Zach, I would start with the http logs on the server. Were you able to open a view which has embedded credentials with any problem?
I just connected to our network and was able to open the URL just fine( however, it's an embedded credentials workbook). We use 8.1.3 with SSL.
Thanks for the reply Vikram. All our workbooks have embedded data source credentials. When I try to access one of the views from my iPhone after connecting via VPN, e.g. https://tableau.broadinstitute.org/views/BroadMapTest/BroadMap, I get prompted for credentials, nothing works. My only option is to enter blank credentials, get the error, then press the link that says login as guest.
I checked the access.[date] file in C:\ProgramData\Tableau\Tableau Server\data\tabsvc\logs\httpd\. When I enter my credentials and get rejected I see:
22.214.171.124 - - [03/Dec/2014:09:33:57 -0500] 443 "GET /views/BroadMapTest/BroadMapMobile HTTP/1.1" "126.96.36.199" 302 182 "-" 2340075 VH8fVcCoxDEAABb8ReoAAADG
188.8.131.52 - - [03/Dec/2014:09:34:00 -0500] 443 "GET /ntlm/auth?destination=%2Fviews%2FBroadMapTest%2FBroadMapMobile&guest=true HTTP/1.1" "-" 401 3557 "-" 0 VH8fWMCoxDEAABb8ResAAADG
184.108.40.206 - - [03/Dec/2014:09:34:15 -0500] 443 "GET /ntlm/auth?destination=%2Fviews%2FBroadMapTest%2FBroadMapMobile&guest=true HTTP/1.1" "-" 401 3557 "-" 15600 VH8fZ8CoxDEAABb8RewAAADG
When I enter blank credentials, then login as guest I see:
220.127.116.11 - - [03/Dec/2014:09:36:13 -0500] 443 "GET /ntlm/auth?destination=%2Fviews%2FBroadMapTest%2FBroadMapMobile&guest=true HTTP/1.1" "-" 401 3557 "-" 15600 VH8f3cCoxDEAABb8Re4AAADG
1. problem confirmed as a bug with NTLM authentication from iOS8 Safari:
2. workaround for non-guest views (simpler workaround than described in KB article above):
first login to server via https://<TableauServerName>/auth, then navigate to the view
3. workaround for guest views:
add ?:embed=yes to URL to bypass login, e.g. https://tableau.broadinstitute.org/views/BroadMap/BroadMapMobile?:embed=yes
I am glad to hear you were able to find the Knowledge Base article as well as additional workarounds. Our engineering team has confirmed this behavior is related to a known issue in iOS8 (not Tableau Server).
After upgrading from iOS7 to iOS8, iOS devices cannot log in to web server using SSL and SSPI. As described by many, many users:
Steps to Reproduce:
Upgrade iPad to iOS 8, including 8.1.1
Navigate to website (Apache, SSL & SSPI)
Enter credentials when prompted
Login succeeds (as it did and still does for iPads running iOS 7.x)
Prompted to provide credentials again. Repeats until canceled.
The Apple Radar ID for this iOS8 issue is 18460080. Users who are impacted by this behavior can go to Apple's Developer Site and inquire about the status of a fix.
We will update the Knowledge Base article with this new information, as well as the additional workarounds. Let us know if you have any additional questions.
Hi Calvin, Unfortunately Apple does not let to look into other developers' bug. Is there any resolution did Apple mentioned on this. Do they have still bug opened !?
Hi Sidda BG - as of today, Apple still has Radar ID 18460080 open.
If you are an Apple developer, you can file a duplicate bug on this issue using Radar; Apple will close your report as a duplicate, but give you visibility to the status of 18460080. The status is not at all detailed, it just looks like this:
Thanks for posting this and providing follow-up. I was having this issue beta testing our Mobile (iPad) platforms with Tableau 9 and saw similar behaviors. Dan Becker Thanks for providing the Apple bug info.
Love the forums!
Not fixed in iOS 9.0.2 as far as I can tell. You can't authenticate when connecting to a view, you have to authenticate first.
The issue seems to be isolated to Safari browser but not Chrome on iOS devices since version 8.0.
Still does not seem to be fixed in 9.1
Agreed that no version of Safari on iOS can directly authenticate a view on any version of Tableau Server. I've never tried Chrome on iOS. Maybe the upcoming Tableau Mobile for iPhone announced at TC15 is a better option but I don't know how to make e-mail links open Tableau rather than Safari.
Hi Zach! Regarding an e-mailed link that opens the Tableau app when clicked rather than Safari, it's not a capability that exists at present. Here's an Idea for that capability, if you want to vote for it: http://community.tableau.com/ideas/3655.
The NTLM login problem appears fixed in iOS 9.2.1 for iPhone. Now I can click a URL, enter my credentials. and see the view, without having to first login and then navigate to the view (or use guest).