Steve, apparently my hypothesis was wrong. The user logged in with Admin rights and the same problem occurred. I will need to remotely connect to her to try to figure this one out. Any other ideas? Thank you, Jim Medeiros Citrix Administrator GMAC Insurance (336) 770-2858 ________________________________ From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Steve Greenberg Sent: Monday, November 05, 2007 1:04 PM To: thin@xxxxxxxxxxxxx Subject: [THIN] Re: Logging in to the CAG It was sounding more and more like an endpoint issue, it will be interesting to see if that turns out to be the case.... Steve Greenberg Thin Client Computing 34522 N. Scottsdale Rd D8453 Scottsdale, AZ 85262 (602) 432-8649 www.thinclient.net steveg@xxxxxxxxxxxxxx ________________________________ From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Medeiros, Jim Sent: Monday, November 05, 2007 6:26 AM To: thin@xxxxxxxxxxxxx Subject: [THIN] Re: Logging in to the CAG Steve, I found out the other day that one of the users only had USER level privileges to her home computer. I want her to try with power user or admin rights to see if that helps. She has never used Citrix before and it may be an Active X issue. I will let you know how we make out. Thanks for the help thus far!!! Thank you, Jim Medeiros Citrix Administrator GMAC Insurance ________________________________ From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Steve Greenberg Sent: Friday, November 02, 2007 4:59 PM To: thin@xxxxxxxxxxxxx Subject: [THIN] Re: Logging in to the CAG Does this correspond to the user session that could not get in? Steve Greenberg Thin Client Computing 34522 N. Scottsdale Rd D8453 Scottsdale, AZ 85262 (602) 432-8649 www.thinclient.net steveg@xxxxxxxxxxxxxx ________________________________ From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Medeiros, Jim Sent: Friday, November 02, 2007 12:53 PM To: thin@xxxxxxxxxxxxx Subject: [THIN] Re: Logging in to the CAG Well I've gone through the CAG logs (we have 4 CAGS in a round robin setup) but I can't find anything that jumps out at me. There is not a lot of information online that I can find. There are some errors but I'm not sure what they mean: (11/01/07 17:14:04):L10:LOGSVRE:3390:65541:server:aacd::aac.c:1605:SESSINFO:28::Ch eck Redirect URL [/] : (11/01/07 17:14:04):L10:LOGSVRE:3390:65541:server:aacd::aac.c:1655:SESSINFO:28::Re direct URL [/] is not externally accesible, using default logon point [GMACILogonPoint].: (11/01/07 17:14:05):L10:LOGSVRE:3390:81926:server:aacd::aac.c:10391:SESSINFO:28::n ext page validation failed.: (11/01/07 17:14:05):L10:LOGSVRE:3390:81926:server:aacd::aac.c:10392:SESSINFO:28::E xpected page: Login.aspx?ff=full: (11/01/07 17:14:05):L10:LOGSVRE:3390:81926:server:aacd::aac.c:10394:SESSINFO:28::R equested page: https://x.x.x.x:0/CitrixSessionInit/DeployIcaClient.aspx?MASTER_SESSION_ ID=613d5655-47d6-8c64-55fe-40f93ef74692&CtxGwyTicket=AS%3bQGZZ7ZEWQFYPLZ 3O9XWE%3bC116BEBD254E53C01E5498E93B3EC26A&MASTER_CTX_PS_KEY=Vcyk3Bjy1CQd J%2bCITce2x33WQymwys4JAC&wsc=0&FullOutput=True&agcLaunched=False: (11/01/07 17:14:05):L10:LOGSVRE:3390:81926:server:aacd::aac.c:1605:SESSINFO:28::Ch eck Redirect URL [/CitrixSessionInit/DeployIcaClient.aspx?MASTER_SESSION_ID=613d5655-47d6 -8c64-55fe-40f93ef74692&CtxGwyTicket=AS%3bQGZZ7ZEWQFYPLZ3O9XWE%3bC116BEB