Microsoft Forefront Security Forums - ForefrontSecurity.ORG Knowledge Center Forums and Community
  Go back to ForefrontSecurity.ORG
Welcome Guest Active Topics | Log In | Register

Citrix Access Essentials
ulfhethnare
#1 Posted : Monday, April 06, 2009 5:20:15 PM(UTC)
Rank: Newbie
Groups: Registered

Joined: 4/6/2009(UTC)
Posts: 1
Points: 3
Location: Edinburgh
I dont understand :(

Partly because am an idiot it has to be said! Am hoping however, someone somewhere will take pity on me and help us.

How do I set up my Citrix Access Essentails using IAG2007sp2 - I have tried all the out the box Citrix options, tried every flavour of Learn mode or enable or diable cookies end point detetction is Always..so it should allow anything through at this rate ...so logging in to my Whale from the exteranl side I can see the Citrix icons..then click..then ooh the Citrix Access Essentails logon screen then bam :( Cookies. This browser requires cookies to work? What? How do I set it up? IAG is such an exotic beast I dont have the web to turn to as every readme and document out there seems to be from the IAG web site and it simply says it can work for Citrix Presenetation Server ...doesnt tell you the options you need to do ...but..

help?

Aleseh
#2 Posted : Tuesday, April 07, 2009 1:44:51 PM(UTC)
Rank: Advanced Member
Groups: Registered

Joined: 3/11/2009(UTC)
Posts: 63
Points: 189
Location: Seattle, WA
Hello

It sounds like your panicking! Really, don't. I am sure a few checkboxes will fix it.

#1 Double check that under your Authentication Repository ... Under Domain... You entered in your Domain Name correctly.

Correct: MSCorp
Incorrect: MSCorp.com

#2 Post a screenshot of the end user error.

#3 Copy and paste the results of your log monitor

Please provide this and I will see if I can provide more direction. Also, I am assuming since you posted this under Celestix Appliances that you have a Support Contract with them? You are never alone... the Celestix Team is great.

I will check back shortly to see if you posted any updates

Good Luck
Aleseh
BLUEProfile
#3 Posted : Thursday, October 29, 2009 12:05:54 PM(UTC)
Rank: Newbie
Groups: Registered

Joined: 10/29/2009(UTC)
Posts: 1
Points: 3
Location: Lincolnshire
I'm also struggling to get either V2 or V3 of Citrix XenApp Fundamentals (previously Citrix Access Essentials) to work with IAG (Celestix WSA).

Citrix seem to have changed the way the Web Interface is installed and works, even the directory structure is different to the standard Web Interface, so you have to create a URL set via the Learn Mode or untick Verify URLs on the Web Settings tab. Citrix also seem to have locked it down so you can't use a Web Interface IIS server off box, you seem to be forced to use the Citrix XenApp Fundamentals web interface.

If I RDP into the IAG server, I can access and log into both the V2 and V3 Citrix XenApp Fundamentals servers.

I can get to the login screen on both the V2 and V3 Citrix XenApp Fundamentals servers via IAG remotly, but when logging in I get the follwoing.

V2.
Your Web Interface is in an inconsistent state. To log on again, you must close adn restart your web browser.

This is where I'm currenlty stuck.

V3.
Cookies Required
This Website uses cookies in order to provide you with access to your published resources.
You must configure your browser to accept cookies. Contact your system administrtaor for assistance.

Both issues seem to be to do with the IAG Proxy and the Cookie security on the IIS side of the Citrix Web Interface. I have tried using both the Citrix Presentation Server (Web Interface 3.0/4.0/4.5) and Citrix XenApp (Web Interface 5.0) application sets with no joy. As there is no application set for the XenApp Fundamentals.

On the v3.0 server I have tried editing the cookies.js file located in c:\intepub\wwwroot\CitrixAccess\app_data\clientscripts by removing the line in red below.

function storeCookie(name, value) {
if (value) { // non-null, non-empty
value = "\"" + value + "\"";
} else {
value = "";
}

if (window.location.protocol.toLowerCase() == "https:") {
value += "; secure";
}

var cookie = name + "=" + value;
<% // The cookie path appears to cause problems for the way NetScaler proxies cookies.
// We do not use path with AG / NetScaler to improve compatibility with them.
if(!AGEUtilities.isAGEIntegrationEnabled(wiContext.getConfiguration())) {
%>
cookie = cookie + "; path=<%=wiContext.getWebAbstraction().getAbsoluteRequestDirectory()%>";
<% } %>
document.cookie = cookie;
}

<%
/**

This then allows me to log into the Citrix Web Interface but then I’m presented with the following error.

Session Error
There is a problem with your session. For secuirty reasons, you must close your browser window and log on again to continue accessing your published resourses.
To log on again, you must restart your browser.

So is short I think the V2 and V3 errors mean the same.

I can't see anything to say XenApp Fundamentals is support with IAG and Celestix, but there must be a way to get it to work.

lendidenko
#4 Posted : Wednesday, January 27, 2010 11:47:47 AM(UTC)
Rank: Newbie
Groups: Registered

Joined: 1/27/2010(UTC)
Posts: 1
Points: 3
Location: Kyiv,Ukraine
Have the same issue.
Can anyone help ?
Jason Jones
#5 Posted : Monday, February 01, 2010 12:12:07 PM(UTC)
Rank: Advanced Member
Groups: Registered, DA Moderator, IAG UAG TMG Moderator, Stirling Moderator

Joined: 11/30/2008(UTC)
Posts: 151
Points: 462
Location: United Kingdom
Me too :(

Getting the session error with XenApp 5 web interface and UAG RTM...

