[THIN] Re: PNAgent, MPS4, and pass-through authentication

  • From: Greg Reese <gareese@xxxxxxxxx>
  • To: thin@xxxxxxxxxxxxx
  • Date: Fri, 13 Jan 2006 11:46:51 -1200

what a strange setup but to each their own.  I would (and currently do) make
a published desktop and the thin clients connect to that, pnagent runs, and
fills in the desktop.  The desktop my users get is essentially empty.  My
computer, a start menu, recycle bin.  the agent fills in everything else.
If the servers running the published desktop also host the published apps,
they will open instantly through the magic of session sharing.  In your
setup, i would expect that one they get connected, the apps then connect
individually as well.  Your users are probably used to this but if you give
them a speed perk, they will love you for it.

By using RDP to connect, you are not getting all the benefits of the ICA
protocol to the clients.

It seems a pinch more complex than necessary for the functionality you are
after.

Greg

On 1/13/06, Granatella, Adam <granatella.adam@xxxxxxxx> wrote:
>
>
> I did get a few DCOM errors, not consistently though, but that is what led
> me to the Citrix article stating this was "by design."
>
> Sure enough, I installed PS4 on a test server that previously didn't work,
> and just having the software installed fixes this issue.  I didn't have to
> set up any licensing, or valid connections.  As long as the Citrix
> software
> is on the machine, I can RDP to it and the pnagent pass-through
> authentication works just fine.
>
> Thanks for the insight, and have a good weekend everyone!
>
> Adam
>
> -----Original Message-----
> From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On
> Behalf
> Of Joe Shonk
> Sent: Friday, January 13, 2006 3:29 PM
> To: thin@xxxxxxxxxxxxx
> Subject: [THIN] Re: PNAgent, MPS4, and pass-through authentication
>
> Are you getting the DCOM errors?  Just pop on the Citrix Desktop via and
> RDP
> connection and it passed my credentials to PNAgent...  Check you PNAgent
> configuration (Access Suite Console)
>
> Joe
>
> -----Original Message-----
> From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On
> Behalf
> Of Granatella, Adam
> Sent: Friday, January 13, 2006 2:10 PM
> To: thin@xxxxxxxxxxxxx
> Subject: [THIN] Re: PNAgent, MPS4, and pass-through authentication
>
>
> No Metaframe (or whatever it's called this week) on those server, just
> straight TS.
>
> -----Original Message-----
> From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On
> Behalf
> Of Joe Shonk
> Sent: Friday, January 13, 2006 3:08 PM
> To: thin@xxxxxxxxxxxxx
> Subject: [THIN] Re: PNAgent, MPS4, and pass-through authentication
>
> So again,  why are the user connecting via RDP and not ICA?
>
> Joe
>
> -----Original Message-----
> From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On
> Behalf
> Of Granatella, Adam
> Sent: Friday, January 13, 2006 1:54 PM
> To: thin@xxxxxxxxxxxxx
> Subject: [THIN] Re: PNAgent, MPS4, and pass-through authentication
>
>
> Hi, any ideas on this?  I found this article:
>
>
> http://support.citrix.com/kb/entry!default.jspa?categoryID=118&entryID=4912&;
> fromSearchPage=true
>
> Which states this behavior is by design.  Does this mean pass-through
> authentication will not work from a terminal server?  If so, does anyone
> know if there are any Microsoft articles or other information from Citrix
> that details this?  Thanks!
>
> Adam
>
> -----Original Message-----
> From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On
> Behalf
> Of Granatella, Adam
> Sent: Friday, January 13, 2006 9:27 AM
> To: thin@xxxxxxxxxxxxx
> Subject: [THIN] PNAgent, MPS4, and pass-through authentication
>
>
> Good morning, and happy Friday everyone.
>
> I'm running into a strange problem here with pnagent.  I'll try to break
> down the situation as best as possible.  The problem is, users RDPing into
> a
> terminal server (Win2k, XP clients), then using pnagent for their
> published
> apps.  We have pass-through authentication set as the only choice in the
> config file, and it is set as default.
>
> When a user logs into the TS, they are prompted with a login box.  If they
> right-click on the pnagent icon and choose properties, the Logon Mode
> field
> is blank.  Clicking the drop-down shows the pass-through authentication
> option, but if that is selected, it does not work.  It will disconnect
> them
> when hitting OK, then if they try to reconnect, the login box comes up,
> and
> if they go back into the pnagent properties, the Logon Mode field is blank
> again.
>
> Their pilot environment is 2 load balanced WI4 servers on Win2k3 SP1, 3
> load
> balanced Win2k terminal servers, and 4 MPS4 servers on Win2k3 SP1.
>
> Now here's where it gets strange.  Local XP clients work fine with
> pnagent.
> A user (admin or normal user), can login directly to the console of one of
> the terminal servers, and pnagent works fine, but if they RDP into the
> terminal server, even using the same userid, pnagent behaves as above.
>
> I've been through the Citrix KB article CTX368624 (troubleshooting
> pass-through authentication) as well as the articles it references.  I've
> tried various forms of the client install, including a pre-packaged one
> created here that works fine on XP desktops, and the latest from Citrix's
> site.  I'm running out of ideas here, so if anyone has seen anything like
> this, or has any ideas, it would be greatly appreciated.  Thanks!
>
> Adam
>
> "This e-mail may contain confidential and/or legally proprietary material
> for the sole use of the intended recipient.  Any review or distribution by
> others is strictly prohibited.  If you are not the intended recipient,
> please contact the sender and delete all copies."
> ************************************************
> For Archives, RSS, to Unsubscribe, Subscribe or set Digest or Vacation
> mode
> use the below link:
> //www.freelists.org/list/thin
> ************************************************
>
> "This e-mail may contain confidential and/or legally proprietary material
> for the sole use of the intended recipient.  Any review or distribution by
> others is strictly prohibited.  If you are not the intended recipient,
> please contact the sender and delete all copies."
> ************************************************
> For Archives, RSS, to Unsubscribe, Subscribe or set Digest or Vacation
> mode
> use the below link:
> //www.freelists.org/list/thin
> ************************************************
>
> ************************************************
> For Archives, RSS, to Unsubscribe, Subscribe or set Digest or Vacation
> mode
> use the below link:
> //www.freelists.org/list/thin
> ************************************************
>
> "This e-mail may contain confidential and/or legally proprietary material
> for the sole use of the intended recipient.  Any review or distribution by
> others is strictly prohibited.  If you are not the intended recipient,
> please contact the sender and delete all copies."
> ************************************************
> For Archives, RSS, to Unsubscribe, Subscribe or set Digest or Vacation
> mode
> use the below link:
> //www.freelists.org/list/thin
> ************************************************
>
> ************************************************
> For Archives, RSS, to Unsubscribe, Subscribe or set Digest or Vacation
> mode
> use the below link:
> //www.freelists.org/list/thin
> ************************************************
>
> "This e-mail may contain confidential and/or legally proprietary material
> for the sole use of the intended recipient.  Any review or distribution by
> others is strictly prohibited.  If you are not the intended recipient,
> please contact the sender and delete all copies."
> ************************************************
> For Archives, RSS, to Unsubscribe, Subscribe or
> set Digest or Vacation mode use the below link:
> //www.freelists.org/list/thin
> ************************************************
>

Other related posts: