Qlik Community

QlikView Security & Governance

Discussion Board for collaboration on QlikView Security and Governance.

Announcements

Breathe easy -- you now have more time to plan your next steps with Qlik!
QlikView 11.2 Extended Support is now valid through December 31, 2020. Click here for more information.

Not applicable

Cannot authenticate users via LDAPS

Hi,

We're facing issues autheticating users over LDAPS. I can connect to the LDAPS server and find users. After adding licenses to the users I try to log in. When I try to log in, I get "Login failed". Attaching my DSP settings.

DSP settings.png

18 Replies
paul_w_routledg
Not applicable

Re: Cannot authenticate users via LDAPS

How are you obtaining a users credentials to use to authenticate against LDAP?

Have you created a Custom login page / Alternate login page?

Not applicable

Re: Cannot authenticate users via LDAPS

No. Right now I'm using browser login. I've tried with alternate login page, but still I couldn't authenticate

sfatoux72
Not applicable

Re: Cannot authenticate users via LDAPS

Hi,

Do you use DMS or NTLM?

See this link: Qlik Tips: Nobody said it was easy ... Configuring LDAP

Not applicable

Re: Cannot authenticate users via LDAPS

Not sure where to find DMS or NTLM setting See attached image. Is this what you ask for?

Skjermbilde.PNG

paul_w_routledg
Not applicable

Re: Cannot authenticate users via LDAPS

AFAIK to use LDAP for authentication requires you write a component that controls how the user provides their credentials and then how those credentials are validated against an LDAP directory for authentication. Usually this involves you writing a custom login page and the code/configuration to call out to the LDAP directory with the credentials the user provides.

You may also be wishing to use LDAP for you authorization to control which dashboard the authenticated user has access to. Sebastian Fatoux' post on this thread includes a link to a Qlik Tips page that has some really useful  information for LDAP authorization.

syukyo_zhu
Not applicable

Re: Cannot authenticate users via LDAPS

Hi,

try this

ldap.png

Not applicable

Re: Cannot authenticate users via LDAPS

This will not work with Secure LDAP (LDAPS)

paul_w_routledg
Not applicable

Re: Cannot authenticate users via LDAPS

Kristoffer

As you can see from your screenshot DMS falls under the Authorization setting. Set this and QlikView will maintain a list of which users/groups can access ?.qvw in the ?.qvw.meta file rather tha ncontrolling access to the .qvw file using windows file permissions.

NTLM refers to the authenticated (usually by Active Directory) identity of the user being passed by their browser to the QlikView Server. But you are wanting to authenticate via LDAP so this is probably not relevant.

Back to your original post when you say When I try to log in, I get "Login failed" which of the following do you mean

  1. the Directory Service Connector attempting to connect to the LDAP service fails
  2. you as a user trying to connect to the AccessPoint/QliKView Server fails
Not applicable

Re: Cannot authenticate users via LDAPS

Hi Paul,

Thank you for an excellent answer. Since we want to authenticate via LDAP I understand NTLM is not relevant.

As to your question I mean that my problem is number 2. The Directory service connctor is able to connect to LDAP and I do find users in the LDAP catalogue. But when I as a user try to authenticate I'm not able to do this and get "Login Failed".

Best regards

Kristoffer