Kerberos authentication
Qlik NPrinting supports the use of Kerberos and NTLM. If you want to use Kerberos authentication, you need to ensure that browsers used to access Qlik NPrinting are configured to support Kerberos.
Enabling Kerberos authentication in Qlik NPrinting
To enable Kerberos authentication in Qlik NPrinting, you must edit the webengine.config file installed by default with Qlik NPrinting Server.
Do the following:
- Open the webengine.config file located in:
%Program Files%\NPrintingServer\NPrinting\WebEngine\webengine.config
- Uncomment the following line
+ <!--<add key="win-auth-use-negotiate" value="true" />-->
-
In the domain controller, for the domain where Qlik NPrinting is installed, add the required SPN for the service and users.
This enables Negotiate authentication, that requires Kerberos authentication. If Kerberos authentication is not available, it will fall back to NTLM if NTLM is enabled. To disable the fallback to NTLM, you must configure it in the domain controller.