topic GetWeb ticket using IIS - SSO in QlikView

GetWeb ticket using IIS - SSO

akshayjain90 — Wed, 19 Apr 2017 12:12:42 GMT

Hi Team,

We have requirement where we need to use Windows authentication to get ticket instead of Trusted IP in config file.

We have followed the below settings, but still getting error.

PFB -

Settings -

QlikView needs to trust the code asking for the ticket. There is a web page within the QlikView web server called GetWebTicket.aspx which handles requests for tickets, this will only return a ticket to a trusted user/process and this is identified using one of two options

Option 1 – use windows permissions
- The code or process asking for a ticket needs to run as or provide a windows user identity. The user ID must be a member of the QlikView Administrators windows group on the QlikView server.
- As the GetWebTicket page runs under the QVAJAXZFC directory on the web server and one of the above steps made the directory work with Anonymous users – for this page only – enable windows authentication in IIS
- Now the Login page must authenticate itself when requesting a ticket as a windows user and that user must be a QlikView Administrator. In the attached example the login is hardcoded, however this could be configured in other ways

Error -

WARNING: NEGOTIATE authentication error: No valid credentials provided (Mechanism level: No valid credentials provided (Mechanism level: Failed to find any Kerberos tgt))

org.apache.http.client.HttpResponseException: Internal Server Error

at org.apache.http.impl.client.AbstractResponseHandler.handleResponse(AbstractResponseHandler.java:69)

at org.apache.http.impl.client.BasicResponseHandler.handleResponse(BasicResponseHandler.java:65)

at connectToQlik.getTicket(connectToQlik.java:134)

at connectToQlik.testIt(connectToQlik.java:59)

at connectToQlik.main(connectToQlik.java:40)

I have provide windows credentials also the user is present in Administrator and QlikView Management API group.

Can anyone help me on the same.

Regards,

Akshay

Re: GetWeb ticket using IIS - SSO

akshayjain90 — Thu, 20 Apr 2017 06:28:02 GMT

Hi All,

Can anyone help me on the above request.

Regards,

Akshay

Re: GetWeb ticket using IIS - SSO

Anonymous — Thu, 20 Apr 2017 06:57:40 GMT

hi akshay,

are you passing administrator credentials while hitting httprequest in webticket page

you need to pass request.networkcredentials as administrator credentials this will be default credential for every login user.

Re: GetWeb ticket using IIS - SSO

akshayjain90 — Thu, 20 Apr 2017 08:00:51 GMT

Hi Narasimha,

Thanks for your reply.

I am passing Windows user credential , which is QlikAdmin User also.

Can you please explain more on this - "you need to pass request.networkcredentials as administrator credentials this will be default credential for every login user."

Regards,

Akshay

Re: GetWeb ticket using IIS - SSO

Anonymous — Thu, 20 Apr 2017 09:46:15 GMT

Here ticketinguser, ticketingpassword are admin userid and password (windows credentials)

HttpWebRequest client = (HttpWebRequest)WebRequest.Create(new Uri(QlikViewServerURL));

client.PreAuthenticate = true;

client.Method = "POST";

client.AutomaticDecompression = DecompressionMethods.GZip | DecompressionMethods.Deflate;

client.Credentials = new NetworkCredential(ticketinguser, ticketingpassword);

using (StreamWriter sw = new StreamWriter(client.GetRequestStream()))

sw.WriteLine(webTicketXml);

StreamReader sr = new StreamReader(client.GetResponse().GetResponseStream());

string result = sr.ReadToEnd();

XDocument doc = XDocument.Parse(result);

return doc.Root.Element("_retval_").Value;