[THIN] Re: Web interface and single sign on
- From: "Lee, David (STRATEGIC PROJECTS)" <David.Lee@xxxxxxxxxxxxxxx>
- To: "'thin@xxxxxxxxxxxxx'" <thin@xxxxxxxxxxxxx>
- Date: Fri, 3 Sep 2004 10:52:39 +0100
We're in the process of migrating from NDS and about 30 old Novell servers
to a new AD and Windows 200x infrastruture. Not sure I'll do any more with
the Novell side as we can use WI SSON as another carrot to encourage our
users to prepare for migration!
-----Original Message-----
From: Ron Oglesby [mailto:Roglesby@xxxxxxxxxxxx]
Sent: 03 September 2004 00:36
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Web interface and single sign on
Yeah that's an issue. Citrix doesn't much like the mixed environment thing.
I have never tried to get it to work the way you are (generally I am just to
sick of dealing with Netware). But I would be interested in what goes on
helping out if I can (via e-mail of course)
Ron
-----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf
Of Lee, David (STRATEGIC PROJECTS)
Sent: Thursday, September 02, 2004 5:13 AM
To: 'thin@xxxxxxxxxxxxx'
Subject: [THIN] Re: Web interface and single sign on
Thanks Ron, after messing around for a bit, I finally upgraded the client to
v8.0 and ensured SSON was enabled - this now works. However, many of our
client PCs still have the Novell client installed, which I can see is
passing NDS credentials. We do not use the Novell client on our Citrix
servers, so from the Citrix documentation, it seems more tinkering is needed
with appsrv.ini.....
-----Original Message-----
From: Ron Oglesby [mailto:Roglesby@xxxxxxxxxxxx]
Sent: 01 September 2004 22:05
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Web interface and single sign on
There are TWO parts to the single signon for Web Interface (cough Nfuse)
The first is your windows integration that just takes the client logon and
passes it to IIS and that gets passed to the XML service to get apps
The second is the ICA CLIENT running SSON service/application that passes
those same desktop credentials from the client to the MF server. (I think
they broke them up to use Kerberos authentication)
Anyway, most likely your client does not have SSON enabled (that little
check box when you install) and contrary to popular belief you can not just
add a couple of setting in your appsrv.ini YOU NEED TO INSTALL THIS and
possibly do the appsrv thing. I have seen it both ways.
Ron
-----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf
Of Marc-Andre Lapierre
Sent: Wednesday, September 01, 2004 11:58 AM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Web interface and single sign on
Are you using novell in your environment?
__________________________________________________________
Marc-André Lapierre
Consultant Systems & Infrastructures
514 977-6170
Email : malapierre@xxxxxxxxxxxxxxxx
-----Original Message-----
From: Lee, David (STRATEGIC PROJECTS) [mailto:David.Lee@xxxxxxxxxxxxxxx]
Sent: 1 septembre, 2004 11:02
To: Thin client listserve (E-mail)
Subject: [THIN] Web interface and single sign on
I am testing Web Interface 3.0 (cough! NFuse) on a new Windows 2003 server
for use with our Metaframe XPe FR2 server farm. All seems to work well, but
I am having a problem with the single sign on feature. As expected when I
browse to the WI page, my desktop logon credentials are being passed through
automatically and I receive my list of published applications. However,
when I click on any of the published applications, I get the standard
Windows 2000 prompt for my username, password and domain. If I set WI to
use explicit logons rather than single sign on, the published applications
launch without prompting. Any thoughts?
Thanks in advance
David Lee
********************************************************
This Weeks Sponsor triCerat:
Have you had your fill of printing support calls, unauthorized apps running
on unsecured Terminal Servers, profile headaches, and application
performance problems? Join us and learn how you can have a less demanding
on-demand enterprise!
http://www.tricerat.com/?page=events#register
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
***********************************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm
********************************************************
This Weeks Sponsor triCerat:
Have you had your fill of printing support calls, unauthorized apps running
on unsecured Terminal Servers, profile headaches, and application
performance problems? Join us and learn how you can have a less demanding
on-demand enterprise!
http://www.tricerat.com/?page=ents#register
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
***********************************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm
********************************************************
This Weeks Sponsor triCerat:
Have you had your fill of printing support calls, unauthorized apps running
on unsecured Terminal Servers, profile headaches, and application
performance problems? Join us and learn how you can have a less demanding
on-demand enterprise!
http://www.tricerat.com/?page=events#register
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
***********************************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm
********************************************************
This Weeks Sponsor triCerat:
Have you had your fill of printing support calls, unauthorized apps running
on unsecured Terminal Servers, profile headaches, and application
performance problems? Join us and learn how you can have a less demanding
on-demand enterprise!
http://www.tricerat.com/?page=ents#register
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
***********************************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm
********************************************************
This Weeks Sponsor triCerat:
Have you had your fill of printing support calls, unauthorized apps running
on unsecured Terminal Servers, profile headaches, and application
performance problems? Join us and learn how you can have a less demanding
on-demand enterprise!
http://www.tricerat.com/?page=events#register
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
***********************************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm
********************************************************
This Weeks Sponsor triCerat:
Have you had your fill of printing support calls, unauthorized apps running on
unsecured Terminal Servers, profile headaches, and application performance
problems? Join us and learn how you can have a less demanding on-demand
enterprise!
http://www.tricerat.com/?page=events#register
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
***********************************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm
Other related posts:
