bohua / nprinting-sense-on-demand

NPrinting On-demand extension for Qlik Sense
MIT License
10 stars 13 forks source link

authentication issue #5

Open ekech opened 6 years ago

ekech commented 6 years ago

First of all: great extension! But: I am facing the following problem: My only "real" windows domain user is the admin ("dcserver\qliksrv"). On Qlik Sense side all other users are from a Novell directory via LDAP. On NPrinting side I have created some users equivalent to the Sense LDAP users. But I can't assign \ because NPrinting can't verify the LDAP users. When I am opening my test app with your extension on Sense, I am getting asked for credentials for the NPrinting connection. ==> NPrinting username/password does not work (triple checked) ==> email/password does not work (triple checked) ==> using the admin user with domain and username and his password works. But this will work only for people knowing this credentials (which I can't provide to the normal users)

Is there a way to work around this authentication problem?

best regards, Edgar

bohua commented 6 years ago

Hi Edger,

Thanks you for your message. And sorry for a late reply. The NPrinting API is currently supporting NTLM login only as I noticed. This will require a domain user to be recognized in NP when sending in on-demand requests.

I will have a look in latest API doc v2 and see if it supports email login now. Otherwise, a possible solution is for me to add a user credential configuration in the extension for you. so all users will share your admin account while you only need to input once your username and pass in when creating the on-demand extension in your app.

Bohua Li

在 2017年9月14日,下午2:19,ekech notifications@github.com 写道:

First of all: great extension! But: I am facing the following problem: My only "real" windows domain user is the admin ("dcserver\qliksrv"). On Qlik Sense side all other users are from a Novell directory via LDAP. On NPrinting side I have created some users equivalent to the Sense LDAP users. But I can't assign because NPrinting can't verify the LDAP users. When I am opening my test app with your extension on Sense, I am getting asked for credentials for the NPrinting connection. ==> NPrinting username/password does not work (triple checked) ==> email/password does not work (triple checked) ==> using the admin user with domain and username and his password works. But this will work only for people knowing this credentials (which I can't provide to the normal users)

Is there a way to work around this authentication problem?

best regards, Edgar

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub, or mute the thread.

oktaypamuk commented 6 years ago

Hi Bohua,

Great extension. I have a small question relating to your statement about "adding auser credential configuration in the extension". Is there a timeline you plan to put this in the extension and update the extension?

Thanks in advance.

Regards,

Oktay

bohua commented 6 years ago

Hi Oktay,

Sorry for late reply. So far I have not got a time to do it and it seems quite difficult to do an non-NTLM login to NP API. I need to confirm with Qlik team in order to get more ideas on this. Unfortunately. :)

Please feel free to let me know about your challenges and thoughts. Would appreciate any ideas!

Thanks,

Bohua Li

在 2017年11月20日,下午3:33,oktaypamuk notifications@github.com 写道:

Hi Bohua,

Great extension. I have a small question relating to your statement about "adding auser credential configuration in the extension". Is there a timeline you plan to put this in the extension and update the extension?

Thanks in advance.

Regards,

Oktay

— You are receiving this because you commented. Reply to this email directly, view it on GitHub, or mute the thread.

oktaypamuk commented 6 years ago

Hi Bohua,

OK, thanks for the clarifications.

Chears,

Oktay Am 28.11.2017 um 10:32 schrieb Bohua Li notifications@github.com<mailto:notifications@github.com>:

Hi Oktay,

Sorry for late reply. So far I have not got a time to do it and it seems quite difficult to do an non-NTLM login to NP API. I need to confirm with Qlik team in order to get more ideas on this. Unfortunately. :)

Please feel free to let me know about your challenges and thoughts. Would appreciate any ideas!

Thanks,

Bohua Li

在 2017年11月20日,下午3:33,oktaypamuk notifications@github.com<mailto:notifications@github.com> 写道:

Hi Bohua,

Great extension. I have a small question relating to your statement about "adding auser credential configuration in the extension". Is there a timeline you plan to put this in the extension and update the extension?

Thanks in advance.

Regards,

Oktay

— You are receiving this because you commented. Reply to this email directly, view it on GitHub, or mute the thread.

— You are receiving this because you commented. Reply to this email directly, view it on GitHubhttps://github.com/bohua/nprinting-sense-on-demand/issues/5#issuecomment-347465062, or mute the threadhttps://github.com/notifications/unsubscribe-auth/AgROEFPe4YMN5FH5ChZ_z-HGVhzH9tRUks5s69NIgaJpZM4PXfbZ.

ani072018 commented 6 years ago

Hi Bohua,

Thanks very much for the excellent extension. Really appreciate your effort. I have the same problem as Edger. As per your suggestion " Otherwise, a possible solution is for me to add a user credential configuration in the extension for you. so all users will share your admin account while you only need to input once your username and pass in when creating the on-demand extension in your app. ", Can you please tell me if you already implemeted this? I will provide one service account userid and password, so that whenever user will qlik on that extension it will not ask for any userid and password, it will pass through automatically.

