Active Directory Accessing via Two Domains

[pkelly]

Looking for some assistance.

We are currently in the early stages on implementing Active Directory.

We are moving from a Windows NT environment to AD.

This intention is that this will be a gradual process which will leave us in a situation whereby the QlikView server will be in the Win NT environment up until the last QlikView user is migrated to the new network.

I therefore need to be able to access the QlikView server from both domains.

NTDOMAIN01 is our NT domain name.

ADDOMAIN01.corp is our AD domain name.

We use named cals for licensing.

I have gone into management console and created a license for "ADDOMAIN01\pkelly" hoping that this would suffice.

Logged into AD and tried accessing one of our QlikView reports.

It looks as if it is trying to open the report but I get the following QlikOCX error...

Failed to open document. You don't have access to this document.

Have also tried pkelly@ADDOMAIN01.corp in the management console with no success.

I think that I am possibly missing some set up....

Can anyone assist?

Thanks

Paul

[Miguel_Angel_Baeyens]

Hello Paul,

Does the document have some section access where the users are in one form (old domain) but not the other? You might be able to check in the console if the user has actually logged into the AccessPoint and the license was allocated, and even enable logging, so you can check whther your user reaches the server or it doesn't.

Hope that helps

[pkelly]

There is no section access in any of the reports we use.

[Miguel_Angel_Baeyens]

Do the Session and Event logs say something like "opening ticket..." or "Access denied because of no access" or about CAL allocation?

[pkelly]

Hi Miguel

Access Point is not something which we use.

I have however managed to open the access point web page from the active directory environment but I do not see any reports (I do when accessing from the NT domain).

The event log was too big to open.

My gut feel is that I should be setting something up within the server which relates to the active directory domain.

Any help greatly appreciated.

Regards

Paul

[Miguel_Angel_Baeyens]

Hello Paul,

In the QlikView Enterprise Management Console, System tab, Directory Services Connectors, you can select the directories used to control the NTFS access to QlikView, and in the QlikView Servers, right pane, Security tab you have both DMS (if your license allows you to) and NTFS optinos to control user access to QlikView.

Apart from that, I don't remember having set the domain in any other plce that the administrative account used to start the services in the installation process. Haven't used clusters and I don't know if that's the case, though.

Regards.

[#7]

Hi,

You can add the new Active Directory as in the screenshot. Run the QlikView services under an account that has access to both domains.

-Alex

[#8]

Hi Alexandru Toth,

Run which service? Qlikview server service, Qlikview Webserver Services or others?

Thanks.