topic Section Acess and AD groups (NTNAME) in QlikView

Section Access and AD groups (NTNAME)

isaiah82 — Wed, 11 Aug 2010 15:45:56 GMT

Hi All - I am trying to implement Section Access in a QVW and having trouble with AD group names.

It works fine when I specify individual usernames in the NTNAME field, but not when I specify an AD domain group name. I've tried qualifying the domain group, but no luck (cannot access document.) I have done this before successfully in another environment; wondering if an environment-specific setting could be to blame?

Here's a sample inline table I'm using. If I replace group-name with my own AD user account name, it works great. But when I use a domain group name I can't gain access. Might anyone have any ideas?

Thanks! -Isaiah

section access;

load * inline

[NTNAME,ReductionField,Access

group-name,FieldValue,Admin

;

Section Acess and AD groups (NTNAME)

isaiah82 — Wed, 11 Aug 2010 16:07:07 GMT

Turns out this is an environment-specific situation and I was able to resolve. I needed to append a string to the group name and now works like a champ. -Isaiah

Section Acess and AD groups (NTNAME)

marksouzacosta — Thu, 26 May 2011 19:53:14 GMT

Hello Isaiah,

Can you please clarify your solution with an example? I am having the same kind of issue.

Regards,

Mark Costa

Section Acess and AD groups (NTNAME)

isaiah82 — Fri, 27 May 2011 17:58:44 GMT

Hi Mark - it's been some time since I've been on that project, and I can't remember much specifics.

The issue I had was the source from where I was getting the group names (it was very dynamic); for whatever reason there was some string tacked on to the end that I just had to strip off. Are you qualifying the group name with a domain (or hostname if local accounts)? I could also see spaces in the group names causing some confusion.

Re: Section Acess and AD groups (NTNAME)

marc_behrens — Fri, 20 Jul 2012 08:15:25 GMT

Because I found this thread when searching a solution for my problem, I thought it would help to know that it can be a "problem", if kerberos is used in the environment and one does not know how to deal with it correctly.

http://community.qlik.com/thread/57817

In your case Isaiah, I guess you might have used the group attribute "name", instead of the "sAMAccountName" and the 2nd one might have been a bit longer. For example "sales_grp" istead of "sales".

-Marc