topic Re: Open project on VM - Access denied - wich is correct Computername? in QlikView

Open project on VM - Access denied - wich is correct Computername?

Mon, 17 Jun 2013 14:30:13 GMT

Hallo,

like the titel reveals, i want to open a QV Project on a Virtual Machine.

The Project has Section Access and i add the Computer hostname of the virtuall Machine to the List,

like i always do to access a new User(normaly it worked...).

But i still cant open the Project...

I think the hostname maybe isnt correct for QV.

If i look in my Computerproperties(VM) the name is listened.

When i enter "hostname" to cmd it returns the same...

What can this be?

Does QV needs another name?

Or a combination like realHostname\virtualMachineHostname?

Anyone else run into this issue?

I know that's maybe not 100% a qlicview question, but i have no idea what else can be wrong.

And I rly need to open it on the virtual machine:(

Pls help!

Re: Open project on VM - Access denied - wich is correct Computername?

Anonymous — Mon, 17 Jun 2013 14:36:32 GMT

You say you 'add the Computer hostname of the virtuall Machine to the List'. Do you mean that you add the NTSID into the section access security list. This will change on a different machine. It can be found out by choosing Insert > NTSID in the script window.

I don't know of anywhere you would add the machine name within section access.

Jonathan

Re: Open project on VM - Access denied - wich is correct Computername?

Mon, 17 Jun 2013 14:43:45 GMT

First thx for fast reply:D

Maybe i cant explain very good,because i didnt create the project.

I mean i add the computername to the Section Access - table(?).

Looks like this^^

Section Access:

LOAD * INLINE [

ACCESS, NTNAME

ADMIN,user1

ADMIN,user2

ADMIN, virtualMachineComputername

];

And this normaly solves the access denied Problem, but not in this case...

Maybe now is more clear what i mean...

Re: Open project on VM - Access denied - wich is correct Computername?

Anonymous — Tue, 18 Jun 2013 06:32:06 GMT

NTNAME identifies the windows user that accesses the machine.

Try adding an NTDOMAINSID if you want to identify the machine. This can be found by going to Insert > Domain SID under the menu in the edit script dialogue. It is a long (43 character) string.

Jonathan

Re: Open project on VM - Access denied - wich is correct Computername?

Tue, 18 Jun 2013 08:09:18 GMT

Sry for writing the same stuff again^^

Maybe this is the problem.

I'm trying to do so. Maybe or better surely i'm doing sth wrong, because i dont know where to put the NTDOMAINSID.

I tried following things:

Section Access:

LOAD * INLINE [

ACCESS, NTNAME,NTDOMAINSID

ADMIN,user1

ADMIN,user2

ADMIN, virtualMachineComputername,Domain SID

];

Section Access:

LOAD * INLINE [

ACCESS, NTNAME

ADMIN,user1

ADMIN,user2

ADMIN, Domain SID

];

Section Access:

LOAD * INLINE [

ACCESS, NTNAME

ADMIN,user1

ADMIN,user2

ADMIN, Domain SID\virtualMachineComputername

];

But it doesn't works....

Where to put the Domain SID? And thx for all the help:)

Re: Open project on VM - Access denied - wich is correct Computername?

Anonymous — Tue, 18 Jun 2013 08:16:59 GMT

I probably wasn't clear enough myself.

My security tables look something like this:

SECTION ACCESS;

LOAD * INLINE [

ACCESS, NTNAME, NTDOMAINSID

ADMIN, Administrator, S-3-6-12-6473957462-9464534241-3425347485

.... etc

];

The NTNAME is the name a user would log on to the server with. They typically type this in when they are openning the AccessPoint.

The NTDOMAINSID is an identifier of the server. This is so that people can not bypass security by copying the file to a different machine, setting up a user such as Administrator and then openning the file. The NTDOMAINSID of the server is found by going to Insert > Domain SID within the Edit Script dialogie on the server machine (see attached picture).

Jonathan

Re: Open project on VM - Access denied - wich is correct Computername?

Tue, 18 Jun 2013 08:32:20 GMT

No than it seems like sth else is wrong.

I tried it like this, with the generated Domain SID.

