topic Re: Setting User Directory Connector to Google LDAP in Management & Governance

Setting User Directory Connector to Google LDAP

njohnson1 — Mon, 13 May 2024 17:35:51 GMT

Hello, I am trying to setup a Generic LDAP UDC to our Google Workspace domain using the Google LDAP server. The setup process seems to fail because of a timeout but I can connect and browse through the LDAP server using Softerra LDAP Administrator. The certificate from Google is installed in my user's certificate store, the service user's certificate store, and in the local machine certificate store. The firewall is disabled. Running on Windows Server 2022.

From the Repository\Trace\UserManagement_Repository log:
"Fetching directoryentry LDAP://ldap.google.com:636 failed: This operation returned because the timeout period expired.
Setting up UDC of type Repository.UserDirectoryConnectors.LDAP.GenericLDAP unsuccessful Setting up connection to LDAP root node failed. Check log file."

From the Proxy\Trace\System_Proxy log:
"Failed to authenticate stream as Server An unknown error occurred while processing the certificate↵↓A call to SSPI failed, see inner exception. NO-STACKTRACE
Above happened because: An unknown error occurred while processing the certificate NO-STACKTRACE
Unanticipated System.Security.Authentication.AuthenticationException occurred accepting client, disposing connection attempt"

Re: Setting User Directory Connector to Google LDAP

Maria_Halley — Tue, 14 May 2024 07:02:47 GMT

@njohnson1

If you are not already, try using Advanced LDAP.

Re: Setting User Directory Connector to Google LDAP

njohnson1 — Mon, 20 May 2024 14:56:14 GMT

Advanced LDAP did not work either. I "resolved" the issue by setting the path to ldaps://ldap.google.com:636, but after that had issues with pulling in the user's display name and then actually authenticating. Eventually gave up and set up SAML auth, following this guide: https://community.qlik.com/t5/Official-Support-Articles/Google-Workspace-formerly-known-as-G-Suite-as-a-SAML-Identity/ta-p/1716852

Re: Setting User Directory Connector to Google LDAP

pauljohansson — Mon, 09 Sep 2024 12:56:52 GMT

@njohnson1

dont you need a regular synch of accounts from google workspace to qlik?