7 Replies Latest reply: Aug 22, 2012 10:34 AM by Bill Britt RSS

    Access denied. server has no user CAL for this account. AD group

    Dror Svartzman

      Hi,

       

      Problem:

      User logged in under AD group cannot gain access to the document.

       

      the following error appears: "Access denied. server has no user CAL for this account"

       

       

      QVS settings:

      • Qlikview SBS  11. 11.0.11282.0
      • No publisher installed
      • Licence: 12 USER CALL allocated / 12 assigned
      • NTFS authorization (Windows controls file access)
      • Identification : By user name

       

      Scenario:

      1. User attempt to login to accessPoint using accouny DOMAIN\Mickeym
      2. Mickeym belongs to AD group called DOMAIN\Disney land
      3. There is Named CAL assigned to DOMAIN\Disney land
      4. Mickeym managed to pass the login page to the accesspoint (authentication succeed)
      5. Access to Document A is protected using Section application

      here's the code

      //Domain ID
      LET vNTDOMAINID = 'S-1-5-21-4212263732-3897499842-205464733';
      
      
      tmpSectionAccess:
      CrossTable(Document, Access, 3)
      LOAD NTNAME, 
           ACCESS, 
           '$(vNTDOMAINID)' AS NTDOMAINSID,
      
      FROM
      [User Access.xlsx]
      (ooxml, embedded labels, table is Blad1)
      ;
      
      Section Access;
      
      
      NoConcatenate
      LOAD
                 UPPER(ACCESS) AS ACCESS, 
                 UPPER(NTNAME) AS NTNAME,   
               UPPER(NTDOMAINSID) AS NTDOMAINSID
      RESIDENT tmpSectionAccess
      WHERE Document = '$(vDocument)'; 
      
      
      Section Application;
      
      
      DROP TABLE tmpSectionAccess;
      
      

       

      User Access.xlsx

      NTNAMEACCESSA
      DOMAIN\adminADMINx
      DOMAIN\QlikviewADMINx
      DOMAIN\Disney landUSERX

       

      Any Idea's?

       

      Thanks in advance,

       

      Dror