Problems with users from one Windows domain trying to log into a QVS in another Windows domain...

[diagonjope]

Greetings!

Basically, the situation is as follows:

• Existing QVS has been providing access to users in its own domain (call it DomA) for ever;
• Customer now needs to add QV users from another organization;
• A new AD directory connection to the IP address of the AD server in the new domain was created in the QMC (call it DomB);
• In the QMC, one can assign licenses to users from any of the two domains, the user search works OK and users are shown with the proper domain name prefix - doma\user1, domb\user2, ..., domb\userN;
• When users from DomB try to log in to QVS, they are presented the login prompt in the AP, but, after entering their credentials, the login pop-up goes back to empty asking for the credentials again - no error or warning messages are presented; and,
• Tried tracking network connections between QVS server and the AD server / DC of the DomB, but apparently there is no trace of traffic when users from the new domain try to login.

So, even though the DSC is connecting to DomB and is capable of pulling the list of users and assign QV licenses to them, are trust relationships between DomA and DomB mandatory for user authentication?

Please advise.

++José

[Vegar]

Check your server license limitations. I know that the small business server have a limitations of using only one AD. 

If no such limit then consider making domA trust domB. See a similar post on this topic here:  Problem in Active Directory login from different domains

[Maria_Halley · Accepted solution]

@diagonjope 

Yes, trust relationships between DomA and DomB mandatory. I think this article will be helpful. 

https://community.qlik.com/t5/Official-Support-Articles/Is-it-possible-to-set-up-multiple-Active-Dir...

[diagonjope]

Thank you @Vegar!

++José

[diagonjope]

Thank you @Maria_Halley !

++José

[BawejaMedia]

In this scenario, trust relationships between DomA and DomB are not mandatory for user authentication within the QlikView Server (QVS). However, ensure that proper network connectivity exists between the QVS server and the Active Directory (AD) server in DomB, and verify that the AD configuration in the Qlik Management Console (QMC) accurately reflects DomB's domain settings. Additionally, double-check the user permissions and security settings within QVS to ensure proper access for users from both domains. If issues persist, consult QlikView's support documentation or contact their technical support for further assistance. Also, check out baweja Media!!