Skip to main content
Announcements
Defect acknowledgement with Nprinting Engine May 2022 SR2, please READ HERE
cancel
Showing results for 
Search instead for 
Did you mean: 
timml_hsu
Contributor III
Contributor III

On-Demand Add-On with QlikView Error 403

Our environment

Server 1: QlikView Server(12.10.2) + NPrinting on-demand-add(September 2018)

Server 2: NPrinting Server(September 2018) + NPrinting Engine(September 2018)

Server OS (Windows Server 2016 Standard)

 

Steps:

  1. QlikView Server is installed and configured to use Microsoft IIS as web server => checked
  2. We create a certificate on IIS, certifaicate name: TT
    q2.png
  3. When install NPrinting On-Demand Add-On, use certificate TT thumbprint

    q3.png
  4. Generate X.509 public key certificate in PEM format (file name: 20181127.cer)

    p4-1.pngp4-2.png
  5. Open 20181127.cer in notepad

    q5.png
  6. On NPrinting Server, Admin > Settings > Authentication settings, enable JWT authentication, in the JWT certificate field put value from step 5. JWT attribute for user ID & user directory, we put our AD domain
    q6.png
  7. On NPrinting Server, Admin > Settings > On-Demand settings > Add trusted origin
    q7.png
  8. NPrinting report enable On-Demand and API report generation => checked
    q8.png
  9. Create NPrinting security role: on-demand role
    q9.png
  10. NPrinting users assgin on-demand role
    q10.png

 

When open on-demand in QlikView Server, we get error 403

error.png

 

Q1: How can we fix this problem?

Q2: What is the correct value in JWT attribute for user ID and user directory?

Q3: Where can we find the on-demand add-on installation video? We ready study NPrinting 17.3 configuration & troubleshooting 

 

Plz help~

PS: our steps & configuration with image, plz see the attachment

1 Solution

Accepted Solutions
Ruggero_Piccoli
Support
Support

Hi,

 

You must insert the two fixed values uid and dom as this. Don't change them. You must use them as fixed strings.

 

Best Regards,
Ruggero
---------------------------------------------
When applicable please mark the appropriate replies as CORRECT. This will help community members and Qlik Employees know which discussions have already been addressed and have a possible known solution. Please mark threads as HELPFUL if the provided solution is helpful to the problem, but does not necessarily solve the indicated problem. You can mark multiple threads as HELPFUL if you feel additional info is useful to others.



Best Regards,
Ruggero
---------------------------------------------
When applicable please mark the appropriate replies as CORRECT. This will help community members and Qlik Employees know which discussions have already been addressed and have a possible known solution. Please mark threads with a LIKE if the provided solution is helpful to the problem, but does not necessarily solve the indicated problem. You can mark multiple threads with LIKEs if you feel additional info is useful to others.

View solution in original post

8 Replies
Lech_Miszkiewicz
Partner Ambassador/MVP
Partner Ambassador/MVP

Hi,

I will not give you straight answer since i do not know it. The way i would try to troubleshoot it would be by allocating  admin user role for that user you are trying authenticate with. (just to make sure that user has an access to everything what is required).

If the error still persist then i would try to focus on other parameters like userid and domain:

https://help.qlik.com/en-US/nprinting/November2018/Content/NPrinting/DeployingQVNprinting/JWT-authen...

i think help document contains all required information : https://help.qlik.com

cheers Lech, When applicable please mark the correct/appropriate replies as "solution" (you can mark up to 3 "solutions". Please LIKE threads if the provided solution is helpful to the problem.
Lech_Miszkiewicz
Partner Ambassador/MVP
Partner Ambassador/MVP

also - have you tried to read other posts on community like: https://community.qlik.com/t5/Qlik-NPrinting-Discussions/NPrinting-17-On-Demand-no-access-to-resourc...
cheers Lech, When applicable please mark the correct/appropriate replies as "solution" (you can mark up to 3 "solutions". Please LIKE threads if the provided solution is helpful to the problem.
Ruggero_Piccoli
Support
Support

