handle load balancing and failover.

danielrozental
Master II
Master II

There you go.

vgutkovsky
Master II
Master II

Looks like the .zip is corrupted, can't be opened...

danielrozental
Master II
Master II

amien
Specialist
Specialist

eeeh .. i'v been following this threat because i posted the second message .. but are we still talking about the same thing??

my issue is that when i get an url from the accesspoint and paste that url to a new internet explorer session, the user won't get a ticket. Instead the user gets the standard access point login. This issue only is there when using IE Plugin. Not in AJAX

danielrozental
Master II
Master II

I'm not sure it's related, but I'm also not sure that your second post is related to the thread starter.

vgutkovsky
Master II
Master II

Daniel, thanks for the file! I read through the documentation. Seems like a very different method. One thing that concerns me is security with Webtickets. Basically, instead of requiring QlikView Administrator credentials like GetTicket.aspx, you instead set config.xml to trust certain IP addresses. If a request comes from that IP address, a web ticket will be issued for any arbitrary username. I'm just concerned that this is a big security hole. Suppose a user on an internal network deliberately sets his IP address to that of the trusted server. This will create a IP address conflict, and the network might be confused and in fact grant his computer that IP address. If it does, he can access any QV application as any user. To avoid this, network admins would need to lock down the IP functionality (so users can't be administrators on their own machines anymore)...seems messy.

Other than that, it seems pretty interesting. I'll have to give it a try sometime, just don't have the time now.

What are your thoughts?

Vlad