20 Replies Latest reply: Mar 9, 2017 6:25 AM by Lorna Louw

QlikView Web Ticket not passing User ID to QVW

Jon Bates Jan 15, 2014 1:01 AM

I'm using the Webticket method of authenticating and section access for authorization (on QlikView Extranet Server).

I'm able to successfully generate a ticket and successfully log into the access point using the following call:

http://qvserver/QvAJAXZfc/Authenticate.aspx?type=html&webticket=niH06FElbrmGLxLFRXDXel44TNpUhGaQAZs081z4&try=http://qvserver/qlikview

However, when I try to access a QVW with section access enabled, the user is then prompted for login credentials:

It was my understanding that QV would pass the User ID of the logged in user to the QVW file.

I'm using DMS method of authentication and my users are stored in a table using ODBC.

How can I pass these credentials to the QVW from my PHP webticket script to avoid this? I've tried hard coding user credentials in both the PHP script that generates the ticket and the QVW load script.

I cant use NTNAME, as this is a public/customer-facing server - therefore the users can't be authenticated with NTNAME.

Can anyone help??

Re: QlikView Web Ticket not passing User ID to QVW

Jon Bates Jan 16, 2014 5:44 PM (in response to Jon Bates)

Anyone ideas?? I've scoured every forum I can find for an answer, to no avail
Like Show 0 Likes (0)

Actions
Re: QlikView Web Ticket not passing User ID to QVW

Guillermo Ballester Jan 16, 2014 6:21 PM (in response to Jon Bates)

We are also using WebTicket with DMS. We have a table in a database and validate users from the login form.

Once validated the user, the form requests a ticket to a QlikView and passes this to the document.

In document are using ntname, follows

--------------------------------------------------------------------
Section Access;
LOAD UPPER (ACCESS) ACCESS AS,
UPPER (NTName) AS NTName
FROM
$ (v_QVDPropio_Path) \ USUARIOS.qvd (qvd);

Section Application;
---------------------------------------------------------------------

Use NTName and ACCESS fields. These two data need to be accessed by WebTicket.

I hope my answer is helpful, but do not hesitate to contact me.

Good luck
Guillermo
Like Show 0 Likes (0)

Actions
- Re: QlikView Web Ticket not passing User ID to QVW
  
  Satish Jayanthi Apr 18, 2014 3:52 PM (in response to Guillermo Ballester)
  
  This is very helpful!
  
  My question is, if you just use ACCESS and NTNAME in the section access, then how do you set up the reload on the server? It asks for a username and password - it has to match an entry in section access. A blank password worked before I changed to NTNAME, and I just put in ADMIN as the username. But now it seems that I need the NTName of the account that will run the reload? Is that correct?
  
  Like Show 0 Likes (0)
  
  Actions
Re: QlikView Web Ticket not passing User ID to QVW

Jaime Aguilar Jan 16, 2014 6:29 PM (in response to Jon Bates)

Hi,
I think that your case is a little bit different because of the extranet server, however I think you can still use NTNAME or USERID (you can use this if the NTNAME cause you conflict with the extranet server), just to passing this data to the webticket (Just like Guillermo Said). Besides if you don't want this double authentication (Webticket and then when you open the QVW), you can disable the field PASSWORD in section access.
This way, once webticket gets the NTNAME/USERID and ACCESS, then the document will open without asking again for credentials and displaying just the information that user is allowed to see,

regards
Like Show 0 Likes (0)

Actions
- Re: QlikView Web Ticket not passing User ID to QVW
  
  Lorna Louw Feb 20, 2015 5:26 PM (in response to Jaime Aguilar)
  
  hello Jaime
  
  you mentioned disabling the field PASSWord in Section Access..
  
  how do you do that please...do you just omit the field in your list of fields?
  
  much appreciated
  
  Like Show 0 Likes (0)
  
  Actions
  - Re: QlikView Web Ticket not passing User ID to QVW
    
    Jaime Aguilar Feb 20, 2015 5:40 PM (in response to Lorna Louw)
    
    Yes, you just have to omit the password column in the Section Access table. So, authentication will be made based just in the user that is logged in to Windows,
    
    regards
    
    Like Show 0 Likes (0)
    
    Actions
    - Re: QlikView Web Ticket not passing User ID to QVW
      
      Lorna Louw Feb 21, 2015 3:22 AM (in response to Jaime Aguilar)
      
      Thank you so much
      
      Like Show 0 Likes (0)
      
      Actions
    - Re: QlikView Web Ticket not passing User ID to QVW
      
      Lorna Louw Feb 21, 2015 5:08 AM (in response to Jaime Aguilar)
      
      I Jaime,
      
      I've taken out Password from the SECTION Access as you advised, but now I dont see the APPS from Accesspoint.
      
      is that how they are supposed to behave?
      
      thanks
      
      Like Show 0 Likes (0)
      
      Actions
      - Re: QlikView Web Ticket not passing User ID to QVW
        
        sreeranga prasad Mar 9, 2017 4:53 AM (in response to Lorna Louw)
        
        hi lornafnb i am facing same issue when i logged through sso(Web ticket process)
        
        i am unable to see APPS(which has section access) in access point
        i am able to see other apps
        
        how you resolved it please let me know
        
        Like Show 0 Likes (0)
        
        Actions
        
        Re: QlikView Web Ticket not passing User ID to QVW
        
        sreeranga prasad Mar 9, 2017 4:56 AM (in response to sreeranga prasad)
        
        hi gaballester
        i am facing same issue when i logged through sso(Web ticket process)
        
        i am unable to see APPS(which has section access) in access point
        i am able to see other apps
        
        how to solve this
        
        Like Show 0 Likes (0)
        
        Actions
        
        Re: QlikView Web Ticket not passing User ID to QVW
        
        Lorna Louw Mar 9, 2017 6:25 AM (in response to sreeranga prasad)
        
        Hello,
        
        This was long ago hey, I can really not remember if it was solved or not.
        
        Sorry not to be of much assistance.
        
        Regards
        Lorna
        
        Like Show 0 Likes (0)
        
        Actions
    - Re: QlikView Web Ticket not passing User ID to QVW
      
      Lorna Louw Feb 23, 2015 8:12 AM (in response to Jaime Aguilar)
      
      hi Jaime....
      
      I've removed Password from the section access...
      But....section access doesnt work correctly...
      
      I have an Admin user that can override all...so I need the Password for verification, otherwise anyone can sign on as Admin....
      
      so now neither the ADMIN or a 'normal' user can log on....
      
      any ideas?
      
      thanks a ton
      
      Like Show 0 Likes (0)
      
      Actions
      - Re: QlikView Web Ticket not passing User ID to QVW
        
        Jaime Aguilar Feb 24, 2015 10:48 AM (in response to Lorna Louw)
        
        Removing the password and using NTNAME as parameter in section access, makes that you won't need a password for login to the app, but only users logged with their Active Directory (windows) account will be able to see their corresponding data. Admin, will be able to override this security, because as its name says it is an Administrator,
        
        regards
        
        Like Show 0 Likes (0)
        
        Actions
Re: QlikView Web Ticket not passing User ID to QVW

Jon Bates Jan 16, 2014 6:39 PM (in response to Jon Bates)

Thanks for your responses guys, this is starting to make more sense!

This is my current section access script (will replace this with a SQL lookup in future):

Section Access;
LOAD * INLINE [
ACCESS, USERID, Customer_ID
ADMIN, ADMIN, *
USER, customer@email.com, 500475
USER, customer2@email.com, 153488
USER, customer3@email.com, 153489
];

So Guillermo, we should be using NTNAME? I believe that a domain needs to be prefixed on the NTNAME in section access - How should the NTNAME field be formatted?

