[THIN] Re: Logging in to the CAG

Very Strange, Steve.  I installed FireFox on this home computer and it
works fine.  IE 6 is no go.  It will be up to the user to upgrade to IE
7 (maybe it will fix something damaged) or just use FireFox going
forward.  I wonder if it will work for the other user too?

 

Thank you,

 

Jim Medeiros

Citrix Administrator

GMAC Insurance

(336) 770-2858

________________________________

From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On
Behalf Of Steve Greenberg
Sent: Monday, November 05, 2007 1:04 PM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Logging in to the CAG

 

It was sounding more and more like an endpoint issue, it will be
interesting to see if that turns out to be the case....

 

 

Steve Greenberg

 Thin Client Computing

34522 N. Scottsdale Rd D8453

Scottsdale, AZ 85262

(602) 432-8649

www.thinclient.net

steveg@xxxxxxxxxxxxxx

 

________________________________

From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On
Behalf Of Medeiros, Jim
Sent: Monday, November 05, 2007 6:26 AM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Logging in to the CAG

 

Steve,

 

I found out the other day that one of the users only had USER level
privileges to her home computer.  I want her to try with power user or
admin rights to see if that helps.  She has never used Citrix before and
it may be an Active X issue.  I will let you know how we make out.
Thanks for the help thus far!!!

 

Thank you,

 

Jim Medeiros

Citrix Administrator

GMAC Insurance

________________________________

From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On
Behalf Of Steve Greenberg
Sent: Friday, November 02, 2007 4:59 PM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Logging in to the CAG

 

Does this correspond to the user session that could not get in?

 

 

Steve Greenberg

Thin Client Computing

34522 N. Scottsdale Rd D8453

Scottsdale, AZ 85262

(602) 432-8649

www.thinclient.net

steveg@xxxxxxxxxxxxxx

 

________________________________

From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On
Behalf Of Medeiros, Jim
Sent: Friday, November 02, 2007 12:53 PM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Logging in to the CAG

 

Well I've gone through the CAG logs (we have 4 CAGS in a round robin
setup) but I can't find anything that jumps out at me.  There is not a
lot of information online that I can find.  There are some errors but
I'm not sure what they mean:

 

(11/01/07
17:14:04):L10:LOGSVRE:3390:65541:server:aacd::aac.c:1605:SESSINFO:28::Ch
eck Redirect URL [/] :

(11/01/07
17:14:04):L10:LOGSVRE:3390:65541:server:aacd::aac.c:1655:SESSINFO:28::Re
direct URL [/] is not externally accesible, using default logon point
[GMACILogonPoint].:

(11/01/07
17:14:05):L10:LOGSVRE:3390:81926:server:aacd::aac.c:10391:SESSINFO:28::n
ext page validation failed.:

(11/01/07
17:14:05):L10:LOGSVRE:3390:81926:server:aacd::aac.c:10392:SESSINFO:28::E
xpected page: Login.aspx?ff=full:

(11/01/07
17:14:05):L10:LOGSVRE:3390:81926:server:aacd::aac.c:10394:SESSINFO:28::R
equested page:
https://x.x.x.x:0/CitrixSessionInit/DeployIcaClient.aspx?MASTER_SESSION_
ID=613d5655-47d6-8c64-55fe-40f93ef74692&CtxGwyTicket=AS%3bQGZZ7ZEWQFYPLZ
3O9XWE%3bC116BEBD254E53C01E5498E93B3EC26A&MASTER_CTX_PS_KEY=Vcyk3Bjy1CQd
J%2bCITce2x33WQymwys4JAC&wsc=0&FullOutput=True&agcLaunched=False:

(11/01/07
17:14:05):L10:LOGSVRE:3390:81926:server:aacd::aac.c:1605:SESSINFO:28::Ch
eck Redirect URL
[/CitrixSessionInit/DeployIcaClient.aspx?MASTER_SESSION_ID=613d5655-47d6
-8c64-55fe-40f93ef74692&CtxGwyTicket=AS%3bQGZZ7ZEWQFYPLZ3O9XWE%3bC116BEB
D254E53C01E5498E93B3EC26A&MASTER_CTX_PS_KEY=Vcyk3Bjy1CQdJ%2bCITce2x33WQy
mwys4JAC&wsc=0&FullOutput=True&agcLaunched=False] :