Cheers

JJ
Jason Jones | Forefront MVP | Silversands Ltd
My Blogs: http://blog.msedge.org.uk and http://blog.msfirewall.org.uk/

Jason Jones
#6 Posted : Friday, March 05, 2010 11:23:51 AM(UTC)
Rank: Advanced Member
Groups: Registered, DA Moderator, IAG UAG TMG Moderator, Stirling Moderator

Joined: 11/30/2008(UTC)
Posts: 151
Points: 462
Location: United Kingdom
Hi,

I think I have managed to fix my UAG and Citrix integration issues today.

The fix included adding the following code into a custom WhlFiltAppWrap_HTTPS.xml file:

<MANIPULATION_PER_APPLICATION>
<APPLICATION_TYPE>CitrixXenApp5</APPLICATION_TYPE>

<!-- Citrix fix for client cookies issue -->

<DATA_CHANGE ee="1">
<URL case_sensitive="false">/Citrix/.*/auth/login.aspx</URL>
<!-- check if RWS is secured or not -->
<SAR>
<SEARCH encoding="base64">ZnVuY3Rpb24gc2V0SXRlbUluQ29va2llKG5hbWUsIHZhbHVlKQ==</SEARCH>
<REPLACE encoding="base64">d2hsSXNTZWN1cmUgPSAiRkFMU0UiOw0KZnVuY3Rpb24gY2hlY2tXSExSV1MoKQ0Kew0KIHZhciB3aGxVUkwgPSBsb2NhdGlvbi5ocmVmOw0KCSBpbmRleDEgPSB3aGxVUkwuaW5kZXhPZigiLy8iKTsNCiAgICAgICAgICAgICBpbmRleDIgPSB3aGxVUkwuaW5kZXhPZigiLyIsaW5kZXgxKzIpOw0KICAgICAgICAgICAgIGluZGV4MyA9IHdobFVSTC5pbmRleE9mKCIvIixpbmRleDIrMSk7ICAgICAgDQoJIGluZGV4NCA9IHdobFVSTC5pbmRleE9mKCIvIixpbmRleDMrMSk7ICAgIA0KICAgICAgICAgICAgLy9nZXQgdGhlIHdobCBpbmRpY2F0b3IgZm9yIGEgc2VjdXJlLyBub24gc2VjdXJlIFJXUyAgICAgICAgICAgICAgICANCgkJd2hsVVJMID0gd2hsVVJMLnN1YnN0cmluZyhpbmRleDQtMSxpbmRleDQpOw0KCQkvL21lYW5zIHRoZSBSV1MgaXMgc2VjdXJlZA0KCQlpZiAod2hsVVJMID09ICIxIil3aGxJc1NlY3VyZSA9ICJUUlVFIjsNCn0NCmNoZWNrV0hMUldTKCk7ICAgICAgICAgICAgICAgIA0KZnVuY3Rpb24gc2V0SXRlbUluQ29va2llKG5hbWUsIHZhbHVlKQ==</REPLACE>
</SAR>
<!-- setting isSecure to false -->
<SAR>
<SEARCH encoding="base64">dmFyIGlzU2VjdXJlID0gKGxvY2F0aW9uLnByb3RvY29sLnRvTG93ZXJDYXNlKCkgPT0gJ2h0dHBzOicpOw==</SEARCH>
<REPLACE encoding="base64">dmFyIGlzU2VjdXJlID0gd2hsSXNTZWN1cmU7</REPLACE>
</SAR>
<!-- remove secure setting when creating cookie on client machine -->
<SAR>
<SEARCH encoding="base64">aWYgKHdpbmRvdy5sb2NhdGlvbi5wcm90b2NvbC50b0xvd2VyQ2FzZSgpID09ICJodHRwczoiKQ==</SEARCH>
<REPLACE encoding="base64">aWYgKHdobElzU2VjdXJlPT0iVFJVRSIp</REPLACE>
</SAR>

</DATA_CHANGE>
</MANIPULATION_PER_APPLICATION>


I would like to say that I wrote this myself, but we actually found it in the original AppWrap file on one of our old IAG servers.

Based upon the MS UAG blog it appears that the AppWrap code has been “cleaned up” for UAG (goodle "uag appwrap") which probably involved this code being removed. We have confirmed that this code fixes publishing Citrix WI 4.x/5.x with UAG RTM.

Based upon my findings, it is hard to see how anyone using Citrix Web Interface 4.x/5.x could have a working solution with the default UAG RTM configuration. Hence, I am a bit surprised that this issue has not been seen elsewhere by now…

Kind Regards

Jason
Jason Jones | Forefront MVP | Silversands Ltd
My Blogs: http://blog.msedge.org.uk and http://blog.msfirewall.org.uk/

Users browsing this topic
Guest
Forum Jump  
You cannot post new topics in this forum.
You cannot reply to topics in this forum.
You cannot delete your posts in this forum.
You cannot edit your posts in this forum.
You cannot create polls in this forum.
You cannot vote in polls in this forum.

ForefrontSecurity.ORG Design Team
Powered by YAF | YAF © 2003-2010, Yet Another Forum.NET
This page was generated in 0.131 seconds.