LDAP filters in Qlik Sense

[marthega]

Hi!

Has anyone tried the LDAPfilter in QlikSense to import users in an ADGroup?

I have tried everything and have the right syntacs from both the LDAP tool and in Active Directory. I get a sucsess with the syntacs, but no users get imported to Qlik Sense. Please see the pictures below:

I use the same syntacs in Sense: (&(objectClass=user)(memberOf=CN=G.CO.DWH.QlikAdministrator,OU=Admin Roles,DC=internal,DC=financecorp,DC=biz)), but get no error and no users in Sense. Please help

[acaletti_it]

Hi Marthe,

have you tried to preceed the ldap query with (objectCategory=person)?

Something similar to:

(&(objectCategory=person)(objectClass=user)(memberOf=CN=G.CO.DWH.QlikAdministrator,OU=Admin Roles,DC=internal,DC=financecorp,DC=biz))

Andrea

[Lech_Miszkiewicz]

Hi Marthe,

In Qlik Sense LDAP Connection editor ( when creating LDAP connection for ex to AD ) there is a checkbox to import only existing users. I assume this is ticked in your current setup so no new user is actually imported.

Uncheck it and try again.

hope this helps

Lech

[shraddha_g]

Try Qlik Sense User Directory Connector - Additional LDAP Filter

It might help.

[marthega]

Hi Shraddha,

Thanks for this, already read it. The problem is not the syntacs, I have the right syntacs and get access to the AD group using the LDAP filter using the string over. But I still dont get any users in to Sense. And I dont know why. Is it no other people who has had this problem in Sense?

[millan123]

Hi,

Please restart the Physical servers

Thanks,

Clark

[lakshmikandh]

Yes Uncheck the option and try again.

[Lech_Miszkiewicz]

Hi Marthe,

There is one more trick. Keep in mind that when bringing users to Qlik Sense using LDAP filters you must still bring a user who is running a Qlik Sense service (or possibly anyone who is a RootAdmin i presume).

If your filter is excluding those users (or you simply have forgotten about them) Qlik Sense prevents user import ( if it would continue then it would lock itself out )

Let me know how it goes.

kind regards

Lech

[#9]

Path: //MyDomain.local

User name: MyDomain\administrator

Additional Ldap filter:

(memberOf=cn=Qlik Users,OU=MyBusiness,OU=Groups,OU=Database Access,DC=MyDomain,DC=local)

(In this example “Qlik Users” group is nested in MyDomain.local > MyBusiness > Groups > Database Access)