16 Replies Latest reply: Aug 12, 2013 4:33 AM by ervin jafari RSS

    Qlikview 10 WebParts and handling Multi-Hop security.

    jonwilks

      We have a project based around using Sharepoint 2010 and using the WebParts to display Qlikview data on various pages throughout the site. Our main requirement for the parts is to display charts but depending upon which page they are on we would pre-filter the data using JavaScript to hook into the API.

      Our main issue with version 9 was the multi-hop authentication issue. This is where we have Sharepoint on one server and Qlikview on another. Using NTLM, when the client browser connects to Sharepoint, then Sharepoint calls over to Qlikview, NTLM cannot do the impersonation, therefore Qlikview sees the call as being anonymous.

      We could solve this using Kerberos, but Kerberos always seems to be a nightmare to configure and as we are using a 3rd party hoster this might not be an option.

      As we were using Sharepoint 2010, Qlikview would only support the upcoming version 10, which luckily was adverstised as solving this multi hop issue by hosting the QvAjaxZfc in a virtual directory alongside sharepoint whihc could then handle the authentication through to Qlikview.....Fantastic...the solution to all of our problems.

      However, after working our way through the new Qlikview 10 documentation, it does indeed state in many places that we can host the QvAjaxZfc directory on Sharepoint and this solves the Multi-Hop issue, but nowhere does it explain how you set it up and configure it.

      We have spent days trying to set up QV10 for this scenarion with no success, and unfortunately, the Qlikview support team refuse to help as this is not a standard install (maybe this should not have been documented as such in the product literature !).

      In addition to this, the Qlikview web parts seem to have been re-written and the Javascript used for version 9 no longer works. There is probably a new Javascript calling method, but as yet I have been unable to find anything on this.

      Is there anybody out there who has used QV10 web parts who can offer any suggestions, help, advise or at least some soothing words to lower my frustration with the new product...

      Cheers.

       

       

       

       

        • Qlikview 10 WebParts and handling Multi-Hop security.
          Steve Jenkins

          Have you gotten anywhere with your Sharepoint issues? We are also trying to set-up Qlikview web parts in Sharepoint 2010. We currently have a trial version and went through a lot with QV support to get it installed. We have the same desire to filter reports with particular parameters on certain pages. I also noticed that if you make a selection on one Sharepoint page, it will filter results on another, which is not always desirable. You would need away to clear those selection as you can do with Actions in QV tabs.

          Sorry I can't offer help but am curious to know if you made progress before purchasing product.

           

          Thanks,

           

          Steve Jenkins

           

          • Qlikview 10 WebParts and handling Multi-Hop security.

            Hm;

            Have you checked the Proxy-Setting that is described in the documentation:

            "The SharePoint dialog lets you enter the url to your SharePoint web application where you wish to use the QlikView Web Part. Make sure to enable the Use Proxy setting if you have SharePoint and the QvAjaxZfc folder on different computers. If you want an automatic installation, you must check the Install check box. Click on the question mark to read more about the stsadmin commands that are"

            From what I understand is, that in QV10 you should use this proxy if QVS does not run on the same machine as Sharepoint.

            You are right, Authentication in QV10 is redeveloped and now uses /QvAJAXZfc/Authenticate.aspx.
            The problem that now appears is not only NTLM-multihop, but Cross Domain AJAX calls (from your Sharepoint-Server to the QvAjaxZfc-Folder on your QVS) --> therefore the proxy was introduced!

            Roland

             

            • Qlikview 10 WebParts and handling Multi-Hop security.
              Ashfaq Mohammed

              HI jonwilks

               

              Did you resolve this issue?

              If so, can you please guide me how to configure it. I have the same scenerio as yours.

              Your Inputs will be Helpful.

               

              Regards

              ASHFAQ

              • Qlikview 10 WebParts and handling Multi-Hop security.
                Ashfaq Mohammed

                HI All

                Did any one succeed in the integration.

                 

                Can some one share with us the steps you followed.

                 

                Regards

                ASHFAQ

                  • Qlikview 10 WebParts and handling Multi-Hop security.
                    Ashfaq Mohammed

                    Dear all,

                    Can some 1 help me in integrating qlikvie 10 with sharepoint wss 3.0

                    Its very much urgent for me

                    Regards

                    ASHFAQ

                      • Qlikview 10 WebParts and handling Multi-Hop security.
                        Björn Wedbratt

                        Easiest way would be to:

                        - Install QVWS on the front-end Sharepoint (note: NOT IIS Support, but the actual QlikView Web Server!). Server OS like Win 2003/2008 will handle port sharing so you can host multiple applications sharing the same port (in this case port 80 for HTTP). You can use the same domain account used when installing the back-end QVS (domain\qvservice or similar).

                        - Make sure port 4747 is open to the back-end QVS so QVWS can communicate with QVS.

                        - Once QVWS is installed on Sharepoint (and started) you should be able to connect to it using http://sharepoint:4750/qtws.asmx. Try accessing the URL in IE from the back-end QVS. If prompted for credentials, add the site to Local Intranet Zone

                        - Add the front-end QVWS in the QEMC on the back-end QVS.

                        - Check Accesspoint is working on Sharepoint (http://sharepoint/qlikview)

                        Now you have a front-end QVWS connected to a back-end QVS

                        - Start installation of Webparts, point to the local QVWS (http://sharepoint/QvAjaxZfc). Don't use proxy*

                        * If you have the sharepoint site configured to use a different port (like http://sharepoint:19100 or similar) you need to select to proxy, even though QVWS and Sharepoint are hosted on the same machine. From IE:s point of view http://sharepoint:19100 and http://sharepoint is NOT the same site, i.e. not the same security domain will apply and you will get a XSS warning if you don't proxy.

                        Proxy-settings can be changed after the installation by looking into the web.config file for the sharepoint site.

                        The above is the easiest way, but requires installation of QVWS on Sharepoint. As stated above, if this is not an option, you need to dig into Kerberos delegation.

                         

                    • Re: Qlikview 10 WebParts and handling Multi-Hop security.
                      Ravi Mudigonda

                      I have a similar issue with QV 11 and Sharepoint. I would appreciate if you can let me know how you resolved.

                       

                      We have QV and Sharepoint on different server with same AD. We have Acess Point in Sharepoint and QV server and they work fine but have issues with the webpart.

                        • Re: Qlikview 10 WebParts and handling Multi-Hop security.
                          ervin jafari

                          Dears,

                          I have a same problem I have SharePoint and qlikview server in two different server and I could successfully installed qlikview webpart with proxy in sharepoint server and config web part to show the qlikview object and I could see the result in the sharepoint server with user A successfully and all done successfully but I could not see the result in other computer with same user (user A) and see the error "failed to open the document, you don’t have access to this document",

                           

                          Environment specific:

                           

                          Qlikview server on server X

                          SharePoint on server Y

                          Qlikview webpart license Yes

                          User A has access to the document and object

                          Document and object available in qlikview access point from different computer for user A

                           

                          Please share your experience

                          Best Wishes,