Netscaler 10.5 Citrix sign-on failed?

Viewing 11 posts - 1 through 11 (of 11 total)
  • Author
    Posts
  • #8562
    JohnLRichards
    Member
    • Total Post: 8
    • Newbie

    First – I’m a complete NOOB on using Wyse terminals. We have client that needs to have their T10 (build 8.0_505) winterms connect to a XenApp desktop through our Netscaler 10.5 VPX.

    So far, every configuration I’ve tried has returned a “Citrix sign-on failed” – and I’ve tried about 2 dozen variations of the wnos.ini file. I have managed to get our CA cert loaded, but that’s about the only sign of progress.

    Opened a ticket with Citrix, they checked the netscaler configuration, then blew me off with instructions to call Wyse (not really an option, we don’t own the thin clients) – we did confirm that we can logon and open the ./pnagent/config.xml file through a browser.

    Not even sure where to start troubling shooting it.

    Let me start with a dumb question… is it pnliteserver=https://host.domain.com or pnliteserver=https://host.domain.com/citrix/pnagent/config.xml ?

    #25589
    ConfGen
    Keymaster
    • Total Post: 11340
    • Jedi Master
    • ★★★★★★★

    I have created a document which explains step by step all the configuration needed to
    – setup NS 10.5
    – configure it
    – configure ThinOS
    Used that several times in different environment and at the end I always ended up with a perfectly fine running setup.

    You can download it under Products – ThinOS

    CG

    #25590
    JohnLRichards
    Member
    • Total Post: 8
    • Newbie

    if you mean http://www.freewysemonkeys.com/products/1000/NS105_and_ThinOS.pdf
    I already had a copy.
    One problem with it is that we are using Web Interface, not Storefront, and the document only addresses storefront. I am beginning to suspect that the WI config may be the issue – we are pulling the config.xml, but not connecting to the farm.

    #25591
    JohnLRichards
    Member
    • Total Post: 8
    • Newbie

    After entering logon, I do get a message “loading profile” that stays up for 10-15 seconds, then it changes to “Connecting” before I get the sign-on failed message.

    #25592
    JohnLRichards
    Member
    • Total Post: 8
    • Newbie

    I started monitoring nsconmsg -d -g pol_hits – I never see the Wyse terminal hit a session policy – Logging in through a browser I do see the a session policy fire.

    #25593
    JohnLRichards
    Member
    • Total Post: 8
    • Newbie

    We are setup to support multiple AD domains, and the netscaler is configure to accept usernames in UPN format, do I need to set anything on the client side for that? I have been entering the user logon as a UPN

    #25594
    JohnLRichards
    Member
    • Total Post: 8
    • Newbie

    Well, Scratch that idea – setup a new LDAP policy to use sAMAccountName, set the Website to accept it, got the same result: a web browser logon triggers the session policy and displays the config.xml, the thin client does not hit a session policy- I have 2 session polices bound, one is the REQ.HTTP.HEADER User-Agent CONTAINS WTOS/1.0 , the other is ns_true || ns_false, which should cover pretty much anything!

    #25597
    JohnLRichards
    Member
    • Total Post: 8
    • Newbie

    We have a fix! added CAGAuthMethod=LDAP to the pnliteserver line, then discovered Citrix support had changed the plugin type to Java, which I changed back to Windows/Mac O/S- those two item fixed it!

    #25598
    ConfGen
    Keymaster
    • Total Post: 11340
    • Jedi Master
    • ★★★★★★★

    Check Products sections again. There is new PDF called “Installation and configuration of Citrix NetScaler 10.5 to work with ThinOS and Xenith “

    CG

    #25601
    JohnLRichards
    Member
    • Total Post: 8
    • Newbie

    The immediate crisis is over, so thanks for your input. But as an FYI, That is the same document I have had all along.

    #45653
    Sohailkp
    Participant
    • Total Post: 1
    • Newbie

    I had same issue, it’s working perfectly from web browser but giving Citrix sign on failed from T10 Wyse with 8.3 firmware. When using CAGAuthMethod fixed the issue. But I am not able to specify multiples storefront or NAG URL in pnlite parameter.

    So I used select group parameter and created multiple ini files for different Citrix URL. But caching of wyse with EnableCacheIni parameter is not working,it works fine without select group parameter.

    Any clue on this

Viewing 11 posts - 1 through 11 (of 11 total)
  • You must be logged in to reply to this topic.