topic Re: LDAPS Config in Management & Governance

LDAPS Config

V_Marco — Wed, 29 Jan 2025 16:57:53 GMT

Hello,

We have a Qliksense Server on AWS that is not in Domain.

Now we need to set up UDC with LDAPS but, for customer policy, we can't have a service user in AD with fixed password: every month password change.

Are there any alternative? Qlik services runs with local administrator that haven't access to LDAPS.

Thanks.

Re: LDAPS Config

rohitk1609 — Fri, 17 Sep 2021 12:59:15 GMT

You can create a local administrator and install Qlik Sense with it.

Re: LDAPS Config

Qlik_Administrator_Dude — Fri, 17 Sep 2021 13:14:04 GMT

Hello,
Rohit1609 is correct from a Qlik Stand Point. You can simply have the Qlik Service Account be a Local Admin. You may have to get specific with your Shared Persistence Files, but it shouldn't be too much of a lift.

These types of requirements come up time to time with MSSQL. I have used Windows Group Managed Service Accounts to solve this problem. Here is a link:

https://docs.microsoft.com/en-us/windows-server/security/group-managed-service-accounts/group-managed-service-accounts-overview

Basically, you never have to worry about a password with a service account if you use the Group Managed Service Accounts. Here is a small excerpt from the link:
"A standalone Managed Service Account (sMSA) is a managed domain account that provides automatic password management, simplified service principal name (SPN) management and the ability to delegate the management to other administrators."