Example:

Section Access;
LOAD * INLINE [
ACCESS, NTNAME, Customer_ID
ADMIN, ADMIN, *
USER, ???????\customer@email.com, 500475
USER, ???????\customer2@email.com, 153488
USER, ???????\customer3@email.com, 153489
];

Also, are the following settings correct for this method?
Like Show 0 Likes (0)

Actions
- Re: QlikView Web Ticket not passing User ID to QVW
  
  Guillermo Ballester Jan 16, 2014 6:59 PM (in response to Jon Bates)
  
  NTNAME is the field name for QlikView, there you can store any data.
  
  for example: JPerez or jperez@company.com
  
  We have configured the Web Server as follows.
  
  We have a separate ISS Server.
  
  Like Show 0 Likes (0)
  
  Actions
  - Re: QlikView Web Ticket not passing User ID to QVW
    
    Jon Bates Jan 20, 2014 3:20 PM (in response to Guillermo Ballester)
    
    The change to NTNAME in section access solved my issue!
    
    For future reference (for anyone else trying to work this out), the url I ended up using for accessing directly to a QVW after retrieving a web ticket:
    
    http://<QVSERVER>/qvajaxzfc/authenticate.aspx?type=html&try=/qvajaxzfc/opendoc.htm?document=<QVWFILE.QVW>&host=QVS@<QVSERVER>&keep=true&back=Login.htm&webticket=<WEBTICKET>
    
    I appreciate your help Guillermo and Jaime, thanks to you both!
    
    Like Show 2 Likes (2)
    
    Actions
    - Re: QlikView Web Ticket not passing User ID to QVW
      
      Ram Repala Nov 11, 2014 11:54 AM (in response to Jon Bates)
      
      Hi Jon,
      I am facing some issue while I am implementing WEbticket method to access Qlikview document..
      Here is the details...
      I have configured out QVWS as below:
      Authentication: Always
      Type: Ntlm
      Login Address: Alternate Login page
      
      I have below urls to access the document on the server...
      
      Loadbalancer one is:
      
      http://<serverip>/QvAJAXZfc/AccessPoint.aspx?open=&id=Customer%7CCUSTOMER%2FCUSTOMER_LERG.qvw&client=Aja
      
      Actual one is:
      http://<serverip>/QvAJAXZfc/opendoc.htm?document=CUSTOMER%2FCUSTOMER_LERG.qvw&host=Customer
      
      I was succesfull getting the webticket form above server, then I am trying to redirect to url as you mentioned above..
      Then I am getting just "loading....... ", but it never completed loading the page , but when I saw the view source, I could see that all the html content..
      
      Please could tell, am I missing something else.
      
      Your help is really grateful to me and appreciated.
      
      Thanks,
      
      Like Show 0 Likes (0)
      
      Actions
    - Re: QlikView Web Ticket not passing User ID to QVW
      
      Lorna Louw Feb 20, 2015 5:39 PM (in response to Jon Bates)
      
      hi Jon
      
      I'm having exactly the same challenge as you were with this one...
      
      after reading Guillermo's post...my understanding is that the NTNAME field can hold ANY data...i e lets say the user logs in on some site with a username (eg User1) and the webticketing thing is then done...in Section access you will still use NTNAME and that will contain that User1.
      
      am I understanding this correct?
      
      thanks!
      
      Like Show 0 Likes (0)
      
      Actions
Re: QlikView Web Ticket not passing User ID to QVW

rakhi agrawal Oct 6, 2014 11:43 AM (in response to Jon Bates)

Hi,
I am having some issues when implementing Web Ticket. I am using membership database to authenticate user in My Web application. Then I am generating tickets and creating URL to redirect to my qlikview document. I need to know if need to change directory service connector to configurable ODBC to make it work.

Thanks.
Like Show 0 Likes (0)

Actions
Re: QlikView Web Ticket not passing User ID to QVW

Ramy Mansour Nov 14, 2014 11:05 AM (in response to Jon Bates)

One of the caveats to watch out for is that everything dealing with security is evaluated as UPPERCASE.

So when implementing the security script, make sure to use the UPPER() function to encompass the ingested fields
Like Show 0 Likes (0)

Actions