I have an installation in a sensitive location off-grid that is accessed from an intranet. (Can't explain too much for reasons of client confidentiality.) There are various application servers, one of which is a dedicated Qlik Sense server, and a 'jump box' to access the servers and run the applications, all on one domain and all the applications are accessible via http: on port 80 from the jump box.
Users on the intranet (a separate domain) access the applications via a load balancer using https: on port 443, which handles the certification and redirects requests to the applications. (This architecture is imposed and I can't make any but the most trivial of changes.)
Qlik is configured to accept requests on http: port 80 and everything works pretty well from the jump box and the wider intranet with one exception. I have used an extension on a couple of dashboards (Stefan Walther's excellent Export button swr-sense-export) and this throws an error on the above installation if I try to export data from the jump box or the intranet. The error is simply "403 Access Denied." The rest of the dashboard is fine, other extensions work ok, although they are related to presentation, not the data.
If I run the dashboard on the Qlik server itself, it is fine and generates the Excel data as expected, so I don't believe the installation or the extension are corrupt. I suspect it's something to do with the "Allow http:" configuration but can't figure out what.
I know the dashboard and extension work fine on Qlik Sense Desktop and on another server where it uses the default https: configuration. All are April 2018 versions and I believe that all required ports are open for use.
Has anyone come across any similar issues with authentication and does anyone have any advice?
Any help much appreciated.
Neill
