topic Re: Qlikview Server authentication on Active Directory in QlikView

Qlikview Server authentication on Active Directory

Mon, 26 Jan 2026 18:19:17 GMT

Hi everyone,

Since a few weeks we're experiencing some difficulties with our Qlikview Server configuration.

We have created a local account on our server machine and the Qlikview Server service runs under its identity.

The machine is in a domain, but the account is local to the machine.

We're experiencing frequent login attempts from the Qlikview Server service on the active directory. Since the service runs under a local user account, the credentials is unknown in the directory, resulting in lots of authentication failures. We have asked our domain administrator to provide us with a domain account for the service to run under, so the authentication succeeds and so we can start monitoring for genuine intrusion attempts again.

Although this may only solve the problem in a superficial manner, we're still puzzled as to why the QVS service tries to authenticate on the domain in the first place. We had a mis-configured AD DSC service, but this was removed with no change in the situation. I have set the service logs verbosity to its highest settings to be able to see any relevant information and I'll check them tomorrow.

We believe this is not caused by an application since the authentication failures occur throughout days and nights and is not bound to any application usage. Moreover, failures do not match with any task scheduling so we also think that task configuration is not relevant. Now we're a bit short on ideas, so any help on that subject would be appreciated

Kind regards

Re: Qlikview Server authentication on Active Directory

Peter_Cammaert — Fri, 16 Oct 2015 12:03:46 GMT

Any trace of these failed login attempts in the QlikView service log files (any one of them)?

Re: Qlikview Server authentication on Active Directory

Anonymous — Fri, 16 Oct 2015 12:16:03 GMT

Hi Adrien,

Is user account part of QlikView Administrators group?

Regards

Neetha

Re: Qlikview Server authentication on Active Directory

Fri, 16 Oct 2015 13:50:05 GMT

Hi Neetha,

The user is a member of both « Qlikview Administrators » and « Administrators » groups.

Regards

Re: Qlikview Server authentication on Active Directory

Fri, 16 Oct 2015 13:57:50 GMT

Hi Peter,

I do not have any trace of the authentication login in the service logs.

I however have traces of the authentication attempt in the windows event logs.

Regards

Re: Qlikview Server authentication on Active Directory

Sat, 17 Oct 2015 14:45:05 GMT

Hi,

Is DSC configure with AD\LDAP Auth? If yes are you use any domain account to fetch the user repo for this?

Please check on this.

Is it possible to share simple event log? just text.

Thanks
Atul

Re: Qlikview Server authentication on Active Directory

Mon, 19 Oct 2015 09:10:26 GMT

Hi,

Actually, we have a local account which is able to open interactive sessions on the server . All Qlikview services were using that account for an identity, and service / server administration was done with that principal's identity. There also was a mis-configured AD DSC using that account credentials when the directory team reported us that account was failing directory authentication.

I then removed the AD DSC and I also changed the principal which the services were running under in order to narrow down the root cause of the problem. I created some local accounts on the machine and affected them to each service : QlikviewServer, QlikviewManagement, QlikviewDirectory, etc ... Now each service is configured to run with its own principal and noone but me knows the account's credentials, so I can assert they are only being used by Qlikview services.

The authentication failures using the legacy account stopped and then the same started with the principal of the Qlikview Server service. I mean the actual « Qlikview Server » service, not any other Qlikview service such as DSC, QVM, etc ...

I must specify we are using Qlikview Server version 11.0.11282.0 if that's of any help.

Yesterday's event log is available here : ZeroBin

Re: Qlikview Server authentication on Active Directory

Tue, 20 Oct 2015 07:38:34 GMT

Hi,

I have reviewed the log and not issue found in that.

Just confirm if this user "FRGNBQVPOC\QlikviewManagement" is not part of domain. This user is local user on QlikView server.

Thanks

Atul Yadav

Re: Qlikview Server authentication on Active Directory

Tue, 20 Oct 2015 12:59:38 GMT

Yes, FRGNBQVPOC is the server name.

The domain name is CORP.

Re: Qlikview Server authentication on Active Directory

Tue, 20 Oct 2015 16:04:59 GMT

Hi,

"We're experiencing frequent login attempts from the Qlikview Server service on the active directory."

Can you share event log for above mentioned activity ?

I have checked you earlier log but nothing is going to CROP domain. Please share relevant event log for the same.

Thanks

Atul Yadav

Re: Qlikview Server authentication on Active Directory

Wed, 21 Oct 2015 08:37:37 GMT

Hi,

The event log I shared in my message on October 19th was from October 18th and there was something like 75 failed login attempt on the CORP directory using FRGNBQVPOC\QlikviewServer account on that day. I do not see anything from the logs either. What's confusing at most is that the service sends its non-domain credentials to the directory ...

Maybe the service tries to access a restricted directory or resource which requires some domain creds ?

Could anything in the secpol /.grouppol be responsible ?