topic Re: Section access with active directory in QlikView

Section access with active directory

omid5ive — Sat, 11 Jul 2015 04:51:39 GMT

I want to use sect access in my document

I want to use LDAP combination with user pass

it means that if my client is in the domain and connect to active directory it can login to document without any username and password but if it's not a member of domain and active directory document ask a user name and password from user and if the user enter the correct username and password he/she can login to document.

how can i combine this two method in my dashboard?

Thanks for your help

Re: Section access with active directory

swuehl — Sat, 11 Jul 2015 08:55:59 GMT

Haven't tested it, but I think a combination of USERID, PASSWORD and NTNAME should work in section access, maybe as shown here:

Section Access using a QVD file with a combination of userID, password and NTName

Re: Section access with active directory

omid5ive — Sat, 11 Jul 2015 08:59:24 GMT

thank you

I solved it with your help

Re: Section access with active directory

Miguel_Angel_Baeyens — Sat, 11 Jul 2015 09:02:15 GMT

Hi Omid,

See here for a very similar request and sample working apps:

Re: 2 section access ?

Miguel

Re: Section access with active directory

omid5ive — Sat, 11 Jul 2015 09:08:23 GMT

thank miguel

always you have good solution

Re: Section access with active directory

omid5ive — Sat, 11 Jul 2015 13:51:10 GMT

when i open my document in qlikview access point it ask me username and password but my coimputer is in the domain

what should i do?

Re: Section access with active directory

swuehl — Sat, 11 Jul 2015 13:57:00 GMT

Try if DOMAIN\User and PW is accepted when you enter it manually.

Which browser are you using? I think the automatic transmission of your domain credentials only works in IE.

Re: Section access with active directory

omid5ive — Sat, 11 Jul 2015 14:01:37 GMT

my configuration is true be cause when i test ma dashboard out of access point its work fine

i think its need some configuration in qmc

Re: Section access with active directory

Miguel_Angel_Baeyens — Sat, 11 Jul 2015 16:53:37 GMT

Omid,

There is nothing to set up in the QMC. Section access is purely document wise. Rather, I'd check that the table works just fine with all NTNAME or all USERID and PASSWORD. Then put them together.

Miguel

Re: Section access with active directory

omid5ive — Sat, 11 Jul 2015 17:03:39 GMT

Miguel

i use blow script for section access:

Section Access;

LOAD * INLINE [

ACCESS, USERID, PASSWORD, NTNAME

ADMIN, MASOUD, 123,*

ADMIN,*, *, Lenovo-PC\ThinkPad

];

Section Application;

but when i copy it on my qv server i should enter user pass

Re: Section access with active directory

Miguel_Angel_Baeyens — Sat, 11 Jul 2015 17:30:32 GMT

That seems the expected behavior.

When you log in to your Access Point, it is highly unlikely you are "Lenovo-PC\ThinkPad" anymore (rather than, say, DOMAIN\USERNAME), so you need to add another line to the section access table and reload the document with your user in the server once the QVW has been deployed in there.

Re: Section access with active directory

omid5ive — Sat, 11 Jul 2015 17:55:02 GMT

miguel

i use my domain name instead Lenovo-PC and i use my domain username instead of ThinkPad

Re: Section access with active directory

swuehl — Sat, 11 Jul 2015 18:00:34 GMT

Which Directory Service Connectors are in use on that Server? Have you checked that an AD connector is enabled and connected to your domain?

When you are accessing the AccessPoint, do you need to login?

Re: Section access with active directory

omid5ive — Sat, 11 Jul 2015 18:04:01 GMT

yes its connected

active directroy

Re: Section access with active directory

Miguel_Angel_Baeyens — Sat, 11 Jul 2015 18:43:44 GMT

That makes sense. But make sure it is also in the section access table in the script, and that you have run that new script before placing the QVW in the server.

Re: Section access with active directory

omid5ive — Sat, 11 Jul 2015 18:48:26 GMT

sorry miguel

can you send me one sample document?

i want to know that is my section access script true or not?
and i want to check with you something:
i want to set DMS authentication in my server or NTFS (i set it on DMS)
and in my task schedule should i add the named user in distribute tab or not?

Re: Section access with active directory

Miguel_Angel_Baeyens — Sat, 11 Jul 2015 19:17:28 GMT

The document is attached in the post I mention above. You can download it.

NTNAME will work with either DMS (in which case, it will take the name of the DSC as set in the QMC instead of the DOMAIN) or NTFS (in which case, it will only use DOMAIN\USERNAME)

If the account that runs QlikView Server is already in section access, which is recommended, you don't need to specify anything different in the distribution task.

Re: Section access with active directory

omid5ive — Sat, 11 Jul 2015 19:58:23 GMT

thanks again

Re: Section access with active directory

omid5ive — Sun, 12 Jul 2015 06:48:47 GMT

miguel

my problem is solved

i have an other question

i have 2 type of group

1- the user that use dashboard from computer that it's joined to domain

2- the user that use dashboard out of my domain

i want to set that when my user connect to access point dont see below page :

what should i do?