Open project on VM - Access denied - wich is correct Computername?

[#1]

Hallo,

like the titel reveals, i want to open a QV Project on a Virtual Machine.

The Project has Section Access and i add the Computer hostname of the virtuall Machine to the List,

like i always do to access a new User(normaly it worked...).

But i still cant open the Project...

I think the hostname maybe isnt correct for QV.

If i look in my Computerproperties(VM) the name is listened.

When i enter "hostname" to cmd it returns the same...

What can this be?

Does QV needs another name?

Or a combination like realHostname\virtualMachineHostname?

Anyone else run into this issue?

I know that's maybe not 100% a qlicview question, but i have no idea what else can be wrong.

And I rly need to open it on the virtual machine:(

Pls help!

[Anonymous]

You say you 'add the Computer hostname of the virtuall Machine to the List'. Do you mean that you add the NTSID into the section access security list. This will change on a different machine. It can be found out by choosing Insert > NTSID in the script window.

I don't know of anywhere you would add the machine name within section access.

Jonathan

[#3]

First thx for fast reply:D

Maybe i cant explain very good,because i didnt create the project.

I mean i add the computername to the Section Access - table(?).

Looks like this^^

Section Access:

LOAD * INLINE [

     ACCESS, NTNAME

     ADMIN,user1

     ADMIN,user2

     ADMIN, virtualMachineComputername

];

And this normaly solves the access denied Problem, but not in this case...

Maybe now is more clear what i mean...

[Anonymous]

NTNAME identifies the windows user that accesses the machine.

Try adding an NTDOMAINSID if you want to identify the machine. This can be found by going to Insert > Domain SID under the menu in the edit script dialogue. It is a long (43 character) string.

Jonathan

[#5]

Sry for writing the same stuff again^^

Maybe this is the problem.

I'm trying to do so. Maybe or better surely i'm doing sth wrong, because i dont know where to put the NTDOMAINSID.

I tried following things:

Section Access:

LOAD * INLINE [

     ACCESS, NTNAME,NTDOMAINSID

     ADMIN,user1

     ADMIN,user2

     ADMIN, virtualMachineComputername,Domain SID

];

Section Access:

LOAD * INLINE [

     ACCESS, NTNAME

     ADMIN,user1

     ADMIN,user2

     ADMIN, Domain SID

];

Section Access:

LOAD * INLINE [

     ACCESS, NTNAME

     ADMIN,user1

     ADMIN,user2

     ADMIN, Domain SID\virtualMachineComputername

];

But it doesn't works....

Where to put the Domain SID? And thx for all the help:)

[Anonymous]

I probably wasn't clear enough myself.

My security tables look something like this:

SECTION ACCESS;

LOAD * INLINE [

    ACCESS, NTNAME, NTDOMAINSID

    ADMIN, Administrator, S-3-6-12-6473957462-9464534241-3425347485

.... etc

];

The NTNAME is the name a user would log on to the server with. They typically type this in when they are openning the AccessPoint.

The NTDOMAINSID is an identifier of the server. This is so that people can not bypass security by copying the file to a different machine, setting up a user such as Administrator and then openning the file. The NTDOMAINSID of the server is found by going to Insert > Domain SID within the Edit Script dialogie on the server machine (see attached picture).

Jonathan

[#7]

No than it seems like sth else is wrong.

I tried it like this, with the generated Domain SID.

Does every User has to have the same Domain SID or is it depending on the Computer the user will use to work with the project?

The QV Version of the VM creates another Domain SID, but i tried both^^

You wrote:"The NTDOMAINSID is an identifier of the server. ", maybe it wont work because i dont use any server:(

The Project was connected to a Server, but this was "before my time"^^

Maybe i have to delete all the Server stuff if it is not longer needed...?

[Anonymous]

Every user needs to use the same SID.

If you are running on two machines, then you will have two sets of SIDs etc.

Interesting about the VM not having a SID. Do you have the QlikView Developer software installed on the VM ?

When you suggest deleting all the 'server stuff' what do you mean ?

Jonathan

[#9]

I mean delete the Access and make it available for every User.

This is a only an example Project and our server licence is out of date^^

Important for me is that i can connect to the DB of the VM...

I tried deleting the Section Access and i can open the project on the vm

But maybe this is only a workaround....

So if u say i need Access,Users and NTDOMAINSID only while using the server, maybe it's the simpliest way to delete this fields. Do i need them only with Server?

How would it look having two Domain SID's?

[Anonymous]

Two machines could result in having something like this:

SECTION ACCESS;

LOAD * INLINE [

    ACCESS, NTNAME, NTDOMAINSID

    ADMIN, Administrator, S-3-6-12-6473957462-9464534241-3425347485

    USER, User1, S-3-6-12-6473957462-9464534241-3425347485

    USER, User2, S-3-6-12-6473957462-9464534241-3425347485

    ADMIN, Administrator, S-5-1-87-4646237282-2434329044-5362826252

    USER, User1, S-5-1-87-4646237282-2434329044-5362826252

    USER, User2, S-5-1-87-4646237282-2434329044-5362826252

];

Note that the SIDs are different in the top three rows. The usernames could also be if required.

You can go without security if you're happy to do so. There are usually two other levels of security, namely that a user needs a username and password to access the server, and there needs to be a license assigned to them or free to use.

Jonathan