Hi,

  1. In the field JWT attribute for user ID insert uid
  2. In the field JWT attribute for user directory insert dom

You must insert uid and dom without changing them because the Qlik NPrinting On-Demand add on uses these specific values and they cannot be changed. Using different values will result in authentication failure.

image.png

 

Best Regards,
Ruggero
---------------------------------------------
When applicable please mark the appropriate replies as CORRECT. This will help community members and Qlik Employees know which discussions have already been addressed and have a possible known solution. Please mark threads as HELPFUL if the provided solution is helpful to the problem, but does not necessarily solve the indicated problem. You can mark multiple threads as HELPFUL if you feel additional info is useful to others.



Best Regards,
Ruggero
---------------------------------------------
When applicable please mark the appropriate replies as CORRECT. This will help community members and Qlik Employees know which discussions have already been addressed and have a possible known solution. Please mark threads with a LIKE if the provided solution is helpful to the problem, but does not necessarily solve the indicated problem. You can mark multiple threads with LIKEs if you feel additional info is useful to others.
Ruggero_Piccoli
Support
Support

Hi,

  1. In the field JWT attribute for user ID insert uid
  2. In the field JWT attribute for user directory insert dom

You must insert uid and dom without changing them because the Qlik NPrinting On-Demand add on uses these specific values and they cannot be changed. Using different values will result in authentication failure.

 

 User ID.png

Best Regards,
Ruggero
---------------------------------------------
When applicable please mark the appropriate replies as CORRECT. This will help community members and Qlik Employees know which discussions have already been addressed and have a possible known solution. Please mark threads as HELPFUL if the provided solution is helpful to the problem, but does not necessarily solve the indicated problem. You can mark multiple threads as HELPFUL if you feel additional info is useful to others.



Best Regards,
Ruggero
---------------------------------------------
When applicable please mark the appropriate replies as CORRECT. This will help community members and Qlik Employees know which discussions have already been addressed and have a possible known solution. Please mark threads with a LIKE if the provided solution is helpful to the problem, but does not necessarily solve the indicated problem. You can mark multiple threads with LIKEs if you feel additional info is useful to others.
timml_hsu
Contributor III
Contributor III
Author

Thanks reply

we follow
https://help.qlik.com/en-US/nprinting/September2018/Content/NPrinting/On-Demand/Install-Components.h...

and check the Qlik NPrinting services Windows domain user in the QlikView
Server windows group : QlikView Administrators, QlikView Management API => OK

but we still get erro 403 : User has no rights to access the resource

we have no idea to fix this problem : (
timml_hsu
Contributor III
Contributor III
Author

Thanks reply
1. In the field JWT attribute for user ID insert uid
2. In the field JWT attribute for user directory insert dom
> Can we define the uid & dom by myself ? Or where can we find the correct uid & dom
Ruggero_Piccoli
Support
Support

Hi,

 

You must insert the two fixed values uid and dom as this. Don't change them. You must use them as fixed strings.

 

Best Regards,
Ruggero
---------------------------------------------
When applicable please mark the appropriate replies as CORRECT. This will help community members and Qlik Employees know which discussions have already been addressed and have a possible known solution. Please mark threads as HELPFUL if the provided solution is helpful to the problem, but does not necessarily solve the indicated problem. You can mark multiple threads as HELPFUL if you feel additional info is useful to others.



Best Regards,
Ruggero
---------------------------------------------
When applicable please mark the appropriate replies as CORRECT. This will help community members and Qlik Employees know which discussions have already been addressed and have a possible known solution. Please mark threads with a LIKE if the provided solution is helpful to the problem, but does not necessarily solve the indicated problem. You can mark multiple threads with LIKEs if you feel additional info is useful to others.
timml_hsu
Contributor III
Contributor III
Author

We really very appreciate your reply, thanks~