Does every User has to have the same Domain SID or is it depending on the Computer the user will use to work with the project?

The QV Version of the VM creates another Domain SID, but i tried both^^

You wrote:"The NTDOMAINSID is an identifier of the server. ", maybe it wont work because i dont use any server:(

The Project was connected to a Server, but this was "before my time"^^

Maybe i have to delete all the Server stuff if it is not longer needed...?

Re: Open project on VM - Access denied - wich is correct Computername?

Anonymous — Tue, 18 Jun 2013 08:37:18 GMT

Every user needs to use the same SID.

If you are running on two machines, then you will have two sets of SIDs etc.

Interesting about the VM not having a SID. Do you have the QlikView Developer software installed on the VM ?

When you suggest deleting all the 'server stuff' what do you mean ?

Jonathan

Re: Open project on VM - Access denied - wich is correct Computername?

Tue, 18 Jun 2013 08:51:29 GMT

I mean delete the Access and make it available for every User.

This is a only an example Project and our server licence is out of date^^

Important for me is that i can connect to the DB of the VM...

I tried deleting the Section Access and i can open the project on the vm

But maybe this is only a workaround....

So if u say i need Access,Users and NTDOMAINSID only while using the server, maybe it's the simpliest way to delete this fields. Do i need them only with Server?

How would it look having two Domain SID's?

Re: Open project on VM - Access denied - wich is correct Computername?

Anonymous — Tue, 18 Jun 2013 09:04:10 GMT

Two machines could result in having something like this:

SECTION ACCESS;

LOAD * INLINE [

ACCESS, NTNAME, NTDOMAINSID

ADMIN, Administrator, S-3-6-12-6473957462-9464534241-3425347485

USER, User1, S-3-6-12-6473957462-9464534241-3425347485

USER, User2, S-3-6-12-6473957462-9464534241-3425347485

ADMIN, Administrator, S-5-1-87-4646237282-2434329044-5362826252

USER, User1, S-5-1-87-4646237282-2434329044-5362826252

USER, User2, S-5-1-87-4646237282-2434329044-5362826252

];

Note that the SIDs are different in the top three rows. The usernames could also be if required.

You can go without security if you're happy to do so. There are usually two other levels of security, namely that a user needs a username and password to access the server, and there needs to be a license assigned to them or free to use.

Jonathan

Re: Open project on VM - Access denied - wich is correct Computername?

Anonymous — Tue, 18 Jun 2013 11:29:53 GMT

Posted a suggested bit of code but it is being held up by a moderator.

Jonathan

Re: Open project on VM - Access denied - wich is correct Computername?

Tue, 18 Jun 2013 11:53:50 GMT

Hm..too much information?

We dont know^^

Anyway thank u very much! And even we cant find the solution here, i can work with my workaround:)

One last question for understanding,maybe "Selection Access" has to be implemented again

I think i understand, that the fields ACCESS and NTNAME can be used for protecting your Project to be opened from user without authority.

The NTDOMAINSID can be used for protecting your Project to be opened from Computer without authority?

(Sounds not rly reasonable)

Sarah

Re: Open project on VM - Access denied - wich is correct Computername?

Anonymous — Tue, 18 Jun 2013 12:00:28 GMT

You summed it up very well. NTNAME is the name of a user that accesses a computer. If this is the only security there is nothing stopping me from copying the file to another machine that I have just set up, creating a user with the same name, and openning the file. This I think is why QlikView uses the SID.

Jonathan

Re: Open project on VM - Access denied - wich is correct Computername?

Tue, 18 Jun 2013 12:44:47 GMT

OMG, i got it

I didnt have NTDOMAINSID implemented before.

So every Computer and Virtual Machine with the correct username is allowed to open the project.

So the only reason CAN be that i didnt find the correct Computername^^

Apparently i mixed Computer- and Username

Shame on me...

But thank u so much for all the explanation!

Even the problem was sth else, im happy to understand this part of my project;)

Greetings

Sarah

Re: Open project on VM - Access denied - wich is correct Computername?

Anonymous — Wed, 19 Jun 2013 11:31:28 GMT

Glad you got it solved. Can you mark the post answered.

Jonathan