Qlik Sense: User Directory Connector - LDAPS Support and Testing

[Sonja_Bauernfeind]

Qlik Sense Enterprise for Windows supports LDAPS for User Directory Connector, however, it requires the following:

• A valid and trusted certificate installed in the Qlik Sense Enterprise trusted certificate store. 
• Use of the standard LDAPS Port 636

To confirm that the directory is available to Qlik Sense Enterprise, we recommend testing with a third-party tool allowing you to connect to your directory. 

There are many LDAP browsers in the market. Your IT team may already have a tool in place, please contact your administrator first.

1. Download and run the third-party tool of your choice. Example: LDAP Browser.
2. Execute it on the server Central Node as the Service Account.
3. Set up a connection to the LDAP server enabling SSL.
   
   
   
   
4. If the connection is successful, you are good to go.

Error Example

Connecting fails or a warning is displayed: 

The name of the security certificate is invalid or does not match the server name

This indicates the certificate is not trusted or not installed correctly. Install or correct the certificate and test again.

[Luck]

Hi, got a question If our customer would like to use LDAPS, but with custom port other than 636, is it possible by default? or could we rely on Qlik PS for this case? Regards, Lucky

[Sonja_Bauernfeind]

Hello @Luck 

Custom ports are not supported as per Connections and Requirements to Establish UDC Connectivity Using LDAPS.

All the best,
Sonja 

[john_oll]

The link to LDAP Admin is currently useless,
it links to a http site, no SSL,
and there are no downloads available.

[Sonja_Bauernfeind]

Hello @john_oll 

Thank you for alerting us. Looks like LDAP Admin's page has drastically changed. I'll need to clarify that any third-party tool can be used to perform these tests. LDAP admin was an example we used. Unfortunately, Qlik does not have its own toolset for this.

Will see what alternatives we can list, if any.

All the best,
Sonja 

[john_oll]

https://sourceforge.net/projects/ldapadmin/
seems to be the correct, working download link

[Sonja_Bauernfeind]

@john_oll Thank you! You got to it before me! I appreciate the feedback and contribution.

All the very best,
Sonja