Unlock a world of possibilities! Login now and discover the exclusive benefits awaiting you.
Which version (if any) will support using Configurable LDAP (or another LDAP setup in Directory Services Connector), notActiveDir, for QlikView authentication? If yes, how?
(I have internal QV servers setup to use ActiveDir for authentication, and NTFSfor file access. Those systems are working fine.)
I have an Amazon hosted QV instance that I need to use (Sun) LDAP directoriesservices for authentication (, and authorization?).
I’ve installed OpenDS onto my AWS QV instance, configured OpenDS it with objects andattributes, and a couple of test users (one real, one just for test). I don’t have the option to connect from AWSQV instance to my internal (Sun) LDAP directory server, so I expect to exportobjects/attributes to an LDIF file, zip it, use WinSCP to transport it to myAWS QV instance, un-zip it, then import the LDIF into OpenDS. That’s all working fine.
??? Which version of QV (v10 + patch? or v11) allows me to use LDAP (not ActiveDir) as myauthentication agent, and how would I use the existing LDAP objects/attrib (as shown in the picture) to setup QV toprovide user interrogation and authentication, much like ActiveDir does? And, no, I do not want to just query the LDAP from within QV, I want to use non-ActiveDir LDAP as my authentication source, and hopefully, to use it for authorizations as well.
I have seen the statement in the QV v10 Admin Ref concerning not being able touse Configurable LDAP for use in authentication, so maybe a later Service Patchdoes? Or QlikView v11 ?
I do have QV enterprise and Publisher, so I’ve got all the licensing I need. I've reviewed many (all) the various community discussions related to LDAP and DMS, but no working examples (not using ActiveDir). I've also pored over the QV Admin Ref Guides.
listing of LDIF from the OpenDS objects/attributes (via Apache Directory Studio) that aresetup and available on the AWS QV instance.
LDIFexport to CVS, including structural objects, etc…
bjectClass:top
objectClass:organization
o:xxxxxx.com
entryDN:o=xxxxxx.com
entryUUID::MDg3M2NmYzgtOWJjMy0zNGU4LWE5YWEtMDI3ZjhmNWY5YmM2
hasSubordinates:true
numSubordinates:1
structuralObjectClass:organization
subschemaSubentry:cn=schema
dn:ou=customer,o=xxxxxx.com
objectClass:organizationalUnit
objectClass:top
ou:customer
createTimestamp:20120207022218Z
creatorsName:cn=Directory Manager,cn=Root DNs,cn=config
entryDN:ou=customer,o=xxxxxx.com
entryUUID::ODZmYWZlYmUtMzExOC00ZWY5LThlNTYtNTAzODU5N2YzNjIz
hasSubordinates:true
numSubordinates:2
structuralObjectClass:organizationalUnit
subschemaSubentry:cn=schema
dn:uid=GURKAN.GOGUS@YYYYY.COM.TR,ou=customer,o=xxxxxx.com
objectClass:person
objectClass:organizationalPerson
objectClass:webuser
objectClass:top
cn:Gurkan Gogus
sn:Gogus
givenName:Gurkan
mail:gurkan.gogus@yyyyy.com.tr
mgcdistributor:Y
siteid:15416
sitename:YYY A.S.
userPassword::xxxxxxxxxxxxxxxxxxxxxxxxxxx
Q==
entryDN:uid=gurkan.gogus@yyyyy.com.tr,ou=customer,o=xxxxxx.com
entryUUID::YTljZDYwMmItYjcwNC0zOGNjLTk5YzktMDEzN2FkNWJiN2Qw
hasSubordinates:false
numSubordinates:0
structuralObjectClass:webuser
subschemaSubentry:cn=schema
dn:uid=qvtest,ou=customer,o=xxxxxx.com
objectClass:person
objectClass:organizationalPerson
objectClass:webuser
objectClass:top
cn:QVTEST
sn:qvtest
uid:qvtest
givenName:qvtest
mail:qvtest@xxxxxx.com
mgcdistributor:Y
siteid:15415
sitename:Xxxxxx test
userPassword::zzzzzzzzzzzzzzzzzzzzzzzzzzzzz
Q==
createTimestamp:20120217221305Z
creatorsName:cn=Directory Manager,cn=Root DNs,cn=config
entryDN:uid=qvtest,ou=customer,o=xxxxxx.com
entryUUID::NTgwYTg5NjYtMzdmZC00MWYwLWIzYzktNjFjNmM1ZmNmZjAw
hasSubordinates:false
modifiersName:cn=Directory Manager,cn=Root DNs,cn=config
modifyTimestamp:20120222192758Z
numSubordinates:0
pwdChangedTime:20120217223524.622Z
structuralObjectClass:webuser
subschemaSubentry:cn=schema
ben
Please remember that QlikView does not do authentication. Windows does that and pass the information to QlikView where it can do the authorization. If it is non-windows you are trying to authenticate against, you will have to write the code to do the authentication and pass the header information to QlikView for authorization.
Bill
That is true, Bill. I do sometimes forget the distinction, thanks for that clarification.