Can you please help me. Thank you very much in advance.

Thanks Anirban

bohua commented 6 years ago

Hi @ani072018

Sorry for a really late reply. The NTLM authentication is a bit tricky to hack at the moment. And it seems like it's not a way Qlik wishes so the feature might not be in place until a proper API provided by Qlik team. Unfortunately!

Regards, //Bohua

vsalesa commented 6 years ago

Hi bohua ir seems that the withcredentials crossdomain auth is not working properly in my development. The usar has to authenticate in nprinting - nprinting api every time reboots a computer or reset browser settings . Any ideas?

bohua commented 5 years ago

Hi Victor,

Frankly speaking, I have no idea about it.

Do you mean: you will have a popup in browser asking you to sign in when landing a Qlik Sense app-sheet that contains the on-demand extension?

It hasn’t come up with similar behavior yet from other clients. Which browser/version are you using? And it sounds like an NTLM caching issue.

Regards, //bohua

On Sep 7, 2018, at 5:06 PM, Victor notifications@github.com wrote:

Hi bohua ir seems that the withcredentials crossdomain auth is not working properly in my development. The usar has to authenticate in nprinting - nprinting api every time reboots a computer or reset browser settings . Any ideas?

— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/bohua/nprinting-sense-on-demand/issues/5#issuecomment-419469260, or mute the thread https://github.com/notifications/unsubscribe-auth/ADQoL3eSS4laoqCDdXLUYwsWKjhHvd8dks5uYottgaJpZM4PXfbZ.

vsalesa commented 5 years ago

Hi Franklin: In my case I'm using chrome browser 68.0.3440.106 (64 bits). And the ntlm popup, yes but not always, some times is failling with no user information and when you go to the chrome developer tools you see that 403 forbidden. Basically what I've detected is that credentials transfer is not working properly. In my case the destination nprinting server has no signed certificate installed and I guess that could be the reason. The result is that I have to paste the Nprinting api ntlm url, then fill the credentials and log-in after a computer reboot,browser cache deleted..... etc. I investigated with chrome browser and what I get is a 403 - Forbidden if I don't do that although I have a loged-in domain user that is already created in nprinting side. Makes sense?

Victor

“El pesimista se queja del viento. El optimista espera que cambie. El realista ajusta las velas” William George Ward

El mar., 11 sept. 2018 a las 10:48, Bohua Li (notifications@github.com) escribió:

Hi Victor,

Frankly speaking, I have no idea about it.

Do you mean: you will have a popup in browser asking you to sign in when landing a Qlik Sense app-sheet that contains the on-demand extension?

It hasn’t come up with similar behavior yet from other clients. Which browser/version are you using? And it sounds like an NTLM caching issue.

Regards, //bohua

On Sep 7, 2018, at 5:06 PM, Victor notifications@github.com wrote:

Hi bohua ir seems that the withcredentials crossdomain auth is not working properly in my development. The usar has to authenticate in nprinting - nprinting api every time reboots a computer or reset browser settings . Any ideas?

— You are receiving this because you commented. Reply to this email directly, view it on GitHub < https://github.com/bohua/nprinting-sense-on-demand/issues/5#issuecomment-419469260>, or mute the thread < https://github.com/notifications/unsubscribe-auth/ADQoL3eSS4laoqCDdXLUYwsWKjhHvd8dks5uYottgaJpZM4PXfbZ .

— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/bohua/nprinting-sense-on-demand/issues/5#issuecomment-420197321, or mute the thread https://github.com/notifications/unsubscribe-auth/AAsevX5z4UKwhxIPqzhgEy-4e5IyGq4oks5uZ3jcgaJpZM4PXfbZ .

TelecomAnin commented 5 years ago

Hello,

I want to install the nprinting-sense-on-demand extension of my qlik sense server. But, I do not know if I must have a license from Qlik in order to configure the extension correctly. Should I install the Nprinting product on my machine? Thanks for getting back to me.

Best regards,

amien90 commented 5 years ago

Sorry for asking in this threat, but using saml authentication is also not possible right to use on-demand?

Pedrocardo8 commented 2 years ago

Hello, When I try to use the extension I get a form to login using ntlm, is there any way to automatically login using the qlik sense crednetials? Because the qlik sense server and the nprinting server have the same windows user, any way I could pass the authentication automatically?