Unable to Sync AD users in Qlik senseneed urgent help

[#1]

Dear All,

We have two separate installation for Qliksense test and prod.

In Test, we are able to connect to AD and sync users without any issues. The test was set up by me.

However, in prod we are not able sync the users. The task says it is failed. No errors in the log. This system was set up a person who has left from the firm and we are in blue.

Please help as we are struck and no idea whats happening. Qlik support too is doing R&D.

Regards,

Biju

[Gysbert_Wassenaar]

What do you see when you click on the info icon on the right in the status field?

[#3]

Dear Gysbert,

Please see the screen:

Thanks

[balabhaskarqlik]

might be this:

Reinstating user access

You can reinstate user access to a user whose token is in quarantine if you do so within 7 days. Do the following:

1. Select License and tokens on the QMC start page or from the StartS drop-down menu to display the overview.
2. Select User access rules in the panel to the right.

   You can apply a filter to a column by clicking ..

   Click a column heading to sort that column ascending S or descending R.

3. Select one or more users with the Status Quarantined and click Reinstate in the action bar at the bottom of the page.

   The Status is changed to Allocated. Also, the information on the Tokens page is updated.

You have now reinstated user access and the users can access streams and apps.

Reinstating user access ‒ Qlik Sense

[#5]

Dear Bala,

The issue is with AD synchronization. The tokens access not the basic issue.

Thanks,

Biju

[stevedark]

If the AD settings are identical in the QMC of the two servers then something else must be at play.

Most likely candidates for the problem would be the firewall between prod and the active directory, or that the service account which is doing the AD lookup (and runs all of Sense) does not have the correct permissions on the AD.

I would check carefully that there are no differences between how the user directory is set up between the two servers.

Steve

[#7]

Dear Steve,

AD setting are same. We have checked the firewall as well as the anti virus stopping the connectivity but they seems to be fine.

How can we check which services account for Qlik? We checked in services but it is using the local system account. This is interesting since the guy who installed the tool has left the firm.

Regards,

Biju

[stevedark]

A domain account would be better, as this is more likely to have access to the AD and other network resources; such as databases.

It should be fine to just change the account under Services (generally it is done during installation), but I would recommend backing up as much as you can first.

Steve

[#9]

The issue was resolved by adding a dedicated service account. Seems strange but it happened.

Thanks,

Biju

[stevedark]

Hi Biju - glad that you fixed it.  A dedicated service account is a good thing to have anyway.

Steve