[THIN] Re: W2K3 TSCAL License Server in multiple untrusted Domains.
- From: "Jeremy Thomas" <jez@xxxxxxxxxxxxx>
- To: <thin@xxxxxxxxxxxxx>
- Date: Sun, 12 Dec 2004 12:12:14 +0100
"Can anyone confirm that for a W2K3 License Server to issue TS CALs to W2K
TS clients on another Domain, do you need to have these 2 Domains Trusted?
If the Trust is required will it work as an Inter Forest Trust and can it
just be in one direction?"
I'm basing this on how it's /supposed/ to work, so do test.
- Per device mode:
A W2K client (WS or Server) needs to have a TSCAL token to access a W2K3
terminal server running in "per device" licensing mode. So the TS looks at
the client and says "hey, that's a valid token" and lets it access TS
services It does not care where the TSCAL was issued from, and won't check
it at that point with the licensing server. However if the TSCAL is due for
renewal, it will need to go back to the server from which it was issued to
attempt to renew the lease for that TSCAL and re-issue it.
- Per user mode:
The TS says "I'm in per user mode" and does not check the TSCAL. Only works
for Y2K3 - not W2K.
Either way, the terminal server checks periodically that ther IS a valid
license server somewhere (I can't remember exactly when or how)
No mention of trusts => I think it's safe to assume that this does not have
anything to do with domain trusts.
I would have thought that given that the TS licence service is not AD
integrated, you should find that it works totally independantly of anything
else you have.
I don't know what happens to the TSCAL if you try to use a client on 2
different systems that are totally unrelated both running in per device
mode. Theoretically, the license server from A should recognise a TSCAL from
B as being valid, but then how does it re-issue a TSCAL to a B machine from
the A license pool? Would it require the client to have 2 TSCALs, one for A,
one for B? (Note - this is not an issue if the license servers can see each
other and sort it out between them)
You do need your license servers set up in Enterprise mode. The only place
I've ever seen that explained unambiguously is in one of Brian Madden's
books.
-----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf
Of Martin Stephenson
Sent: zondag 12 december 2004 2:32
To: Thin List
Subject: [THIN] W2K3 TSCAL License Server in multiple untrusted Domains.
I have searched through the first couple of hundred hits on this topic
on the Thin List archive and cant find the answers, so hopefully
someone here can help.
We have a requirement to manage all TS CALS on one pair of W2K3
servers, which will be located at a pair of Data Centres in the Head
Office. We have multiple untrusted AD (W2K & W2K3) Domains and
several Citrix Farms all connected via various quality WAN links. The
TS servers will have the reg key set which points to the License
Server.
We were previously able to use a W2K License Server to issue TS CALs
to clients in multiple untrusted AD Domains. In initial testing with
the W2K3 License Server, we have found that it is no longer issuing
license across untrusted Domains. There is a KB article that pretty
much suggest (in a little foot note) that you should have trusted
Domains for this to work on W2K3.
Can anyone confirm that for a W2K3 License Server to issue TS CALs to
W2K TS clients on another Domain, do you need to have these 2 Domains
Trusted? If the Trust is required will it work as an Inter Forest
Trust and can it just be in one direction?
Secondly are there any known logon latency issues with having your
W2K3 TS Licensing Server located at the far end of a WAN link from
your client W2K TS? For some reason I have this nagging thought that
when a user logs into a remote W2K TS and obtains a license from the
Licencing server located a couple of thousand Km away that there will
be added delay to the logon process. And if this is the case, will
the delay still occur even after the client has received a permanent
CAL?
Martin.
********************************************************
This Weeks Sponsor Activaeon.com
Reduce licensing costs with activAeon XA and
get one month completely free.
http://www.activaeon.com
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
ThinWiki community
http://www.thinwiki.com
***********************************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm
---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.808 / Virus Database: 550 - Release Date: 8/12/2004
---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.808 / Virus Database: 550 - Release Date: 8/12/2004
********************************************************
This Weeks Sponsor Activaeon.com
Reduce licensing costs with activAeon XA and
get one month completely free.
http://www.activaeon.com
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
ThinWiki community
http://www.thinwiki.com
***********************************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm
Other related posts:
