[THIN] SSL errors traced to STA?

From: "Raffensberger, Stephen D (Stephen) %" <raff@xxxxxxxxx>
To: "'thin@xxxxxxxxxxxxx'" <thin@xxxxxxxxxxxxx>
Date: Wed, 4 Jun 2003 13:23:21 -0400

Hi all,

I've got a standard Nfuse 1.7/CSG/STA setup by the book
using the Nfuse/CSG/STA from the MetaFrame XP CD.

Life is pretty good with the following exception. Users
intermittently get SSL errors while trying to connect.
The errors vary depending on which client they are using
but the root cause is the same for all of them.

Often, when the CSG requests a ticket from the STA,
sniffing packets reveals that the STA simply resets the
connection. This creates an error CSG0304 in the apps
event log on the CSG. The STA error log records the
request and then is silent until the 200 second timeout
occurs. Both logs are jacked up to record everything.

Java clients see "The connection to the SSL Relay failed
(code 1011)". Ica Web clients see "The Citrix SSL Server
you have selected is not accepting connections."

Based on the 1011 error, I've updated the Java client
to 6.30.1298 but the real cause seems to be in the STA.

The Citrix forum and Knowledge Base have some entries
for these errors but none of them addresses the STA.

This happens just often enough to be annoying to the
users. You can simply re-click the published app icon
and it will probably connect. The most often I've seen
it fail is four consecutive times. Then, I got in. Once
connected, the CSG is golden. No problems. I assume the
firewall is okay or it would never work.

Does anyone have ideas on how to debug/fix the STA? 

Steve Raffensberger
Computer Aid serving Agere Systems
Mailto: raff@xxxxxxxxx

********************************************************
This Week's Sponsor - Appsense Technologies
New! AppSense Optimizer is a new product from AppSense 
designed to increase the user capacity of your servers. 
http://www.appsense.com/
**********************************************************

For Archives, to Unsubscribe, Subscribe or 
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm

[THIN] SSL errors traced to STA?

Other related posts: