Active directory and Search for User

[sarafamiglietti]

Hello,

I am having some trouble with the "Search for User".

I go to the QMC (QVS V11.20) >> Users tab >> User Management and I search for an user : I can't find LDAP users, only local users can be found.

This worked very well sometines ago...

Can someone help me?

[flipside]

Is there a small red asterisk (star) on the Active Directory setup tab in QMC - it will be at the right hand side of the LDAP path, username and password, near the edit icon. If so, it is saying that something is wrong with one of the three entries.

Also look at the named user CAL entries or the assigned users for document CALs or server object owners (if these are allowed) - you might see the user format is in domain\username format rather than the resolved AD alias. That's another tell tale sign the LDAP connection has failed.

[#3]

Can you check your DSC service is Running or not? Status --> Services

If not, please go to server & restart the DSC service. If DSC service is running, follow flipside latest comment.

[awhitfield]

Is the Directory Service Connector user (that runs the service) a domain user or local? The need to be a domain user.

Andy

[sarafamiglietti]

Hello flipside,

There is not a small red asterisk. So I deduce that there is nothing wrong with the entries.

I also had a look at named user CAL entries, assigned users for document CALs or server object owners and something strange happened:

Sometimes I have user format like domain\username and sometimes I have AD alias.

For example:

I checked user document CALs for my document DOCUMENT1.qvw and I have AD alias.

I checked user document CALs for my document DOCUMENT2.qvw and I have AD alias.

I came back to the DOCUMENT1.qvw and I have domain\username but for Server Objects I have AD alias

I don't understand why...

[elyM]

Hi Sara,

I think that you follow in QlikView Server Bug.

BUG ID : 70488

Description : QMC: Unable to search with * (not wildcard search) in Manage Users

Status : Fixed

     Release fixed >= 11.20 SR13 (build 13206)

Regards,

Ely Malki

[sarafamiglietti]

Hi Ely

I'm not sure it's linked to this Qlikview Server Bug because this functionality worked before and if I use * to search a local user it works.

Regards

Sara

[flipside]

Do you have only 1x AD directory service configured and 1x Local Directory service configured? Just checking this is the case.

Under the AD setting, click the edit icon (the pencil) and see what the cache expiry and timeout values are set to. Mine are 60mins and 30seconds which are default (I think).

If everything is as above then I'm at a loss as I've never seen this behaviour myself. If no-one else can help then I would log a call to Qlik.

[sarafamiglietti]

Hello,

I have 3x Ad directory service configured and 1x Local Directory service configured.

Values for cache expiry and timeout are : 60mins and 30seconds.

To sum-up:

- All QV services are running well (and I have already try to restart them an we also try to restart the machine)

- User who runs QV service is AD user and it's QV admin and admin

- AD configuration seems to be OK

[flipside]

Just wondering if the multiple AD services are conflicting in some way. Try looking at the DSC logs at ProgramData\Qliktech\DirectoryServiceConnector\Log and see if there are any errors showing.

[sarafamiglietti]

There are no errors in DSC Logs.

Just "Information" message.

And no error in the Windows events viewer for DSC.