topic On-Demand Add-On with QlikView Error 403 in Qlik NPrinting

On-Demand Add-On with QlikView Error 403

timml_hsu — Wed, 25 Sep 2019 18:40:54 GMT

Our environment：

Server 1: QlikView Server(12.10.2) + NPrinting on-demand-add(September 2018)

Server 2: NPrinting Server(September 2018) + NPrinting Engine(September 2018)

Server OS (Windows Server 2016 Standard)

Steps:

QlikView Server is installed and configured to use Microsoft IIS as web server => checked
We create a certificate on IIS, certifaicate name: TT
When install NPrinting On-Demand Add-On, use certificate TT thumbprint
Generate X.509 public key certificate in PEM format (file name: 20181127.cer)
Open 20181127.cer in notepad
On NPrinting Server, Admin > Settings > Authentication settings, enable JWT authentication, in the JWT certificate field put value from step 5. JWT attribute for user ID & user directory, we put our AD domain
On NPrinting Server, Admin > Settings > On-Demand settings > Add trusted origin
NPrinting report enable On-Demand and API report generation => checked
Create NPrinting security role: on-demand role
NPrinting users assgin on-demand role

When open on-demand in QlikView Server, we get error 403

Q1: How can we fix this problem?

Q2: What is the correct value in JWT attribute for user ID and user directory?

Q3: Where can we find the on-demand add-on installation video? We ready study NPrinting 17.3 configuration & troubleshooting

Plz help~

PS: our steps & configuration with image, plz see the attachment

Re: On-Demand Add-On with QlikView Error 403

Lech_Miszkiewicz — Tue, 27 Nov 2018 07:51:51 GMT

Hi,

I will not give you straight answer since i do not know it. The way i would try to troubleshoot it would be by allocating admin user role for that user you are trying authenticate with. (just to make sure that user has an access to everything what is required).

If the error still persist then i would try to focus on other parameters like userid and domain:

https://help.qlik.com/en-US/nprinting/November2018/Content/NPrinting/DeployingQVNprinting/JWT-authentication.htm

i think help document contains all required information : https://help.qlik.com

Re: On-Demand Add-On with QlikView Error 403

Lech_Miszkiewicz — Tue, 27 Nov 2018 07:57:24 GMT

also - have you tried to read other posts on community like: https://community.qlik.com/t5/Qlik-NPrinting-Discussions/NPrinting-17-On-Demand-no-access-to-resources/td-p/1392444

Re: On-Demand Add-On with QlikView Error 403

Ruggero_Piccoli — Tue, 27 Nov 2018 09:57:44 GMT

Hi,

In the field JWT attribute for user ID insert uid
In the field JWT attribute for user directory insert dom

You must insert uid and dom without changing them because the Qlik NPrinting On-Demand add on uses these specific values and they cannot be changed. Using different values will result in authentication failure.

Best Regards,
Ruggero
---------------------------------------------
When applicable please mark the appropriate replies as CORRECT. This will help community members and Qlik Employees know which discussions have already been addressed and have a possible known solution. Please mark threads as HELPFUL if the provided solution is helpful to the problem, but does not necessarily solve the indicated problem. You can mark multiple threads as HELPFUL if you feel additional info is useful to others.

Re: On-Demand Add-On with QlikView Error 403

Ruggero_Piccoli — Tue, 27 Nov 2018 10:01:06 GMT

Hi,

In the field JWT attribute for user ID insert uid
In the field JWT attribute for user directory insert dom

Re: On-Demand Add-On with QlikView Error 403

timml_hsu — Tue, 27 Nov 2018 10:35:28 GMT

Thanks reply

we follow
https://help.qlik.com/en-US/nprinting/September2018/Content/NPrinting/On-Demand/Install-Components.h...

and check the Qlik NPrinting services Windows domain user in the QlikView
Server windows group : QlikView Administrators, QlikView Management API => OK

but we still get erro 403 : User has no rights to access the resource

we have no idea to fix this problem : (

Re: On-Demand Add-On with QlikView Error 403

timml_hsu — Tue, 27 Nov 2018 10:39:25 GMT

Thanks reply
1. In the field JWT attribute for user ID insert uid
2. In the field JWT attribute for user directory insert dom
> Can we define the uid & dom by myself ? Or where can we find the correct uid & dom

Re: On-Demand Add-On with QlikView Error 403

Ruggero_Piccoli — Tue, 27 Nov 2018 10:51:41 GMT

Hi,

You must insert the two fixed values uid and dom as this. Don't change them. You must use them as fixed strings.

Re: On-Demand Add-On with QlikView Error 403

timml_hsu — Wed, 28 Nov 2018 06:28:15 GMT

We really very appreciate your reply, thanks~