[THIN] Re: Passthru Authentication - still prompting

  • From: "Ron Jameson" <rjameson@xxxxxxxxxxxxx>
  • To: <thin@xxxxxxxxxxxxx>
  • Date: Wed, 23 Feb 2005 08:29:52 -0600

I do not have a ctxrpc.dll but in the citrix install folder, I do see
ssonsvr.exe.  On the TS front end server, I do not see any service
running for ssonsvr either.  
 
 

________________________________

From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On
Behalf Of Rick Mack
Sent: Wednesday, February 23, 2005 12:34 AM
To: thin@xxxxxxxxxxxxx
Subject: RE: [THIN] Re: Passthru Authentication - still prompting


Hi Ron,
 
For passthrough authenticaion to work, the single signon service has to
be running in each user's session. So if you look at the processes
running inside a user's desktop session, ssonsvr.exe has to be there. It
captures the usr credentials and passes them on to PN.
 
One possibility for your present problem is that installing/upgrading to
PNAgent 8.0 breaks single signon.
 
The simple fix is:
 
copy %systemroot%\system32\ctxrpc.dll "c:\program files\citrix\system32"

regards,

Rick

Ulrich Mack 
Volante Systems 
Level 2, 30 Little Cribb Street 
Coronation Drive Office Park 
Milton Qld 4064 
tel: +61 7 32431847 
fax: +61 7 32431992 
rmack@xxxxxxxxxxxxxx 

________________________________

From: thin-bounce@xxxxxxxxxxxxx on behalf of Ron Jameson
Sent: Wed 23/02/2005 4:16 PM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Passthru Authentication - still prompting


checkbox is not checked in Connection Configuration which is why I am
stumped why it is not working.  
 
Graphically challenged app is not really the app problem but is the
seamless problem (happens to any app (accounting programs)).  When
seamless, windows appear slowly, when windowed it is fine.  I just
applied the R02 hotfix and will have to check again if it changed.  Also
reinstalling PN8.1 on the login front end 2003 terminal server.
 
Ron

________________________________

From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On
Behalf Of Walter, Chris
Sent: Tuesday, February 22, 2005 8:56 PM
To: 'thin@xxxxxxxxxxxxx'
Subject: [THIN] Re: Passthru Authentication - still prompting



If I understand everything correctly you are setting up everything in PN
to use passthrough authentication but it is not working when logging in
through an ICA session.  If this is the case go into the Citrix
connection configuration on your Terminal server and make sure you don't
have the checkbox checked for 'Prompt for password'.  If this is on then
you can't use passthrough authentication.

 

As far as the graphically challenged app, need for info.  What is the
app?  Does it have a backend that is not on the same network as your
Terminal server?  I would start my checking the performance on the
terminal server and make sure you don't have any duplex mismatches on
the NIC.

 

Chris

 

-----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On
Behalf Of Ron Jameson
Sent: Tuesday, February 22, 2005 6:23 PM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Passthru Authentication - still prompting

 

Joe - I am now using the desktop shortcut from the PN,  I still cannot
get the pass thru to work....in the PN Application Set Settings login
tab, if I select pass thru login for local user, it prompts with the PN
login info/pwd/domain when running the app.  When you enter it, it
changes the login info to User-Specific Credentials.  The ICA Settings
show pass thru enabled.

My other problem is trying to work on why the seamless app is
graphically challenged.  Sluggish in seamless mode when I have tried
turning off/on bitmap cache & speedstream.  

 

Ron

 

________________________________

From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On
Behalf Of Joe Shonk
Sent: Tuesday, February 22, 2005 5:08 PM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Passthru Authentication - still prompting

Hmm... Not sure why you are creating custom .ica files.  Simply install
the PN Agent Pass-through client (from the MFPS 3.0 install) and use
that instead.   If you insist on using .ica and want Single Sign on, you
will need to add an entry that allow SSO via an ICA File.

 

Joe

 

________________________________

From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On
Behalf Of Ron Jameson
Sent: Tuesday, February 22, 2005 12:04 PM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Passthru Authentication - still prompting

 

Something is awry here that I could use help on from the experts.  This
is the first citrix box install - we normally only do TS2000/2003
installs.

 

I have a citrix PS3ent app server publishing 5-10 apps to another TS2003
server where users login to access the rest of the 10+ programs.  I
created the ICA packaged .ica ini file for the app and put that icon on
a users TS session desktop folder - but when they click on it - it
prompts for login to the citrix.  Am I missing an obvious here?  The
farm has pass thru set and I want the login credentials of the users
domain credentials from the TS session to pass to the citrix app server
seamlessly.  

 

Here is some other oddities I could use some clarification on:

 

1) Using the same published app - the ica ini package opens the program
fine (from the TS2003 session) except for the login needed - it appears
on the TS desktop as a program running there.  Users will NEVER know the
difference...they can minimize it, it only has one top window menu bar
etc.  But, I did notice screen graphics a bit draggy as they seem to
gradually appear rather than snap.

 

Does the ICA engine create that much overhead to drag the program pull
down graphics etc vs. using PN to enter?

 

2) If from the users TS session, I go into PN and run the app thru there
- it passes thru fine with no login (once you enter your own login info
in PN), but the published app screen goes full screen with no TS users
desktop.  So, I changed the published app to 1024x768 instead of full
screen, but now it looks like a session inside the TS session rather
than a program.  Program menus & graphics in this method snap like they
should.

 

I am still trying to test this various ways looking for what I need -
which is icons I can put on the TS2003 Sessions of the users (deployed
via the existing login script where program shortcuts are given to the
users), the icon graphic will need to be able to be changed to match the
program (this may rule out the ICA engine ini file), seamless login to
the app with no secondary login prompts, no drag in graphics and the
program cannot have any extra screen menu bars and appear like the
program is running in the TS session.

 

Any advise would be a great help.  Thanks.

 

 

Ron Jameson

Hamlin Technologies

 

 

 

 

########################################################################
#############

This e-mail, including all attachments, may be confidential or
privileged. Confidentiality or privilege is not waived or lost because
this e-mail has been sent to you in error. If you are not the intended
recipient any use, disclosure or copying of this e-mail is prohibited.
If you have received it in error please notify the sender immediately by
reply e-mail and destroy all copies of this e-mail and any attachments.
All liability for direct and indirect loss arising from this e-mail and
any attachments is hereby disclaimed to the extent permitted by law.

########################################################################
#############

Other related posts: