Cannot Access Qlik Sense - No Access Pass

[jpapador]

I am having a weird issue.  When I access the hub via the default <servername>/hub I get logged in no problem.  It passes the user credentials through of the user I am logged in as.

When I access the same hub through a DNS entry I created.  I am able to get to the hub but get the below message:

Now, if I configure a rule to assign a login token to anonymous users it correctly assigns the token and it does not give me the error but that is not what I want.

Is there a reason it would work through the default server name/hub but not the dns entry?

[Giuseppe_Novello]

Jared,

Are you allowing anonymous enter to the hub intentionally? if not, check the Anonymous access mode if it set "no anonymous user" under ( QMC> Virtual Proxies > select the proxy>edit>Authentication > "anonymous access mode") This should force to users request the authentication, depending the browser not sure if it is passing correct you NT credentials correctly so it thinks you are anonymous. If you are using IE can you add the site to the "trusted site".

Gio

[jpapador]

I have tried that.  When I change the anonymous authentication mode to No Anonymous users it no longer can reach the hub, I get the following message using IE11.

[Giuseppe_Novello]

Jared,

Thats really strange, that shouldn't affect the actual view of the hub. That's just strictly determine what kind of people may access the HUB, but  at first would request for credentials. Now, the problem lays on that DNS , have you added correctly the SSL browser certificate thumbprint? or users are using HTTP?  Ca you do a NSlookup on that DNS and see if it listed "non-authoritative" if it does, I would reach you IT /security/DNS team to look the DN and ask them why the DNS is "non-authoritative" (domain name system - DNS - NSLOOKUP what is the meaning of the non-authorative answer? - Server Faul...

Gio

[jpapador]

Thank you for your responses,

I believe I have installed the thumbprint correctly.  Accessing the hub (as an anonymous user) I get the padlock icon and a secure connection.

As for the DNS it is a non-authoritative response.  The Sense server is hosted in Microsoft Azure.  My guess is that it is likely we do not have any name servers in our Azure environment and that is why it is non-authoritative. 

[Alexander_Thor]

Strange that it works for anonymous users.

Anyway, make sure you have also added the DNS entry to your proxy white list in QMC.

Since the DNS entry is most likely different from the entry you picked during installation the new entry also has to be allowed to communicate over websockets.

[jpapador]

Right, I have done that.  Without the white list entry not even anonymous access works.