Synchronize Active Directory to Qlik NPrinting

[Giuseppe_Panella]

This video shows you how to import users and groups from an active directory controller into Qlik NPrinting through the REST API. This will help you to keep your group and users in Active Directory and NPrinting in sync.

The AdSync to NPrinting tool is a C# library that is available in GitHub. https://github.com/qlik-oss/nprinting-adsync 

Take a look at this video to start working with this tool

[Ruggero_Piccoli]

Hi,

The user that you insert in the command line with the -u -p options is the user that connects to the Active Directory. In Qlik NPrinting you must create the Windows user that runs the ADSynchDemoApp.exe process, the same user that you used to login in the Windows computer where you run the tool.

Best,

Ruggero

[romain__avizzeo]

Hi Ruggero,

Thanks for your answer, but the AD user used to connect to the Active Directory was also the user who ran the exe process (I was logged on the Nprinting server with this user).

I tried to create a local admin user different from the AD user to run the exe process and add him in the users of the Nprinting console, but same error message ...

[Ruggero_Piccoli]

Hi,

I have not asked before, I suppose the two users are in the same AD domain. Correct?

[romain__avizzeo]

Hi Ruggero,

As in my first trial I used the same AD user, yes it was on the same domain.

[romain__avizzeo]

Hi again,

I solved this issue by :

- using "localhost" instead of the URL of the nprinting server

- using the ip adresse instead the alias in the AD server parameter

The sync worked perfectly first time, but now I don't understand why it doesn't detect discrepencies between the AD groups and the nprinting users list...

Indeed, some users have been deleted from the nprinting server (so they are in the AD group but not in the nprinting users list) but it doesn't detect them (it doesn't read the AD groups again)

Do you have any idea ?

Thanks

Romain

[Ruggero_Piccoli]

Hi,

I investigated with the help of a C# developer.

1. The synchronization is mono-directional; from the AD to Qlik NPrinting
2. To read the AD deleted objects, the users that you specify in the command row need specific rights. Maybe it must be an admin

We would to suggest you to check these two things.

Best Regards,

Ruggero

---------------------------------------------

When applicable please mark the appropriate replies as CORRECT https://community.qlik.com/docs/DOC-14806. This will help community members and Qlik Employees know which discussions have already been addressed and have a possible known solution. Please mark threads as HELPFUL if the provided solution is helpful to the problem, but does not necessarily solve the indicated problem. You can mark multiple threads as HELPFUL if you feel additional info is useful to others.

[marcohadiyanto]

Hi All,

at this stage ==> ADSyncDemoApp.exe -u domain\username -p password

I had error, Any idea of below error?

API Error: Qlik.NPrinting.Rest.Client.Client.ApiException: Error calling LoginNtlmGet: {"result":null,"code":1,"message":null}

   at Qlik.NPrinting.Rest.Client.Api.AuthenticationApi.NtlmAuthentication()

   at Qlik.NPrinting.Rest.Client.Client.NPrintingApiFactory.GetNPrintingApiClient(String npUrl)

   at ADSyncDemoApp.Program.Main(String[] args)

Thanks

Marco

[Ruggero_Piccoli]

Hi,

Starting from September 2018 you can:

Import users and roles from LDAP

You can import users, with attributes and roles, from a generic LDAP source by configuring import tasks in the Qlik NPrinting Web Console.

Details: https://help.qlik.com/en-US/nprinting/September2018/Content/NPrinting/DeployingQVNprinting/Import-Us...

So I suggest you to update to September 2018 and use the native LDAP importing feature.

Best Regards,

Ruggero

---------------------------------------------

When applicable please mark the appropriate replies as CORRECT https://community.qlik.com/docs/DOC-14806. This will help community members and Qlik Employees know which discussions have already been addressed and have a possible known solution. Please mark threads as HELPFUL if the provided solution is helpful to the problem, but does not necessarily solve the indicated problem. You can mark multiple threads as HELPFUL if you feel additional info is useful to others.

[lee_connor]

I would check that all your users in AD have:

• An email address
• They are not duplicated email addresses
• All have first / last name and full name
• They are not duplicated names

Also if you can this is now in the September NP release so I would recommend upgrading but test first as the AD mappings need changing to when syncing the AD.

Lee