4 Replies Latest reply: Dec 11, 2017 6:36 AM by Tanvi Madan RSS

    How to authenticate ldap users to allow them to login into QSHub?

    Roberto blank

      Hello everyone,

      I am setting up a Qlik Sense installation to learn and discover its features.
      I am having trouble allowing users to authenticate and log into QSHub.
      I set up an ldap connector, and I successfully uploaded my ldap users to QMC, I can see all the users in the users panel of the console.
      I realized that you can't authenticate via QMC or QH itself, but I didn't understand how to authenticate them.
      I tried to give an user a token, but it didn't work.
      I created a virtual proxy with different type of authentication methods, I firstly tried with ticket (but it seems a windows-related feature, so I gave up), and I am now trying header authentication, but I honestly don't know what to do.

      I want some users from my ldap to be able to login into Qlik Sense Hub with their ldap credentials (and if that's not possible I just want them to be able to authenticate and log into the hub being able to track their activity).
      What do I have to do? Please explain as much detailed as possible. A step by step guide would be great.

      NOTE that I do not have access to the internet from the server where Qlik Sense is installed on.

        • Re: How to authenticate ldap users to allow them to login into QSHub?
          Vincenzo Esposito

          Ok to create a virtual proxy and use the ticket authentication, but you also need to create an authentication module which verify the user identity this project on branch can help Qlik Branch

            • Re: How to authenticate ldap users to allow them to login into QSHub?
              Roberto blank

              That's not enough detailed for me, could you guide me into the configuration of "QlikLogin"?
              I downloaded it, properly configured the QMC part.
              I created a virtual proxy called "ldap login page"
              Attaching a screenshot showing vp settings:


              8084 is the port configured in "config.js"

              Here another screenshot showing how I am exporting certificates:

              No password set, nor secret key.
              Copied all the exported files into the folder.


              I attached the virtual proxy to the only node I have (central).


              The problem probably comes from the "config.js", I am not sure about the params I entered.. here another screenshot:



              I launch "QlikLogin.bat" and enter in my browser's URL "https://oralab205w(computername):8084" and I can succesfully see the login page: https://imgur.com/4RA7Krb
              But, no matter which credentials I use, I get rejected with the following error:


              TypeError: options.url ^ options.socketPath (String) required  
              at Object.createClient (C:\Users\qlik\Downloads\Qliklogin-master\node_modules\ldapjs\lib\client\index.js:47:13)
              at C:\Users\qlik\Downloads\Qliklogin-master\indexauth.js:79:22  
              at Layer.handle [as handle_request] (C:\Users\qlik\Downloads\Qliklogin-master\node_modules\express\lib\router\layer.js:95:5)

              at next (C:\Users\qlik\Downloads\Qliklogin-master\node_modules\express\lib\router\route.js:131:13)

              at Route.dispatch (C:\Users\qlik\Downloads\Qliklogin-master\node_modules\express\lib\router\route.js:112:3)

              at Layer.handle [as handle_request] (C:\Users\qlik\Downloads\Qliklogin-master\node_modules\express\lib\router\layer.js:95:5)

              at C:\Users\qlik\Downloads\Qliklogin-master\node_modules\express\lib\router\index.js:277:22

              at Function.process_params (C:\Users\qlik\Downloads\Qliklogin-master\node_modules\express\lib\router\index.js:330:12)

              at next (C:\Users\qlik\Downloads\Qliklogin-master\node_modules\express\lib\router\index.js:271:10)
              at C:\Users\qlik\Downloads\Qliklogin-master\node_modules\body-parser\lib\read.js:129:5

              Am I missing something with node.js or ldapjs?
              Can someone further explain me what am I doing wrong and what can I do to make it work?