D254E53C01E5498E93B3EC26A&MASTER_CTX_PS_KEY=Vcyk3Bjy1CQdJ%2bCITce2x33WQy mwys4JAC&wsc=0&FullOutput=True&agcLaunched=False] : (11/01/07 17:14:05):L10:LOGSVRE:3390:81926:server:aacd::aac.c:1655:SESSINFO:28::Re direct URL [/CitrixSessionInit/DeployIcaClient.aspx?MASTER_SESSION_ID=613d5655-47d6 -8c64-55fe-40f93ef74692&CtxGwyTicket=AS%3bQGZZ7ZEWQFYPLZ3O9XWE%3bC116BEB D254E53C01E5498E93B3EC26A&MASTER_CTX_PS_KEY=Vcyk3Bjy1CQdJ%2bCITce2x33WQy mwys4JAC&wsc=0&FullOutput=True&agcLaunched=False] is not externally accesible, using default logon point [GMACILogonPoint].: (11/01/07 17:14:06):L10:LOGSVRE:3390:81926:server:aacd::aac.c:10391:SESSINFO:28::n ext page validation failed.: (11/01/07 17:14:06):L10:LOGSVRE:3390:81926:server:aacd::aac.c:10392:SESSINFO:28::E xpected page: Login.aspx?ff=full: (11/01/07 17:14:06):L10:LOGSVRE:3390:81926:server:aacd::aac.c:10394:SESSINFO:28::R equested page: https://167.19.249.161:0/themes/default/style/default.css: (11/01/07 17:14:06):L10:LOGSVRE:3390:81926:server:aacd::aac.c:1605:SESSINFO:28::Ch eck Redirect URL [/themes/default/style/default.css] : (11/01/07 17:14:06):L10:LOGSVRE:3390:81926:server:aacd::aac.c:1655:SESSINFO:28::Re direct URL [/themes/default/style/default.css] is not externally accesible, using default logon point [GMACILogonPoint].: (11/01/07 17:16:07):L00:LOGSYSI:677:16384:pitboss:general::pb.c:859:SESSINFO:::per iodical dump of pitboss statistics to log file follows: (11/01/07 17:16:07):L00:LOGSYSI:677:16384:pitboss:general::pb.c:864:SESSINFO:::pit boss stats (general): 29157, 0, 0 (minutes lived, alarms, exits): (11/01/07 17:16:07):L00:LOGSYSI:677:16384:pitboss:general::pb.c:870:SESSINFO:::pit boss stats (clients): 5, 14, 0, 0 (spawned, registered, restarts, hangs): (11/01/07 17:16:07):L00:LOGSYSI:677:16384:pitboss:general::pb.c:875:SESSINFO:::pit boss stats (requests): 399991, 0, 0 (complete, errors, short reads): (11/01/07 17:16:07):L00:LOGSYSI:677:16384:pitboss:general::pb.c:880:SESSINFO:::pit boss stats (requests): 399965, 0, 13 (heartbeats, deletes, adds): (11/01/07 17:16:07):L00:LOGSYSI:677:16384:pitboss:general::pb.c:885:SESSINFO:::pit boss stats (requests): 12, 1, 0 (signals matched, signals unmatched, unknown): (11/01/07 17:17:47):L10:LOGSVRE:3390:98311:server:aacd::aac.c:1605:SESSINFO:28::Ch eck Redirect URL [/] : (11/01/07 17:17:47):L10:LOGSVRE:3390:98311:server:aacd::aac.c:1655:SESSINFO:28::Re direct URL [/] is not externally accesible, using default logon point [GMACILogonPoint].: (11/01/07 17:17:48):L10:LOGSVRE:3390:81926:server:aacd::aac.c:10391:SESSINFO:31::n ext page validation failed.: (11/01/07 17:17:48):L10:LOGSVRE:3390:81926:server:aacd::aac.c:10392:SESSINFO:31::E xpected page: Login.aspx?ff=full: (11/01/07 17:17:48):L10:LOGSVRE:3390:81926:server:aacd::aac.c:10394:SESSINFO:31::R equested page: https://x.x.x.x:0/CitrixSessionInit/DeployIcaClient.aspx?MASTER_SESSION_ ID=601dace8-2302-e761-aa8d-8cfa71591f51&CtxGwyTicket=AS%3bQGZZ7ZEWQFYPLZ 3O9XWE%3b249A2F2D7594AF01B2E1963CF37059F0&MASTER_CTX_PS_KEY=kuraWkDAFV7V BhYftw9QA6ijohuBSNVO73&wsc=0&FullOutput=True&agcLaunched=False: (11/01/07 17:17:48):L10:LOGSVRE:3390:81926:server:aacd::aac.c:1605:SESSINFO:31::Ch eck Redirect URL [/CitrixSessionInit/DeployIcaClient.aspx?MASTER_SESSION_ID=601dace8-2302 -e761-aa8d-8cfa71591f51&CtxGwyTicket=AS%3bQGZZ7ZEWQFYPLZ3O9XWE%3b249A2F2 D7594AF01B2E1963CF37059F0&MASTER_CTX_PS_KEY=kuraWkDAFV7VBhYftw9QA6ijohuB SNVO73&wsc=0&FullOutput=True&agcLaunched=False] : (11/01/07 17:17:48):L10:LOGSVRE:3390:81926:server:aacd::aac.c:1655:SESSINFO:31::Re direct URL [/CitrixSessionInit/DeployIcaClient.aspx?MASTER_SESSION_ID=601dace8-2302 -e761-aa8d-8cfa71591f51&CtxGwyTicket=AS%3bQGZZ7ZEWQFYPLZ3O9XWE%3b249A2F2 D7594AF01B2E1963CF37059F0&MASTER_CTX_PS_KEY=kuraWkDAFV7VBhYftw9QA6ijohuB SNVO73&wsc=0&FullOutput=True&agcLaunched=False] is not externally accesible, using default logon point [GMACILogonPoint].: (11/01/07 17:17:50):L10:LOGSVRE:3390:98311:server:aacd::aac.c:10391:SESSINFO:28::n ext page validation failed.: Thank you, Jim Medeiros Citrix Administrator GMAC Insurance (336) 770-2858 ________________________________ From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Steve Greenberg Sent: Friday, November 02, 2007 3:46 PM To: thin@xxxxxxxxxxxxx Subject: [THIN] Re: Logging in to the CAG So no errors at all in CAG and absolutely users from both OU's work the rest of the time? Have these users tried it from any other remote machines? Steve Greenberg Thin Client Computing 34522 N. Scottsdale Rd D8453 Scottsdale, AZ 85262 (602) 432-8649 www.thinclient.net steveg@xxxxxxxxxxxxxx ________________________________ From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Medeiros, Jim Sent: Friday, November 02, 2007 11:33 AM To: thin@xxxxxxxxxxxxx Subject: [THIN] Re: Logging in to the CAG Yes, same realm. I was trying to say in the last email that I have users in both OUs that make up the 100s that are working fine. Thank you, Jim Medeiros Citrix Administrator GMAC Insurance (336) 770-2858 ________________________________ From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Steve Greenberg Sent: Friday, November 02, 2007 2:34 PM To: thin@xxxxxxxxxxxxx Subject: [THIN] Re: Logging in to the CAG Are they all using the same realm, i.e. default? The LDAP support in CAG has some limitations about what OU's it can see from a realm, it doesn't seem to be able to span down or across requiring multiple realms or a RADIUS server in between... Steve Greenberg Thin Client Computing 34522 N. Scottsdale Rd D8453 Scottsdale, AZ 85262 (602) 432-8649 www.thinclient.net steveg@xxxxxxxxxxxxxx ________________________________ From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Medeiros, Jim Sent: Friday, November 02, 2007 11:10 AM To: thin@xxxxxxxxxxxxx Subject: [THIN] Re: Logging in to the CAG We have two OUs for User objects. These are in the same OU but all the other users that work are located in one of the two OUs. I hope that makes sense. Thank you, Jim Medeiros Citrix Administrator GMAC Insurance (336) 770-2858 ________________________________ From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Steve Greenberg Sent: Friday, November 02, 2007 1:52 PM To: thin@xxxxxxxxxxxxx Subject: [THIN] Re: Logging in to the CAG Are those users in the same OU as everyone else that works? Steve Greenberg Thin Client Computing 34522 N. Scottsdale Rd D8453 Scottsdale, AZ 85262 (602) 432-8649 www.thinclient.net steveg@xxxxxxxxxxxxxx ________________________________ From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Medeiros, Jim Sent: Friday, November 02, 2007 10:13 AM To: thin@xxxxxxxxxxxxx Subject: [THIN] Re: Logging in to the CAG The very first CAG, they log in and then they are brought right back to that very first CAG after a few seconds. They see a "License Info" page after log in. I noticed this happening for me too, but it happens so fast that most people don't see it. Thank you, Jim Medeiros Citrix Administrator GMAC Insurance (336) 770-2858 ________________________________ From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Steve Greenberg Sent: Friday, November 02, 2007 1:24 PM To: thin@xxxxxxxxxxxxx Subject: [THIN] Re: Logging in to the CAG What windows do they get exactly? Just the very first CAG authentication or do they actually see WI? Steve Greenberg Thin Client Computing 34522 N. Scottsdale Rd D8453 Scottsdale, AZ 85262 (602) 432-8649 www.thinclient.net steveg@xxxxxxxxxxxxxx ________________________________ From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Medeiros, Jim Sent: Friday, November 02, 2007 10:01 AM To: thin@xxxxxxxxxxxxx Subject: [THIN] Re: Logging in to the CAG Yes, we have 100's of users who access Citrix through our CAG (w/AAC) daily. For some reason these two users have not been able to (from their home computers - both WINXP with IE 6 on broadband connections). Very strange! No errors that I can find. Thanks for your help!!! Jim Medeiros Citrix Administrator GMAC Insurance (336) 770-2858 ________________________________ From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Steve Greenberg Sent: Friday, November 02, 2007 1:13 PM To: thin@xxxxxxxxxxxxx Subject: [THIN] Re: Logging in to the CAG Did you configure LDAP? Steve Greenberg Thin Client Computing 34522 N. Scottsdale Rd D8453 Scottsdale, AZ 85262 (602) 432-8649 www.thinclient.net steveg@xxxxxxxxxxxxxx ________________________________ From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Medeiros, Jim Sent: Friday, November 02, 2007 9:49 AM To: thin@xxxxxxxxxxxxx Subject: [THIN] Re: Logging in to the CAG Microsoft AD. CAG going through AAC to WI. Thank you, Jim Medeiros Citrix Administrator GMAC Insurance (336) 770-2858 ________________________________ From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Steve Greenberg Sent: Friday, November 02, 2007 12:34 PM To: thin@xxxxxxxxxxxxx Subject: [THIN] Re: Logging in to the CAG What type of authentication are you using on the CAG? Steve Greenberg Thin Client Computing 34522 N. Scottsdale Rd D8453 Scottsdale, AZ 85262 (602) 432-8649 www.thinclient.net steveg@xxxxxxxxxxxxxx ________________________________ From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Medeiros, Jim Sent: Thursday, November 01, 2007 2:51 PM To: thin@xxxxxxxxxxxxx Subject: [THIN] Logging in to the CAG I have two users now that cannot access our Citrix farm from home. Both are able to get to our web page that points to our CAG but when they log in it just brings them back to the log in page. When they are on the network at work they can login fine. Anyone have any ideas? Thank you, Jim Medeiros Citrix Administrator GMAC Insurance (336) 770-2858 ------------------------------------------------------------------------ -------------------------------- Note: The information contained in this message may be privileged and confidential and protected from disclosure. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by replying to the message and deleting it from your computer. Thank you. ------------------------------------------------------------------------ --------------------------------