[THIN] Re: access denied when accessing citrix through web interface (HTTP error 401)
- From: Lara Adianto <m1r4cle_26@xxxxxxxxx>
- To: thin@xxxxxxxxxxxxx
- Date: Tue, 14 Sep 2004 03:18:35 -0700 (PDT)
Yes, I configure explicit NT auth, but I don't specify the domain name. It is
prompted to the user together with the username & password. It shouldn't be an
issue in my case right ?
I agree, using citrix program neighborhood, seems that the auth is using
Netlogon (which is the same as NTLM I believe) when I don't enable pass-through
auth. So with WI, if I use explicit NT auth, probably the auth will be NTLM as
well. I can't see this in the traffic now, keep getting the error 401 stated in
my prev mail. In the IIS, I configured basic auth with default domain set to
the user domain, and anonymous auth as well...so that user can see the citrix
login page directly. Is my configuration right ?
What about WI with desktop credential pass-through enabled ? is it using
Kerberos ? Can anyone confirm this ?
Thanks
lara
"Lambert, Ryan" <rlambert@xxxxxxxxxxxxxxx> wrote:
v\:* {behavior:url(#default#VML);}o\:* {behavior:url(#default#VML);}w\:*
{behavior:url(#default#VML);}.shape {behavior:url(#default#VML);}
I could be wrong, as I?m not too familiar with the guts of WI, but I am pretty
sure it will use NTLM.
What do you currently have configured? Explicit NT Auth? You?ve got your Domain
name in there also?
---------------------------------
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of
Lara Adianto
Sent: Monday, September 13, 2004 6:50 AM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: access denied when accessing citrix through web interface
Ya, I didn't allow anonymous....I've changed it, now I allow anonymous, so I
can see the citrix logon.asp without having to authenticate. But I still can't
see the shared apps....same error msg after trying to login with my username
and password:
ERROR: The Citrix MetaFrame servers cannot process your request at this time.
The Citrix MetaFrame servers sent HTTP headers indicating that an error
occurred. 401 Access Denied
No, I'm not using SSL yet, and I believe there's nothing wrong with the XML
port. If I enable desktop credential pass-through, what is the protocol used
for auth ? kerberos ? What if I'm using NT authentication ? will citrix
metaframe use kerberos protocol to authe to AD ? or NTLM ?
Thanks !
lara
"Lambert, Ryan" <rlambert@xxxxxxxxxxxxxxx> wrote:
Lara,
It sounds to me like youre not allowing anonymous access to the website. May
want to check in the security tab in IIS again just to confirm.
Couple of questions:
I know your URL says http:// but, are you using SSL anywhere in this setup?
Can you verify all of your Citrix servers are running on the same XML port?
---------------------------------
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of
Lara Adianto
Sent: Friday, September 10, 2004 8:09 AM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] access denied when accessing citrix through web interface
Hi list,
Does anyone know how to debug this problem:
I had citrix metaframe xp 3.0 server installed in windows 2000 server, users
can access the shared apps through program neighbourhood, but not through web
interface.
As described in the web interface , user can access it throught
http://servername/Citrix/MetaFrameXP, however the browser prompts me with the
logon box asking for username, password and domain. After I enter the username,
password, I can see the citrix login page, but the metaframe xp message center
displays the following error:
ERROR: The Citrix MetaFrame servers cannot process your request at this time.
The Citrix MetaFrame servers sent HTTP headers indicating that an error
occurred. 401 Access Denied
My questions:
1. How can I disable the browser pop-up logon dialog box ? I believe I should
be able to see the citrix default login page directly without having to
authenticate through the browser first right ?
2. How can I debug the 401 Access denied problem ? I have tried enabling /
disabling various IIS authentication, without any success.
Thanks,
lara
------------------------------------------------------------------------------------
La vie, voyez-vous, ca n'est jamais si bon ni si mauvais qu'on croit
- Guy de Maupassant -
------------------------------------------------------------------------------------
__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com
------------------------------------------------------------------------------------
La vie, voyez-vous, ca n'est jamais si bon ni si mauvais qu'on croit
- Guy de Maupassant -
------------------------------------------------------------------------------------
---------------------------------
Do you Yahoo!?
Shop for Back-to-School deals on Yahoo! Shopping.
------------------------------------------------------------------------------------
La vie, voyez-vous, ca n'est jamais si bon ni si mauvais qu'on croit
- Guy
de Maupassant -
------------------------------------------------------------------------------------
---------------------------------
Do you Yahoo!?
Yahoo! Mail - 50x more storage than other providers!
Other related posts:
- » [THIN] Re: access denied when accessing citrix through web interface (HTTP error 401)
