Unlock a world of possibilities! Login now and discover the exclusive benefits awaiting you.
Hi All,
I have little knowledge of firewalls and such, but can anyone tell me how to setup a QlikView Web Server in DMZ mode? Is there perhaps a guide and what are the requirements?
We are running a SB Edition of QlikView Server and I want to access severall QV documents outside our domain without a VPN connection.
Thx for youre help.
Hi Adel,
Follow these steps:
Remember to click Apply after each action you do!
Hope that helps.
Miguel
Hi,
Make sure your license allows you to use Custom and DMS, and make sure DMS is set in the QlikView Server, Security tab. Make sure as well that port 4730 (if not the whole firewall) is open between that computer and the computer that hosts the DSC. If you have a proxy, you will need to add an exception to that port as well.
"Path" is the equivalent to "domain" in Active directory, you can set any small word here, i. e.: CUSTOM Therefore, the custom users will be CUSTOM\Username1, CUSTOM\Username2, and so...
Miguel
QlikView doesn't do authentication, it only does authorization (unless you are using custom users). Authentication is do by Windows and for the machine in the DMZ to do it for AD is that machine has to be a member of the AD.
You can write a SSO and pass the header to QVS and that will work.
Bill
V11 or V10 ?
We are using V10 but a customer want it also and the are using V11
The main difficulty is to set authentication between the 2 servers and documents authorizations.
V11: You have to use DMS and custom users
- Check port 4747 and 4750 are opened on your firewall between QVWS (DMZ) and QVS
- Install QVWS (custom installation) on DMZ server
(if you want to use IIS instead if QVWS, install IIS support or start Qv settings service)
- In QEMC :
- add your web server (http://<yourwebserver>:4750/QVWS/Service)
- set DMS authorization instead of NTFS in System/Setup/Qlikview Servers/Security tab
- set Custom users in System/Setup/Qlikview Web Servers/QVWS@<yourwebserver>/Authentication/type
- create users in System/Setup/DSC/Custom Directory
- In Documents Grant Documents access authorisations to users
V10 : almost the same procedure excepted you can use local users or custom users
I need to know what to use in Custom Directory Path when trying to add new cutom users- the step before the last in your guide-. I get a default value like "Custom". But I get time-out when I use it. Do you know what we should use there?
Hi Adel,
Are you running a QlikView Enterprise Edition license of Server? Otherwise, you will only be able to use NTLM and NTFS, so no possiblity to use Custom directories here.
If you are using the EE, then the QMC should allow you to create users and groups that will be stored into an XML file and controlled by QlikView, and not by the OS. That's OK if you have a very small number of users (less than 10). This is not intented to replace LDAP, IBM Tivoli, Windows AD, or any other security directory in the market.
Hope that helps.
Miguel
We have EE license. Can you help me in how to register users and groups in QMC?
We have plans to use LDAP in the future but for now LDAP is not ready for that yet and we have to do it manually.
Hi Adel,
Follow these steps:
Remember to click Apply after each action you do!
Hope that helps.
Miguel
Thanks for your kind reply Miguel. But I still have the same error when I try to add something in step 3 above. I have no idea what I need to fill as Path.
I get this error:
"
DSC did not respond to request.
Last exception (for http://qlikpub1:4730/DSC/Service😞 The request channel timed out while waiting for a reply after 00:00:30. Increase the timeout value passed to the call to Request or increase the SendTimeout value on the Binding. The time allotted to this operation may have been a portion of a longer timeout.
"
If I leave the path empty I get "Enter a path in order to save the changes" which means I need a valid path here.
What is the valid path?
Hi,
Make sure your license allows you to use Custom and DMS, and make sure DMS is set in the QlikView Server, Security tab. Make sure as well that port 4730 (if not the whole firewall) is open between that computer and the computer that hosts the DSC. If you have a proxy, you will need to add an exception to that port as well.
"Path" is the equivalent to "domain" in Active directory, you can set any small word here, i. e.: CUSTOM Therefore, the custom users will be CUSTOM\Username1, CUSTOM\Username2, and so...
Miguel