[THIN] Re: Passthru Authentication - still prompting

Hi Ron,
 
For passthrough authenticaion to work, the single signon service has to be 
running in each user's session. So if you look at the processes running inside 
a user's desktop session, ssonsvr.exe has to be there. It captures the usr 
credentials and passes them on to PN.
 
One possibility for your present problem is that installing/upgrading to 
PNAgent 8.0 breaks single signon.
 
The simple fix is:
 
copy %systemroot%\system32\ctxrpc.dll "c:\program files\citrix\system32"

regards,

Rick

Ulrich Mack 
Volante Systems 
Level 2, 30 Little Cribb Street 
Coronation Drive Office Park 
Milton Qld 4064 
tel: +61 7 32431847 
fax: +61 7 32431992 
rmack@xxxxxxxxxxxxxx 

________________________________

From: thin-bounce@xxxxxxxxxxxxx on behalf of Ron Jameson
Sent: Wed 23/02/2005 4:16 PM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Passthru Authentication - still prompting


checkbox is not checked in Connection Configuration which is why I am stumped 
why it is not working.  
 
Graphically challenged app is not really the app problem but is the seamless 
problem (happens to any app (accounting programs)).  When seamless, windows 
appear slowly, when windowed it is fine.  I just applied the R02 hotfix and 
will have to check again if it changed.  Also reinstalling PN8.1 on the login 
front end 2003 terminal server.
 
Ron

________________________________

From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of 
Walter, Chris
Sent: Tuesday, February 22, 2005 8:56 PM
To: 'thin@xxxxxxxxxxxxx'
Subject: [THIN] Re: Passthru Authentication - still prompting



If I understand everything correctly you are setting up everything in PN to use 
passthrough authentication but it is not working when logging in through an ICA 
session.  If this is the case go into the Citrix connection configuration on 
your Terminal server and make sure you don't have the checkbox checked for 
'Prompt for password'.  If this is on then you can't use passthrough 
authentication.

 

As far as the graphically challenged app, need for info.  What is the app?  
Does it have a backend that is not on the same network as your Terminal server? 
 I would start my checking the performance on the terminal server and make sure 
you don't have any duplex mismatches on the NIC.

 

Chris

 

-----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of 
Ron Jameson
Sent: Tuesday, February 22, 2005 6:23 PM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Passthru Authentication - still prompting

 

Joe - I am now using the desktop shortcut from the PN,  I still cannot get the 
pass thru to work....in the PN Application Set Settings login tab, if I select 
pass thru login for local user, it prompts with the PN login info/pwd/domain 
when running the app.  When you enter it, it changes the login info to 
User-Specific Credentials.  The ICA Settings show pass thru enabled.

My other problem is trying to work on why the seamless app is graphically 
challenged.  Sluggish in seamless mode when I have tried turning off/on bitmap 
cache & speedstream.  

 

Ron

 

________________________________

From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of 
Joe Shonk
Sent: Tuesday, February 22, 2005 5:08 PM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Passthru Authentication - still prompting

Hmm... Not sure why you are creating custom .ica files.  Simply install the PN 
Agent Pass-through client (from the MFPS 3.0 install) and use that instead.   
If you insist on using .ica and want Single Sign on, you will need to add an 
entry that allow SSO via an ICA File.

 

Joe

 

________________________________

From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of 
Ron Jameson
Sent: Tuesday, February 22, 2005 12:04 PM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Passthru Authentication - still prompting

 

Something is awry here that I could use help on from the experts.  This is the 
first citrix box install - we normally only do TS2000/2003 installs.

 

I have a citrix PS3ent app server publishing 5-10 apps to another TS2003 server 
where users login to access the rest of the 10+ programs.  I created the ICA 
packaged .ica ini file for the app and put that icon on a users TS session 
desktop folder - but when they click on it - it prompts for login to the 
citrix.  Am I missing an obvious here?  The farm has pass thru set and I want 
the login credentials of the users domain credentials from the TS session to 
pass to the citrix app server seamlessly.  

 

Here is some other oddities I could use some clarification on:

 

1) Using the same published app - the ica ini package opens the program fine 
(from the TS2003 session) except for the login needed - it appears on the TS 
desktop as a program running there.  Users will NEVER know the 
difference...they can minimize it, it only has one top window menu bar etc.  
But, I did notice screen graphics a bit draggy as they seem to gradually appear 
rather than snap.

 

Does the ICA engine create that much overhead to drag the program pull down 
graphics etc vs. using PN to enter?

 

2) If from the users TS session, I go into PN and run the app thru there - it 
passes thru fine with no login (once you enter your own login info in PN), but 
the published app screen goes full screen with no TS users desktop.  So, I 
changed the published app to 1024x768 instead of full screen, but now it looks 
like a session inside the TS session rather than a program.  Program menus & 
graphics in this method snap like they should.

 

I am still trying to test this various ways looking for what I need - which is 
icons I can put on the TS2003 Sessions of the users (deployed via the existing 
login script where program shortcuts are given to the users), the icon graphic 
will need to be able to be changed to match the program (this may rule out the 
ICA engine ini file), seamless login to the app with no secondary login 
prompts, no drag in graphics and the program cannot have any extra screen menu 
bars and appear like the program is running in the TS session.

 

Any advise would be a great help.  Thanks.

 

 

Ron Jameson

Hamlin Technologies

 

 

 

 


#####################################################################################
This e-mail, including all attachments, may be confidential or privileged.  
Confidentiality or privilege is not waived or lost because this e-mail has been 
sent to you in error.  If you are not the intended recipient any use, 
disclosure or copying of this e-mail is prohibited.  If you have received it in 
error please notify the sender immediately by reply e-mail and destroy all 
copies of this e-mail and any attachments.  All liability for direct and 
indirect loss arising from this e-mail and any attachments is hereby disclaimed 
to the extent permitted by law.
#####################################################################################

Other related posts: