[THIN] Error code 5 when publishing content thru firewall

  • From: "Pratt, Andrew" <PrattAG@xxxxxxxxxxx>
  • To: "'thin@xxxxxxxxxxxxx'" <thin@xxxxxxxxxxxxx>
  • Date: Fri, 28 Jun 2002 11:10:36 +0100

Hi all,

I'm based in London and using XP FR1 to publish local content to UK and
overseas-based users. The content is on a shared folder on the test citrix
server itself and I've ensured all users have NTFS permissions to the local
content. 

We're finding that users who access Citrix via VPNs thru our firewall are
getting the CPN warning/error "You do not have access to the published
content. Please contact your system administrator. (Error code [5])" with
the OK button below. LAN users are fine though.

The normal Citrix firewall ports are open (1494 and 1604) and normal apps
(eg Excel) work fine thru the firewall. We can replicate the error by
logging into LAN pc's only (not the network) and trying to access the
content app. Exactly the same error appears so it would seem the app does
not remember/use the credentials used to access the published app (after
double clicking it) and uses the logged in account's credentials instead.

In trying to solve/workaround the problem, we opened all ports on the
firewall which did not help. Thereafter, we mapped a M$ drive (any letter
works) to the share on the remote pc and then tried the Citrix app and it
worked ! Thereafter we closed all ports except the Citrix ones listed above
and TCP port 445 which is apparently used for M$ domain lookups. This also
works while the local mapped drive is connected. With this port open there's
no need for Citrix so it's hardly a workaround - more like an alternative.

I'm guessing heavy Citrix users must've come across this before ? Help me
please, good people !? How can I get it working without TCP port 445 open ?

Ta
Andrew


Visit our website at http://www.halcrow.com

---------------------------------------------------------------------------
The contents of this email do not give rise to any binding
legal obligation upon Halcrow Group Limited unless subsequently
confirmed on headed business notepaper sent by fax, letter or as 
an e-mail attachment. If you receive this email in error, please
contact the sender and delete the message. Thank you.
---------------------------------------------------------------------------



==========================
This Weeks Sponsor
New Moon Canaveral iQ
New Moon makes central deployment and 
management of server-based applications simple!
Now intelligent Printing with UniDriver!
See a demo at: http://www.newmoon.com/products/demo/

Other related posts:

  • » [THIN] Error code 5 when publishing content thru firewall