I wonder if the web service logs would contain anything (session logs wouldn't since the session doesn't actually start). By default in QV11, the web service log verbosity is set to High (QMC >> System >> QlikView Web Servers >> General). Check to make sure it's set to high in your environment. Then try accessing the AP from the problem machine. Wait for some log entries to appear (C:\ProgramData\QlikTech\WebServer\Log) and then please post!
The DSC log might also provide something useful. Go to QMC >> System >> Directory Service Connectors >> General, and change the Logging Level to Debug Logging. Post the DSC log entries too (C:\ProgramData\QlikTech\DirectoryServiceConnector\Log).
After changing the log settings, those are the generated files.
At 20120519.txt, the line:
19/05/2012 08:24:03.2296275 Information (ActiveDirectory.ActiveDirectoryProvider) query: '(&(sAMAccountName=U2411709)(&(!(objectclass=computer))(objectGUID=*))(|(&(objectCategory=group)(groupType:1.2.840.1135220.127.116.113:=2147483648))(|(objectClass=User)(objectClass=person))))'
is generated for the user U2411709 (the user that has the problem). Therefore, a successfull login using another user named U2498410 did not generate any entry.
It seems that there's a problem between QlikView and Active Directory. Nevertheless, the network guys says that since MS Windows point of view there are no problems.
I wonder if there is some temp file inside QlikView that can fix this by removing it, so force QlikView to manage U2411709 as if it was the first time to login.
Thanks for the effort!
Performance and Event logs aren't really that useful. Please post the DSC and Web Service logs. Please post the full log file for DSC and as much of the web service one as possible (they file size of web service tends to get quite large). The line that you posted above isn't a problem; it's just informational.
I think that attached all the existing logs. In the attached images (qvDcsLogs.JPG, qvsLogs.JPG, qvwsLogs.JPG) yu can see all the log options that I checked.
The file named 20120521.txt contains the web services logs (or at least this is my belief).
There is an entry related to the issue:
21/05/2012 17:04:39.8788147 Error Request failed: La clave proporcionada no se encontrÃ³ en el diccionario.
Take notice that "La clave proporcionada no se encontrÃ³ en el diccionario" means something like "The provided key was not found in the dictionary". Do not know if the English message is this but must be seemed.
Something really curious is that after changing the logging settins to increase verbosity I found that the user could work during some minutes.
Thanks in advance,
Have been trying to fix the issue but it is still to be fixed.
I wonder if there is any way to free all related user information or at least all the existing CALs. If I stop all Qv services I can remove the pgo files and this frees any CAL or at least this is my belief, but ...is there an other license file to remove?
Are licenses stored in any oter place (temp file, registry, ...)?
I assume that perhaps this is not related to the issue , but I want to avoid uninstalling all and installing again!
As far as I know, Windows Password Key maybe the good Windows password resetting tool. So if you failed to reset Windows password, then to unlock your locked machine goes to use a professional Windows password resetting to like Windows Password Key Professional. You can Google Search Windows Password Key for more details. You may download it from http://www.lostwindowspassword.com
Follow this guide to recover windows password.
1.Boot the machine with your Windows Repair CD.
2.Select "Repair Mode".
3.Use "System Restore" to set Windows back to a point before you changed the password.
4.Log on with your old password.
5.Plan ahead a little and create, test and document a spare admin account, same as you have a spare house key for emergencies.
If you have no reset disk, this is a better way for you. What's more, do you have another admin account on your windows? Login it and you can reset other user accounts password easily.
What's more, currently there is a best way for Windows password recovery, it only need a bootable CD/USB flash drive.
This is true. Therefore the Windows user account is running properly in the network.
Finally I have a not too much nive workaround: I have another windows account that I used for testing purposes. I gave it the same access rights to the dashboards' folders. So the user can use http://myhost/qlikview/login2.htm instead of http://myhost/qlikview.
Using http://myhost/qlikview in (this is usual) the login is automatic using the Active Directory credentials but going to: http://myhost/qlikview/login2.htm he/she can use the additional MS Windows network account. He/she has the access the he/she needs and I do not have to spend more time on this strange issue.
I had a very similar issue about 4 years ago with one user, but if my memory serves me correctly we narrowed our issue down to an problem with roaming profiles after the user had changed their windows password from a remote loacation. In the end I think our IT ended up just recreating the user's account and the issue was resolved.
This might be an area to investigate.
here's a curious issue. There is a company that has both QlikView server and access point v.11. It all was running properly. The users are taken from a MS Windows Active Directory and they get CALs. Right.
Therefore, there is a user that someday changed the windows password having a session opened. Since this change she cannot login inside access point. The login page remains stalled (loading document...) and she never really enters.
If I open all the existing logs there's no information about the attempt to log-in. Therefore, about one hour later I can see that a CAL was dilevered to the user.
From her machine other users can log-in, so it is not a machine issue.
The user can log-in the MS Windows domain.
I have changed the pasword to the initial one, removed all licenses, atc.. and the issue it is still to be fixed.
Could you please help me out??