(11/01/07
17:14:05):L10:LOGSVRE:3390:81926:server:aacd::aac.c:1655:SESSINFO:28::Re
direct URL
[/CitrixSessionInit/DeployIcaClient.aspx?MASTER_SESSION_ID=613d5655-47d6
-8c64-55fe-40f93ef74692&CtxGwyTicket=AS%3bQGZZ7ZEWQFYPLZ3O9XWE%3bC116BEB
D254E53C01E5498E93B3EC26A&MASTER_CTX_PS_KEY=Vcyk3Bjy1CQdJ%2bCITce2x33WQy
mwys4JAC&wsc=0&FullOutput=True&agcLaunched=False] is not externally
accesible, using default logon point [GMACILogonPoint].:

(11/01/07
17:14:06):L10:LOGSVRE:3390:81926:server:aacd::aac.c:10391:SESSINFO:28::n
ext page validation failed.:

(11/01/07
17:14:06):L10:LOGSVRE:3390:81926:server:aacd::aac.c:10392:SESSINFO:28::E
xpected page: Login.aspx?ff=full:

(11/01/07
17:14:06):L10:LOGSVRE:3390:81926:server:aacd::aac.c:10394:SESSINFO:28::R
equested page:
https://167.19.249.161:0/themes/default/style/default.css:

(11/01/07
17:14:06):L10:LOGSVRE:3390:81926:server:aacd::aac.c:1605:SESSINFO:28::Ch
eck Redirect URL [/themes/default/style/default.css] :

(11/01/07
17:14:06):L10:LOGSVRE:3390:81926:server:aacd::aac.c:1655:SESSINFO:28::Re
direct URL [/themes/default/style/default.css] is not externally
accesible, using default logon point [GMACILogonPoint].:

(11/01/07
17:16:07):L00:LOGSYSI:677:16384:pitboss:general::pb.c:859:SESSINFO:::per
iodical dump of pitboss statistics to log file follows:

(11/01/07
17:16:07):L00:LOGSYSI:677:16384:pitboss:general::pb.c:864:SESSINFO:::pit
boss stats  (general): 29157, 0, 0 (minutes lived, alarms, exits):

(11/01/07
17:16:07):L00:LOGSYSI:677:16384:pitboss:general::pb.c:870:SESSINFO:::pit
boss stats  (clients): 5, 14, 0, 0 (spawned, registered, restarts,
hangs):

(11/01/07
17:16:07):L00:LOGSYSI:677:16384:pitboss:general::pb.c:875:SESSINFO:::pit
boss stats (requests): 399991, 0, 0 (complete, errors, short reads):

(11/01/07
17:16:07):L00:LOGSYSI:677:16384:pitboss:general::pb.c:880:SESSINFO:::pit
boss stats (requests): 399965, 0, 13 (heartbeats, deletes, adds):

(11/01/07
17:16:07):L00:LOGSYSI:677:16384:pitboss:general::pb.c:885:SESSINFO:::pit
boss stats (requests): 12, 1, 0 (signals matched, signals unmatched,
unknown):

(11/01/07
17:17:47):L10:LOGSVRE:3390:98311:server:aacd::aac.c:1605:SESSINFO:28::Ch
eck Redirect URL [/] :

(11/01/07
17:17:47):L10:LOGSVRE:3390:98311:server:aacd::aac.c:1655:SESSINFO:28::Re
direct URL [/] is not externally accesible, using default logon point
[GMACILogonPoint].:

(11/01/07
17:17:48):L10:LOGSVRE:3390:81926:server:aacd::aac.c:10391:SESSINFO:31::n
ext page validation failed.:

(11/01/07
17:17:48):L10:LOGSVRE:3390:81926:server:aacd::aac.c:10392:SESSINFO:31::E
xpected page: Login.aspx?ff=full:

