Skip to main content
Topics#Tableau ServerFrage von Romain Joray
Romain Joray fragte in #Tableau Server
2. Okt. 2024, 13:32

Automatic Logins to Tableau Server

I have been trying to enable Automatic Logins to Tableau Server for our users but have found no success.

 

This is a Windows 2022 server, running 20242.24.0910.0334. ( Latest version as of today)

Clients are using W11 + EDGE, the Tableau Server is in the Intranet Zone, Automatic logins are enable in Internet Options.

 

The Identity Store is Active Directory. All DNS and reverse DNS recors a re correct.

 

I have tried using SSPI, Kerberos, without and without SSL. I always end up with a login dialog.

 

How can I debug the possible causes ?

 

I have gone through most of the Tableau Support Webpages, which have varying degrees of solutions...

1 Antwort
  1. Emeric LE SAULNIER DE SAINT JOUAN (M2)
    2. Okt. 2024, 17:27

    Hi @Romain Joray​, SSPI and Kerberos automatic login are way different forms of windows integration.

    Let's focus on SSPI here if you don't mind because it is simpler and works in most cases directly out the box. Kerberos configuration issues (meaning UPN / SPN / Keytab / Domain Controller troubleshooting etc...) is very specific and would deserve its own thread.

    You seem to have already researched the topic pretty well with Intranet Zone / Trusted zone and "Automatic logins" in browser, as they are the most classic use cases.

    So the first thing you should try is set the vizportal process in debug log, reproduce and check the vizportal logs for error message and insights.

    tsm configuration set -k vizportal.log.level -v debug
    tsm pending-changes apply

    This Tableau process is dealing with the authentication mechanism.

    So that should keep started. For your understanding, the so-called "SSPI" is the NTLM Windows security protocol in case you want to read more about it.

    First question: How do you access your Tableau Server instance ? Through a reverse proxy or load balancer ? If so, that's not going to work with SSPI and you need to use Kerberos. SSPI would work with a DNS alias though.

    If you are accessing Tableau Server through Hostname or DNS Alias, then some additional directions / questions:

    • Does your Windows Server joined on the same domain as the end users ?
    • Do you have a Tableau Server Run-As default to NetworkService or do you have a dedicated AD Service Account ?
    • How does your domain structure looks like ? Server vs Users, meaning you have simply one root domain, or also subdomains and trusted domains where users are ?
    • How your domain FQDN and NETBIOS looks like ? Is it like TECH.MYCOMPANY.COM and TECH\ ? Or your NETBIOS is not directly related to your FQDN ? How many letters is your NETBIOS ?
    • Does your Windows Server host has several network interfaces ?
    • Do the end users access Tableau Server through a proxy or vpn ?

    I must admit, I have yet to test Windows Server 2022 with TS v.2024.2. I hope there is no problem there. Have you also tested with another browser ? I have seen cases where company domain policies were interfering with Edge. That's all for today :)

Antwort schreiben...
0/9000