Unlock a world of possibilities! Login now and discover the exclusive benefits awaiting you.
We have an SSO solution to qlikview 11 but are having problems setting it up correctly. We are using IIS.
I get
"Failed to open document. You don't have access to this document"
when trying to access a document through the browser.
I'm using DMS with named users. It works if I set Authorization to 'All Users' or 'All authenticated users' on the user document so I believe the problem has to do with the named users.
We're using a module registered with the QlikView server IIS to set the header
QVUSER: CUSTOM\siteuser14
before redirecting from Authenticate.aspx to (example):
/qvajaxzfc/opendoc.htm?document=/path/customerId/documentName.qvw
When I look at the sessions log for the qlikview server I have lines that look like this:
Exe Type Exe Version Server Started Timestamp Document Document Timestamp QlikView User Exit Reason Session Start Session Duration CPU spent (s) Bytes Received Bytes Sent Calls Selections Authenticated user Identifying user Client machine identification Serial number Client Type Client Build Version Secure Protocol Tunnel Protocol Server Port Client Address Client Port Cal Type Cal Usage Count
RLS64 11.00.11149.0409.10 2011-11-28 04:13:16 2011-11-28 10:07:26 c:\qlikviewreports\14\report_courseelement-activity.qvw 2011-11-28 09:43:52 Socket closed by client 2011-11-28 09:28:17 00:39:09 0.000 9352 1219099 32 1 CUSTOM\ CUSTOM\ b7cb8733-85c9-456a-8ac1-1b3c07faa392 Ajax QvIIS 11.0.11149.0 IR browser.gecko 8 On 4747 127.0.0.1 51491 Named User
Notice that the authenticated user and identifying user seems to be "CUSTOM\" i.e. that the actual user name seems to be missing. ( If I understand it correctly it should be CUSTOM\siteuser14 in my case)
Here is an exerpt from the qlik view Events log after a restart of the service and trying to load a document:
2011-11-28 14:25:35 2011-11-28 14:25:36 4 700 Information Mount: Found Mount at location C:\ProgramData\QlikTech\Documents browsable
2011-11-28 14:25:35 2011-11-28 14:25:36 4 700 Information Mount: Found Mount CustRep at location C:\QlikViewReports browsable
2011-11-28 14:25:35 2011-11-28 14:25:59 4 700 Information Ticket created: Ticket for CUSTOM\.
2011-11-28 14:25:35 2011-11-28 14:25:59 4 700 Information Mount: Found Mount at location C:\ProgramData\QlikTech\Documents browsable
2011-11-28 14:25:35 2011-11-28 14:25:59 4 700 Information Mount: Found Mount CustRep at location C:\QlikViewReports browsable
2011-11-28 14:25:35 2011-11-28 14:25:59 4 700 Information Ticket Lookup: Ticket E7C1D700882F41EEDFB6271F26A091496131A734 was found.
2011-11-28 14:25:35 2011-11-28 14:25:59 4 700 Information Document Open: Open document: User has no access to document custrep/14/report_courseelement-activity.qvw
2011-11-28 14:25:35 2011-11-28 14:25:59 2 500 Warning Document Load: The document C:\QLIKVIEWREPORTS\14\report_courseelement-activity.qvw failed to load because of no file access [19].
2011-11-28 14:25:35 2011-11-28 14:36:46 4 700 Information Ticket created: Ticket for CUSTOM\.
2011-11-28 14:25:35 2011-11-28 14:36:47 4 700 Information Ticket Lookup: Ticket CE09803F2EC1481D9CB92081288F47966669BFFC was found.
2011-11-28 14:25:35 2011-11-28 14:36:47 4 700 Information Document Open: Open document: User has no access to document custrep/14/report_courseelement-activity.qvw
2011-11-28 14:25:35 2011-11-28 14:36:47 2 500 Warning Document Load: The document C:\QLIKVIEWREPORTS\14\report_courseelement-activity.qvw failed to load because of no file access [19].
I'm rather new to qlikview so it might be something simple that I've missed.
Hi Kschmidt,
As you said,
It seems something was changed in the way QlikView authenticates. Our IIS module sets the QVUSER header for Authenticate.aspx only, which works fine in QV10, but in QV11 we also need to set it for /QvAjaxZfc/QvsViewClient.aspx . This solved our problem.
Please can you let me know , how we can set the QVUSER header for Authenticate.aspx and /QvAjaxZfc/QvsViewClient.aspx .in Qlikview IIS server 11