topic Re: Seperate QlikView Web Server, QVS Local Directory as Authentication in QlikView

Seperate QlikView Web Server, QVS Local Directory as Authentication

baldwin79 — Mon, 26 Jan 2026 18:19:17 GMT

Hi All,

Currently I'm implementing the architecture where I have installed QV WebServer as seperate machine from the QVS machine. I created several users in QVS machine. I had added the web server into the QMC and assign the web server to appropriate DSC and QVS. All the associated port is opened. However, I'm unable to login to the AccessPoint. Both are not in the domain. During installation, I used qvadmin user for both QVS and QVWS. Password is the same. Did I miss any setting required?

I had tried to change the authentication part to AD as well, yet it doesn't work too. The login is failed for both AD and local directory in QVS. However, custom directory is successful.

Re: Seperate QlikView Web Server, QVS Local Directory as Authentication

gainkarthi — Wed, 05 Jun 2013 11:56:51 GMT

Where is your DSC is installed ?.

If it located in QVS then your local users will be resolved by adding QVS machine name as a domain (QVSservername\username).

If the DSC service is located in other machine, you have to configure QVS server config in DSC.

Re: Seperate QlikView Web Server, QVS Local Directory as Authentication

baldwin79 — Wed, 05 Jun 2013 12:15:36 GMT

The DSC is installed in QVS machine. What do you meant by adding QVS machine name as domain? Did you meant during login time for the username? If it is, yes i done that too still failed.

Re: Seperate QlikView Web Server, QVS Local Directory as Authentication

gainkarthi — Wed, 05 Jun 2013 12:17:45 GMT

That's great.

Can you check event viewer in client side as well as in the server side during the login.

Do you see any authentication failures ?

Re: Seperate QlikView Web Server, QVS Local Directory as Authentication

baldwin79 — Wed, 05 Jun 2013 12:28:26 GMT

I found some warning throw by QV DSC in the QVS machine. The error is

Search: no match for qualifier TRIWON found among resources

FYI TRIWON is the QVWS hostname.

Re: Seperate QlikView Web Server, QVS Local Directory as Authentication

baldwin79 — Wed, 05 Jun 2013 12:35:46 GMT

The error thrown when I login using qvadmin. I successfully logon to qvadmin due to qvadmin user exist in QVWS machine which is TRIWON. The user shown when i logon is TRIWON\baldwin although i key in QVS domainname as username. Looks like the QVWS is authenticate against itself instead of QVS local directory. Anyway to change it to the QVS local directory?

Re: Seperate QlikView Web Server, QVS Local Directory as Authentication

gainkarthi — Wed, 05 Jun 2013 12:42:35 GMT

Are you using IIS web server layer or in built QVWS layer ?

Re: Seperate QlikView Web Server, QVS Local Directory as Authentication

baldwin79 — Wed, 05 Jun 2013 12:43:41 GMT

I'm using QV built in web server

Re: Seperate QlikView Web Server, QVS Local Directory as Authentication

gainkarthi — Wed, 05 Jun 2013 12:57:29 GMT

Please provide your web server authentication method (Authentication, Type and Login address).

Re: Seperate QlikView Web Server, QVS Local Directory as Authentication

baldwin79 — Wed, 05 Jun 2013 13:05:16 GMT

Authentication:Always

Type:Ntlm

Re: Seperate QlikView Web Server, QVS Local Directory as Authentication

gainkarthi — Wed, 05 Jun 2013 13:18:52 GMT

Please change it to Default login page (browser authentication) and try accessing.

Re: Seperate QlikView Web Server, QVS Local Directory as Authentication

baldwin79 — Wed, 05 Jun 2013 14:40:13 GMT

Tried but it wont prompt for login and accesspoint show TRIWON\baldwin

Re: Seperate QlikView Web Server, QVS Local Directory as Authentication

Bill_Britt — Wed, 05 Jun 2013 17:22:11 GMT

HI,

Qlikview does not do authentication, it only does authorization. So, if the server is not part of the AD it will not authenticate against the domain.

Bill

Re: Seperate QlikView Web Server, QVS Local Directory as Authentication

Wed, 05 Jun 2013 17:58:46 GMT

Do you mean QVWS have to be on the domain? If I install DSC and QVS on the server which is on AD, but the QVWS is on the server whis is not part of AD. Can the user authenticate by the user on AD?

Re: Seperate QlikView Web Server, QVS Local Directory as Authentication

Bill_Britt — Thu, 06 Jun 2013 01:04:08 GMT

Hi,

Windows does the authentication unless you write your own SSO pages and send header information to QVS. So, if you have a webserver in the DMZ and you are trying to authenticate to an AD on the inside it will not work. This isn't QlikView it is windows.

Bill

Re: Seperate QlikView Web Server, QVS Local Directory as Authentication

baldwin79 — Thu, 06 Jun 2013 01:45:07 GMT

Hi Britt,

Let me get you right. Did you meant both of the server QVS and QVWS must be in the domain in order to work? If i put QVS only in the domain it won't work too?

If that's the case, if i create a custom login page with web ticketing instead of SSO will I able to authenticate?

Is there any easy way instead of writing pages like changing the architecture? Like if I don't split the server, and put in the DMZ? If the server is in DMZ am i able to join domain? Please enlighten. Really sucks on architecture.

Re: Seperate QlikView Web Server, QVS Local Directory as Authentication

Bill_Britt — Thu, 06 Jun 2013 10:42:06 GMT

Hi,

Yes, if you create your own pages to do the authentication you will be ok.

Bill

Re: Seperate QlikView Web Server, QVS Local Directory as Authentication

baldwin79 — Thu, 06 Jun 2013 10:59:11 GMT

Hi,

Besides writing the page, any other solution I can follow? If I change the architecture by having the QVWS and QVS in the same box and push that server to the DMZ. Will that work?

Or I stick to the plan where I join the QVWS in the domain? Just wanted to know is that's possible if DMZ server join to the domain. Or do I need and intermediate server eg. reverse proxy to do that.

Found out from my colleagues, it is possible however you need to put both the forest which is internal forest and DMZ forest to trust each other. Anyone experience with this solution before?

Just wanted to know any possible solution except writing the page.

Re: Seperate QlikView Web Server, QVS Local Directory as Authentication

Bill_Britt — Thu, 06 Jun 2013 13:19:39 GMT

You could do it that way and setup everyone in the local directory, but if you are planning on authenticating the users with AD the server will have to be part of the domain.

Bill

Re: Seperate QlikView Web Server, QVS Local Directory as Authentication

Anonymous — Mon, 10 Jun 2013 07:49:34 GMT

Hi,

I have a scenario which is pretty much like yours in there, but I am feeling a little bit lucky because both QVWS machine and QVS machine are within the AD domain in my scenario so my AD users are able to login to QV Access Point.

However, I am having the same issue that you had which I am unable to login to QV access point by using local directory user, even when I have already defined the Local Directory Patch which is "local://QVSserver".

Just wondering if you have already solved this problem.

Thanks.