topic LDAP problem with qlik sense server in Management & Governance

LDAP problem with qlik sense server

Pato1984 — Sat, 16 Nov 2024 04:25:48 GMT

Hello ,

I have a problem with my connector of LDAP cannot retrieve users

even if the sync work and the task is succesfull

in the log I see :

Children not reachable for ldap and database done with 0 users and 0 groups even if with ldap admin when I write the same path I have my users

my path is LDAP ://myIP/dc=X,dc,Z,dc,Y

I tried also with

LDAP ://myIP/ou=users,dc=X,dc,Z,dc,Y

and with additionnal filters like

(&(objectCategory=person)(objectClass=user)
(cn=*))

but it doesn't work my version of qlik sense is june 2019 sr3 and my OS is windows server 2012

thank you for your help

Re: LDAP problem with qlik sense server

Giuseppe_Novello — Mon, 14 Oct 2019 14:49:19 GMT

IT might be that your syntax is incorrect. HAve you tried other tool like LDAP browser ?

https://www.ldapadministrator.com/download.htm

I would first verify if the syntax is correct if not, here more info about LDAP filtering:

https://docs.microsoft.com/en-us/windows/win32/adsi/search-filter-syntax?redirectedfrom=MSDN

Gio

Re: LDAP problem with qlik sense server

Pato1984 — Mon, 14 Oct 2019 14:55:32 GMT

Thank you for your reply my syntax is correct because on ldapadmin I see my users with the same syntax.

Re: LDAP problem with qlik sense server

Giuseppe_Novello — Mon, 14 Oct 2019 15:15:02 GMT

Just to confirm, is this the test you perform:

https://support.qlik.com/articles/000042337

Re: LDAP problem with qlik sense server

Pato1984 — Wed, 16 Oct 2019 09:03:33 GMT

Hello,

yes i did the whole test .

Re: LDAP problem with qlik sense server

rzenere_avvale — Wed, 16 Oct 2019 09:42:04 GMT

Goodmorning @Pato1984 ,

I had a similar issue in the past, when using LDAPAdmin i was able to retrieve users but from QS I was not.
To solve it I had to point to a specific Domain Controller (es DC1, DC2, ...) and to the port 3268, which is the Global Catalog.

I hope this helps,
Riccardo

Re: LDAP problem with qlik sense server

Pato1984 — Wed, 16 Oct 2019 10:06:26 GMT

thank you for you reply Riccardo but when I write my path with your port it doesn't work
I write LDAP:\\MYIP:3268/dc=x,dc,y,dc=local

Re: LDAP problem with qlik sense server

rzenere_avvale — Wed, 16 Oct 2019 10:25:46 GMT

Just to be completely sure, could you try those checks?

still from LDAPAdmin, could you check if it keeps working with the new port? If not, it could be that some port is blocked. I don't think that the Global Catalog could be 'turned off' at all
if it is working from LDAPAdmin, check that you didn't write LDAP:\\ but LDAP://! The remaining part of the path seems correct (I usually go by name more than IP, but the result should be equivalent)
could you create a new 'Generic LDAP' UDC? There is a kb article that describes how to create this kind of connection: https://qliksupport.force.com/articles/000012415

Riccardo

Re: LDAP problem with qlik sense server

Pato1984 — Wed, 16 Oct 2019 13:14:05 GMT

Hello Riccardo,

I add the port 3268 in the ldapadmin but it' doesn't work and I did all the others steps but still the same problem .

Re: LDAP problem with qlik sense server

rzenere_avvale — Thu, 17 Oct 2019 07:56:46 GMT

Hi Pato,

unluckily I do not have any other guesses at this time. I suggest to double check if there is a firewall blocking the port or some other policy.

Riccardo

Re: LDAP problem with qlik sense server

Giuseppe_Novello — Thu, 17 Oct 2019 12:06:26 GMT

I you have a direct support agreement with Qlik Support, then I suggest a proceed opening a support ticket.

Best Regards,

Gio