(11/01/07
17:17:48):L10:LOGSVRE:3390:81926:server:aacd::aac.c:10394:SESSINFO:31::R
equested page:
https://x.x.x.x:0/CitrixSessionInit/DeployIcaClient.aspx?MASTER_SESSION_
ID=601dace8-2302-e761-aa8d-8cfa71591f51&CtxGwyTicket=AS%3bQGZZ7ZEWQFYPLZ
3O9XWE%3b249A2F2D7594AF01B2E1963CF37059F0&MASTER_CTX_PS_KEY=kuraWkDAFV7V
BhYftw9QA6ijohuBSNVO73&wsc=0&FullOutput=True&agcLaunched=False:

(11/01/07
17:17:48):L10:LOGSVRE:3390:81926:server:aacd::aac.c:1605:SESSINFO:31::Ch
eck Redirect URL
[/CitrixSessionInit/DeployIcaClient.aspx?MASTER_SESSION_ID=601dace8-2302
-e761-aa8d-8cfa71591f51&CtxGwyTicket=AS%3bQGZZ7ZEWQFYPLZ3O9XWE%3b249A2F2
D7594AF01B2E1963CF37059F0&MASTER_CTX_PS_KEY=kuraWkDAFV7VBhYftw9QA6ijohuB
SNVO73&wsc=0&FullOutput=True&agcLaunched=False] :

(11/01/07
17:17:48):L10:LOGSVRE:3390:81926:server:aacd::aac.c:1655:SESSINFO:31::Re
direct URL
[/CitrixSessionInit/DeployIcaClient.aspx?MASTER_SESSION_ID=601dace8-2302
-e761-aa8d-8cfa71591f51&CtxGwyTicket=AS%3bQGZZ7ZEWQFYPLZ3O9XWE%3b249A2F2
D7594AF01B2E1963CF37059F0&MASTER_CTX_PS_KEY=kuraWkDAFV7VBhYftw9QA6ijohuB
SNVO73&wsc=0&FullOutput=True&agcLaunched=False] is not externally
accesible, using default logon point [GMACILogonPoint].:

(11/01/07
17:17:50):L10:LOGSVRE:3390:98311:server:aacd::aac.c:10391:SESSINFO:28::n
ext page validation failed.:

 

 

Thank you,

 

Jim Medeiros

Citrix Administrator

GMAC Insurance

(336) 770-2858

________________________________

From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On
Behalf Of Steve Greenberg
Sent: Friday, November 02, 2007 3:46 PM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Logging in to the CAG

 

So no errors at all in CAG and absolutely users from both OU's work the
rest of the time? Have these users tried it from any other remote
machines?

 

 

Steve Greenberg

Thin Client Computing

34522 N. Scottsdale Rd D8453

Scottsdale, AZ 85262

(602) 432-8649

www.thinclient.net

steveg@xxxxxxxxxxxxxx

 

________________________________

From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On
Behalf Of Medeiros, Jim
Sent: Friday, November 02, 2007 11:33 AM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Logging in to the CAG

 

Yes, same realm.  I was trying to say in the last email that I have
users in both OUs that make up the 100s that are working fine.

 

Thank you,

 

Jim Medeiros

Citrix Administrator

GMAC Insurance

(336) 770-2858

________________________________

From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On
Behalf Of Steve Greenberg
Sent: Friday, November 02, 2007 2:34 PM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Logging in to the CAG

 

Are they all using the same realm, i.e. default? The LDAP support in CAG
has some limitations about what OU's it can see from a realm, it doesn't
seem to be able to span down or across requiring multiple realms or a
RADIUS server in between...

 

 

Steve Greenberg

Thin Client Computing

34522 N. Scottsdale Rd D8453

Scottsdale, AZ 85262

(602) 432-8649

www.thinclient.net

steveg@xxxxxxxxxxxxxx

 

________________________________

From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On
Behalf Of Medeiros, Jim
Sent: Friday, November 02, 2007 11:10 AM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Logging in to the CAG

 

We have two OUs for User objects.  These are in the same OU but all the
other users that work are located in one of the two OUs.  I hope that
makes sense.  

