Skip to main content
Announcements
Have questions about Qlik Connect? Join us live on April 10th, at 11 AM ET: SIGN UP NOW
cancel
Showing results for 
Search instead for 
Did you mean: 
baldwin79
Contributor
Contributor

Seperate QlikView Web Server, QVS Local Directory as Authentication

Hi All,

Currently I'm implementing the architecture where I have installed QV WebServer as seperate machine from the QVS machine. I created several users in QVS machine. I had added the web server into the QMC and assign the web server to appropriate DSC and QVS. All the associated port is opened. However, I'm unable to login to the AccessPoint. Both are not in the domain. During installation, I used qvadmin user for both QVS and QVWS. Password is the same. Did I miss any setting required?

I had tried to change the authentication part to AD as well, yet it doesn't work too. The login is failed for both AD and local directory in QVS. However, custom directory is successful.

21 Replies
gainkarthi
Partner - Specialist
Partner - Specialist

Please change it to Default login page (browser authentication) and try accessing.

baldwin79
Contributor
Contributor
Author

Tried but it wont prompt for login and accesspoint show  TRIWON\baldwin

Bill_Britt
Former Employee
Former Employee

HI,

Qlikview does not do authentication, it only does authorization. So, if the server is not part of the AD it will not authenticate against the domain.

Bill

Bill - Principal Technical Support Engineer at Qlik
To help users find verified answers, please don't forget to use the "Accept as Solution" button on any posts that helped you resolve your problem or question.
Not applicable

Do you mean QVWS have to be on the domain? If I install DSC and QVS on the server which is on AD, but the QVWS is on the server whis is not part of AD. Can the user authenticate by the user on AD?

Bill_Britt
Former Employee
Former Employee

Hi,

Windows does the authentication unless you write your own SSO pages and send header information to QVS. So, if you have a webserver in the DMZ and you are trying to authenticate to an AD on the inside it will not work. This isn't QlikView it is windows.

Bill

Bill - Principal Technical Support Engineer at Qlik
To help users find verified answers, please don't forget to use the "Accept as Solution" button on any posts that helped you resolve your problem or question.
baldwin79
Contributor
Contributor
Author

Hi Britt,

Let me get you right. Did you meant both of the server QVS and QVWS must be in the domain in order to work? If i put QVS only in the domain it won't work too?

If that's the case, if i create a custom login page with web ticketing instead of SSO will I able to authenticate?

Is there any easy way instead of writing pages like changing the architecture? Like if I don't split the server, and put in the DMZ? If the server is in DMZ am i able to join domain? Please enlighten. Really sucks on architecture.

Bill_Britt
Former Employee
Former Employee

Hi,

Yes, if you create your own pages to do the authentication you will be ok.

Bill

Bill - Principal Technical Support Engineer at Qlik
To help users find verified answers, please don't forget to use the "Accept as Solution" button on any posts that helped you resolve your problem or question.
baldwin79
Contributor
Contributor
Author

Hi,

Besides writing the page, any other solution I can follow? If I change the architecture by having the QVWS and QVS in the same box and push that server to the DMZ. Will that work?

Or I stick to the plan where I join the QVWS in the domain? Just wanted to know is that's possible if DMZ server join to the domain. Or do I need and intermediate server eg. reverse proxy to do that.

Found out from my colleagues, it is possible however you need to put both the forest which is internal forest and DMZ forest to trust each other. Anyone experience with this solution before?

Just wanted to know any possible solution except writing the page.

Bill_Britt
Former Employee
Former Employee

You could do it that way and setup everyone in the local directory, but if you are planning on authenticating the users with AD the server will have to be part of the domain.

Bill

Bill - Principal Technical Support Engineer at Qlik
To help users find verified answers, please don't forget to use the "Accept as Solution" button on any posts that helped you resolve your problem or question.
Anonymous
Not applicable

Hi,

I have a scenario which is pretty much like yours in there, but I am feeling a little bit lucky because both QVWS machine and QVS machine are within the AD domain in my scenario so my AD users are able to login to QV Access Point.

However, I am having the same issue that you had which I am unable to login to QV access point by using local directory user, even when I have already defined the Local Directory Patch which is "local://QVSserver".

Just wondering if you have already solved this problem.

Thanks.