topic Re: External Web Server - Authentication on AD? in QlikView

External Web Server - Authentication on AD?

Anonymous — Mon, 26 Jan 2026 18:19:17 GMT

We are setting up a separate server outside the company firewall to house a QVWS to serve QlikView to users that are working remotely. We are doing this so they do not require a VPN to access QlikView. These are employees, therefore we are hopefully avoiding the whole conversation regarding extranet. This client is on SBE without publisher and uses active directory to authenticate their users. Obviously, the AD is behind the company firewall. We are using Digital Certificates to talk between the two machines.

The problem we are anticipating is authentication. Still using AD, is there a way for the new QVWS to authenticate the external users? If so, does anybody have some specific documentation on these methods?

Also, should we have 2 QVWS instances? I am thinking we might still need one to cover internal users and one for the external users.

Any advice on this is much appreciated.

Re: External Web Server - Authentication on AD?

Bill_Britt — Tue, 25 Aug 2015 20:50:21 GMT

HI,

You could put a read only AD in the DMZ and that would allow the external users to authenticate.

Bill

Re: External Web Server - Authentication on AD?

Anonymous — Wed, 26 Aug 2015 22:41:03 GMT

Thanks for the input Bill. I will see if we can get that to happen.

Re: External Web Server - Authentication on AD?

tonyiantorno — Wed, 26 Aug 2015 22:48:28 GMT

Hi Bill,

Can this be done without the use of QV Digital certificates setup between QVS and QVWS/IIS?

Looking forward to your response.

Thanks

Re: External Web Server - Authentication on AD?

Bill_Britt — Thu, 27 Aug 2015 13:20:19 GMT

Yes, but it would be more secure.

Bill

Re: External Web Server - Authentication on AD?

tonyiantorno — Thu, 27 Aug 2015 14:59:47 GMT

Hi Bill,

The digital Certs that QlikView (SBE) installs among the QV Services(servers) are only applicable when you are using DMS? Is this why you need the read only AD if you are using NTLM?

Trying to make sense of it all.

Thanks again,

Tony

Re: External Web Server - Authentication on AD?

Bill_Britt — Thu, 27 Aug 2015 17:36:08 GMT

Hi,

No, with SBE you are not able to use DMS mode. The Certs are used for the services to communicate with each other. You need the AD to ID the users.

Bill

Re: External Web Server - Authentication on AD?

tonyiantorno — Thu, 27 Aug 2015 19:20:14 GMT

Hi Bill,

So I need to setup Windows 2012 R2 Server with an RODC with QVWS/IIS running which sits in the DMZ. The RO DC communicates with the AD DC via the appropriate ports and then it will pass thru to the QVS and the QV Access Point page should open.

Your response is greatly appreciated,

Tony

Re: External Web Server - Authentication on AD?

Bill_Britt — Thu, 27 Aug 2015 19:55:31 GMT

Hi Tony,

Yes that is the way I would do it and you are not exposing the real AD. The certificate setup will secure the communication of the QV services talking to each other.

Bill

Re: External Web Server - Authentication on AD?

tonyiantorno — Fri, 28 Aug 2015 12:51:32 GMT

HI Bill,

I will let you know how things go.

Thanks again!

Tony

Re: External Web Server - Authentication on AD?

tonyiantorno — Fri, 18 Sep 2015 17:52:50 GMT

HI Bill,

Quick question, does Qlik Sense have the same issues that Qlik View has in regards to connecting and authenticating users on QVWS in a DMZ?

I see that Qlik Sense offers the ability to set up Nodes (RIM) in a Global environment with Virtual proxies and the ability to have multiple User Directory Connectors. I like what I'm currently reading in regards to setting up Qlik Sense Enterprise server and hopefully it can avoid the RO DC requirement.

Looking forward to your response.

Thanks,

Tony

Re: External Web Server - Authentication on AD?

Bill_Britt — Fri, 18 Sep 2015 19:26:22 GMT

Hi Tony,

I have not tried this, but the in Sense all the communication is done with certificates. I do think it would work.

Bill

Re: External Web Server - Authentication on AD?

tonyiantorno — Fri, 18 Sep 2015 19:28:31 GMT

Hi Bill,

That's what I get from the QS Documentation as well.

Thanks for the quick response.

Have a great weekend!

Tony