topic Re: Access Point not working for users in second domain in QlikView

Access Point not working for users in second domain

Mon, 26 Jan 2026 18:19:17 GMT

Hi,

We have recently set up a second domain and we are trying to set up our Qlikview configuration to grant users in this domain access to our reports. In the management console I have edited the DSC to include the second Active Directory path, and that has allowed us to assign licenses to these users.

However despite this users from that domain cannot see any reports when the browse to the Access Point page. It loads up fine but there are no visible reports. I've been trying to look around for a solution to this but not had any luck so far, can anyone help point me in the right direction?

Thanks

Re: Access Point not working for users in second domain

jonathandienst — Mon, 06 Jul 2015 09:40:30 GMT

Do the users on the new domain have AD access to the qvw files on the access point folders?

Re: Access Point not working for users in second domain

Mon, 06 Jul 2015 09:48:30 GMT

Hi james,

First please check in users -> user management -> with selection of all directories check with names is that user authenticated or not.

Please let me know on this.

Re: Access Point not working for users in second domain

Mon, 06 Jul 2015 09:59:27 GMT

Hi,

I've gone in and looked at one of the users, its showing their assigned CALs and documents they have distributed to them, I'm not sure if that means they're authenticated but it looks right when compared to a user in the other domain

Re: Access Point not working for users in second domain

Mon, 06 Jul 2015 10:01:54 GMT

I've checked the permissions on the files themselves and it was showing the users in the list with all the required permissions (read, write, etc), so looks like that side is alright

Re: Access Point not working for users in second domain

Mon, 06 Jul 2015 10:32:32 GMT

Okay are you scheduling in publisher.

If you have scheduling through publisher try to give an option in Distribute tab give "All authenticated users" option for the task when you are scheduling manually and check and let me know is that report is visible to all authenticated users in access point

Re: Access Point not working for users in second domain

Peter_Cammaert — Mon, 06 Jul 2015 10:39:39 GMT

Just curious: you're not using section access in these documents?

Re: Access Point not working for users in second domain

Mon, 06 Jul 2015 10:42:59 GMT

Why section access required peter?

here we have giving AD in DSC. So we can add users on each document.

Re: Access Point not working for users in second domain

Peter_Cammaert — Mon, 06 Jul 2015 10:48:29 GMT

This is a question ("James, are you using section access in these documents?"), not a statement.

Section Access isn't required. I just want to know whether he uses any.

Re: Access Point not working for users in second domain

Wed, 08 Jul 2015 14:25:31 GMT

No we haven't got any section access in any of the documents

Re: Access Point not working for users in second domain

Wed, 08 Jul 2015 14:26:07 GMT

We are using Publisher yeah. I'll make the change and see if it works

Re: Access Point not working for users in second domain

Wed, 08 Jul 2015 14:28:23 GMT

I've just had a look into the events log file on the server and found the following error appear when we tried to access it using the other domain user:

Error

SE_LOG: User - GetStringS: Failed to LookupAccountName2 without using DCName. GLE(1788)

I tried to look this up on the web but couldn't find anything about it.

Re: Access Point not working for users in second domain

jltsupport — Thu, 16 May 2019 08:40:00 GMT

Hello, You can try restarting QDSC service on the server for which this error occurs. Works for me after this. Regards, Ieshan Chandra

Re: Access Point not working for users in second domain

Daniele_Purrone — Tue, 21 May 2019 12:11:27 GMT

Are the users actually authenticated on the access point?
Do you see '"Welcome, theirname" at the right top corner?
Also, if you check the permissions on the user document, can you see that the users should have access to it?

Re: Access Point not working for users in second domain

Daniele_Purrone — Tue, 21 May 2019 12:17:02 GMT

Consider that QlikView doesn't do AD authentication. Windows does.
So, when adding an additional domain you need to make sure that the Windows server is able to recognized the users from the other domain (domain trust).

More details here.

Re: Access Point not working for users in second domain

Brett_Bleess — Tue, 25 Jun 2019 21:52:35 GMT

What you likely need to do here if you have an SSO frontend that can handle the authentication piece properly, is on our side, put the QVS service into DMS security mode instead of NTFS, and I believe you should likely be able to configure a DSC DSP to get to the other directory, you may have to specify a specific account to read from it depending upon trust relationship etc., but if you can then read, that will allow you to choose users/groups from both domains at that point, and all QVS will be checking for is whether we have a match to a name or group when it gets it from the web server. Most of the time the web server is using Header Auth setup in these cases. Hopefully this may help a little, but to Daniele's point, if the web server is set to use NTLM, then you would have to have trusts in place between the domains such that the web server would be able to process authentication requests for either domain. Hopefully this makes a little sense.

Regards,
Brett