 

Thank you,

 

Jim Medeiros

Citrix Administrator

GMAC Insurance

(336) 770-2858

________________________________

From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On
Behalf Of Steve Greenberg
Sent: Friday, November 02, 2007 1:52 PM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Logging in to the CAG

 

Are those users in the same OU as everyone else that works?

 

 

Steve Greenberg

Thin Client Computing

34522 N. Scottsdale Rd D8453

Scottsdale, AZ 85262

(602) 432-8649

www.thinclient.net

steveg@xxxxxxxxxxxxxx

 

________________________________

From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On
Behalf Of Medeiros, Jim
Sent: Friday, November 02, 2007 10:13 AM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Logging in to the CAG

 

The very first CAG, they log in and then they are brought right back to
that very first CAG after a few seconds.  They see a "License Info" page
after log in.  I noticed this happening for me too, but it happens so
fast that most people don't see it.  

 

Thank you,

 

Jim Medeiros

Citrix Administrator

GMAC Insurance

(336) 770-2858

________________________________

From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On
Behalf Of Steve Greenberg
Sent: Friday, November 02, 2007 1:24 PM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Logging in to the CAG

 

What windows do they get exactly? Just the very first CAG authentication
or do they actually see WI?

 

 

Steve Greenberg

Thin Client Computing

34522 N. Scottsdale Rd D8453

Scottsdale, AZ 85262

(602) 432-8649

www.thinclient.net

steveg@xxxxxxxxxxxxxx

 

________________________________

From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On
Behalf Of Medeiros, Jim
Sent: Friday, November 02, 2007 10:01 AM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Logging in to the CAG

 

Yes, we have 100's of users who access Citrix through our CAG (w/AAC)
daily.  For some reason these two users have not been able to (from
their home computers - both WINXP with IE 6 on broadband connections).
Very strange!  No errors that I can find.  

 

Thanks for your help!!!

 

Jim Medeiros

Citrix Administrator

GMAC Insurance

(336) 770-2858

________________________________

From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On
Behalf Of Steve Greenberg
Sent: Friday, November 02, 2007 1:13 PM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Logging in to the CAG

 

 

Did you configure LDAP?

 

 

Steve Greenberg

Thin Client Computing

34522 N. Scottsdale Rd D8453

Scottsdale, AZ 85262

(602) 432-8649

www.thinclient.net

steveg@xxxxxxxxxxxxxx

 

________________________________

From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On
Behalf Of Medeiros, Jim
Sent: Friday, November 02, 2007 9:49 AM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Logging in to the CAG

 

Microsoft AD.  CAG going through AAC to WI.

 

Thank you,

 

Jim Medeiros

Citrix Administrator

GMAC Insurance

(336) 770-2858

________________________________

From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On
Behalf Of Steve Greenberg
Sent: Friday, November 02, 2007 12:34 PM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Logging in to the CAG

 

What type of authentication are you using on the CAG?

 

 

Steve Greenberg

Thin Client Computing

34522 N. Scottsdale Rd D8453

Scottsdale, AZ 85262

(602) 432-8649

www.thinclient.net

steveg@xxxxxxxxxxxxxx

 

________________________________

From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On
Behalf Of Medeiros, Jim
Sent: Thursday, November 01, 2007 2:51 PM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Logging in to the CAG

 

I have two users now that cannot access our Citrix farm from home.  Both
are able to get to our web page that points to our CAG but when they log
in it just brings them back to the log in page.  When they are on the
network at work they can login fine.  

 

Anyone have any ideas?

 

Thank you,

 

Jim Medeiros

Citrix Administrator

GMAC Insurance

(336) 770-2858

 

------------------------------------------------------------------------
--------------------------------

Note:  The information contained in this message may be privileged and
confidential and protected from disclosure.  If the reader of this
message is not the intended recipient, or an employee or agent
responsible for delivering this message to the intended recipient, you
are hereby notified that any dissemination, distribution or copying of
this communication is strictly prohibited.  If you have received this
communication in error, please notify us 
immediately by replying to the message and deleting it from your
computer.  Thank you.
------------------------------------------------------------------------
--------------------------------

GIF image

JPEG image

Other related posts: