To enable Custom Users and Groups open QlikView Enterprise Management Console (QEMC) and go to the tab System.
Expand the Directory Service Connectors section in the left pane on the Setup-tab.
Expand your DSC and select Custom Directory.
If you don't see any Users-tab in the right pane, go to the General tab (in the right pane) and press the green plus-sign to add a new Custom-path by pressing the GetDefault-icon.
Press Apply and the Users-tab should be visible.
The repository for Custom Users will be written to the CustomDataDirectory.xml file in C:\Documents and Settings\All Users\Application Data\QlikTech\DirectoryServiceConnector folder.
Select the User-tab and proceed adding users and groups.
Once done, expand the QlikView Web Servers section and select your QlikView Web Server (QVWS).
In the right-pane go to the tab AccessPoint.
Change Authentication to "Login".
Set the Login address to /qlikview/login.htm.
Expand the QlikView Servers section in the left pane and select your QlikView Server (QVS).
Go to the Security-tab in the right pane and change Authorization from NTFS authorization to DMS authorization.
Press Apply (this will restart your QVS).
Open Internet Explorer and go to http://site/qlikview. You should be redirected to the login page.
Logins are case sensitive, so be sure you type the user exactly as you created it in the Users tab of the DSC.
Note: if running Windows Server 2008 and having difficulties when distributing to Custom Groups do the following:
- Logon to the server with the domain account running QlikView Server
- Restart QlikView Server from Windows Services
That was very informative. But in our case, we are going to develop our own portal to display QVWs. So dou you have any idea how we can set up these custom users programatically. Is there any APIs available to create/delete custom users programatically.
One way we thought of implementing it was by updating the CustomDataDirectory.xml file directly using the vb.net code, but no sure is that the right approach.
We did a similar thing with QV 8.5. We basically made our own call to QVS to get a ticket for a user and passed that ticket when opening the report. I'm not sure how to do it with QV9 (just installed SR3 and started looking at it).
With qv8.5, you can connect as an admin and request a ticket with a username only, if that user has DMS permissions he can see the report. It's also possible to manage the DMS permissions using the same API calls (basically sending xml to QVS)
Hi Bjorn, that is very helpful indeed. Even a certified QlikView Partner didn't know how to set this up properly... user access works fine, but group access using custom groups doesn't work (users do not see their documents). We're running Windows Server 2008, but the below didn't solve the issue.
Any ideas what else could be preventing the resolution of the group names?
We too found Björns instructions here as the most clear and understandable that we could find. Unfortunately it did not work either using Windows Server 2008 and with a very simple Custom User setup.
When we contacted QV Tech Support, they said it was a licensing issue, while Sales said it was a technical / configuration issue.
After solving it by skipping DMS and using Active Directory, we recently heard from QV that it was a licensing issue. We had Small Business Edition which aparently does not support DMS. So if you have the Small Business Edition (Up to 25 users), no amount of configuration should work. You need to upgrade to Enterprise Edition to be able to make use of the DMS. This was the final message we got from Qlikview, which confirmed our suspicions.
Which License version do you have?
thanks for your feedback. We do have the Enterprise Edition licensed.
We received feedback from QlikTech yesterday who stated it being a bug which will most likely not be fixed with SR3 unfortunately.
Active Directory is something we are currently looking at too - was it difficult to setup (the server manual is a bit short on this topic..)?
Assuming you already have users setup in Active Directory and the directory is exposed by LDAP (normally by default),
You just need to assign the servername in the Directory Service Connectors -> Active Directory, General Tab.
There is a label called path and in their you enter a URL to the server.
Thank you Bjorn. Although it is very, very helpful to have this list of steps in one place as opposed to it being spread throughout the manual , i was actually looking for tricks and tips, extras... For instance, Client Authentication in QVS settings can't be set to Always Anonymous, etc.
Thank you though...
I tried this but when accessing the qlikview server with internetexplorer from a computer with an other domain name is still get a popscreen for the user account and there is no way it accepts my custom users
If i access it from the localhost machine i first get the anonymous page and have to clik on login to go to the login.htm.
I would like to go directly to the login.htm page from the local host and the machine on the other domain.
"I would like to go directly to the login.htm page from the local host and the machine on the other domain."
Change the Login Login address from /qlikview/login.htm to the full URL, like http://myqvs.company.com/qlikview/login.htm. See if that helps