topic Re: Active directory and Search for User in QlikView

Active directory and Search for User

sarafamiglietti — Mon, 18 Jan 2016 16:18:59 GMT

Hello,

I am having some trouble with the "Search for User".

I go to the QMC (QVS V11.20) >> Users tab >> User Management and I search for an user : I can't find LDAP users, only local users can be found.

This worked very well sometines ago...

Can someone help me?

Re: Active directory and Search for User

marcus_sommer — Tue, 19 Jan 2016 08:32:56 GMT

You need to check if you have valid entries of your LDAP within the qmc (system/setup/directory service connectors) and if you have proper rights to query them - maybe something has changed.

- Marcus

Re: Active directory and Search for User

dinuwanbr — Tue, 19 Jan 2016 08:58:28 GMT

Hi,

Hope this USER (Admin of QMC) is a part of your AD?

Rgds,

Dinu1

Re: Active directory and Search for User

sarafamiglietti — Tue, 19 Jan 2016 09:11:01 GMT

How can I check that?

How can I know what has changed?

Re: Active directory and Search for User

sarafamiglietti — Tue, 19 Jan 2016 09:30:15 GMT

Where can I see which user is admin of QMC?

Re: Active directory and Search for User

marcus_sommer — Tue, 19 Jan 2016 11:48:27 GMT

You could look in the taskmanager who runs the qvs.exe and the other services. Aren't those processes not visible you could look within the services itself - Win+r (command-window) and there: services.msc.

- Marcus

Re: Active directory and Search for User

marcus_sommer — Tue, 19 Jan 2016 11:59:39 GMT

It's difficult to say how to find out if anything had changed. At first I would ask the guys which are responsible for the qv server and then your "normal" IT.

Even if you couldn't browse through the directory you could enter the user manually - it's not very nice but it must not be slower.

- Marcus

Re: Active directory and Search for User

flipside — Tue, 19 Jan 2016 12:43:06 GMT

You probably just need someone in your IT department who has a suitable username and password to query the active directory to enter these details in the QMC (System > Setup > Directory Service Connectors ...). Quite often this will be set up by IT with a personal username which has the necessary admin rights, but these passwords may expire or the user leaves - this might be why it worked once but not now.

They should use an admin account with a non-expiring password (eg a service account).

Re: Active directory and Search for User

sarafamiglietti — Tue, 19 Jan 2016 12:58:55 GMT

Hello Marcus,

User who runs QV service is AD user.

And I know that I can enter the user manually, it's what I do, but I would like to understand why it's no more possible to search for a user now

Re: Active directory and Search for User

marcus_sommer — Tue, 19 Jan 2016 15:22:17 GMT

Have a look on the answer from Flipside and (let) check if this user has yet the proper access-rights.

- Marcus

Re: Active directory and Search for User

flipside — Wed, 20 Jan 2016 13:59:54 GMT

Is there a small red asterisk (star) on the Active Directory setup tab in QMC - it will be at the right hand side of the LDAP path, username and password, near the edit icon. If so, it is saying that something is wrong with one of the three entries.

Also look at the named user CAL entries or the assigned users for document CALs or server object owners (if these are allowed) - you might see the user format is in domain\username format rather than the resolved AD alias. That's another tell tale sign the LDAP connection has failed.

Re: Active directory and Search for User

Wed, 20 Jan 2016 14:37:07 GMT

Can you check your DSC service is Running or not? Status --> Services

If not, please go to server & restart the DSC service. If DSC service is running, follow flipside latest comment.

Re: Active directory and Search for User

awhitfield — Wed, 20 Jan 2016 14:40:11 GMT

Is the Directory Service Connector user (that runs the service) a domain user or local? The need to be a domain user.

Andy

Re: Active directory and Search for User

sarafamiglietti — Wed, 20 Jan 2016 14:42:29 GMT

Hello flipside,

There is not a small red asterisk. So I deduce that there is nothing wrong with the entries.

I also had a look at named user CAL entries, assigned users for document CALs or server object owners and something strange happened:

Sometimes I have user format like domain\username and sometimes I have AD alias.

For example:

I checked user document CALs for my document DOCUMENT1.qvw and I have AD alias.

I checked user document CALs for my document DOCUMENT2.qvw and I have AD alias.

I came back to the DOCUMENT1.qvw and I have domain\username but for Server Objects I have AD alias

I don't understand why...

Re: Active directory and Search for User

elyM — Wed, 20 Jan 2016 14:47:02 GMT

Hi Sara,

I think that you follow in QlikView Server Bug.

BUG ID : 70488

Description : QMC: Unable to search with * (not wildcard search) in Manage Users

Status : Fixed

Release fixed >= 11.20 SR13 (build 13206)

Regards,

Ely Malki

Re: Active directory and Search for User

sarafamiglietti — Wed, 20 Jan 2016 17:16:31 GMT

Hi Ely

I'm not sure it's linked to this Qlikview Server Bug because this functionality worked before and if I use * to search a local user it works.

Regards

Sara

Re: Active directory and Search for User

flipside — Thu, 21 Jan 2016 08:25:48 GMT

Do you have only 1x AD directory service configured and 1x Local Directory service configured? Just checking this is the case.

Under the AD setting, click the edit icon (the pencil) and see what the cache expiry and timeout values are set to. Mine are 60mins and 30seconds which are default (I think).

If everything is as above then I'm at a loss as I've never seen this behaviour myself. If no-one else can help then I would log a call to Qlik.

Re: Active directory and Search for User

sarafamiglietti — Thu, 21 Jan 2016 09:56:15 GMT

Hello,

I have 3x Ad directory service configured and 1x Local Directory service configured.

Values for cache expiry and timeout are : 60mins and 30seconds.

To sum-up:

- All QV services are running well (and I have already try to restart them an we also try to restart the machine)

- User who runs QV service is AD user and it's QV admin and admin

- AD configuration seems to be OK

Re: Active directory and Search for User

flipside — Thu, 21 Jan 2016 12:39:01 GMT

Just wondering if the multiple AD services are conflicting in some way. Try looking at the DSC logs at ProgramData\Qliktech\DirectoryServiceConnector\Log and see if there are any errors showing.

Re: Active directory and Search for User

sarafamiglietti — Thu, 21 Jan 2016 14:19:50 GMT

There are no errors in DSC Logs.

Just "Information" message.

And no error in the Windows events viewer for DSC.