Pass through authentication from Web client with Novell client 4.9x to MPS4: Citrix, Novell, Microsoft, Metaframe Presentation Server 4, Web client 8, pass through authentication

Pass through authentication from Web client with Novell client 4.9x to MPS4

Asked by: vladh

Hi everyone.
Situation:
A Windows XP workstation with Novell Client 4.9, NDS being primary logon provider, member of AD domain (2003) as a secondary logon provider, with Citrix Web Client 8 trying to access an application on Metaframe Presentation Server 4.
ONLY Web client is installed on workstations; NO network neighborhood or full citrix client (and that's not changing).
We need to enable a pass-through authentication so that a user clicks on an app icon and gets logged in with domain credentials and gets access to the application right away. Currently we have Novell prompt coming up; checking "workstation only" and entering Windows domain credentials will bring the user to the application.
We need to bypass the Novell prompt; we had a workstation working that way (so we know it can be done); unfortunately the workstation was reimaged before we could find out how it was configured.
Any pointers will be greatly appreciated.
Thanks
Vlad

Instant Access to this Solution

Plus...

30 Day FREE access, no risk, no obligation

Collaborate with the world's top tech experts

Unlimited access to our exclusive solution database

Never be left without tech help again

Trusted by hundreds of thousands everyday for fast, accurate and reliable tech support.

"The time we save is the biggest benefit of Experts Exchange to Warner Bros. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange." Mike Kapnisakis, Warner Bros.

"Our team likes having a resource that is more secure than just using Google and most experts using this service really know their stuff. It's nice to look here first versus using Google." Dayna Sellner, Lockheed Martin

"Anytime that I've been stumped with a problem, 9 out of 10 times Experts Exchange has either the accepted solution or an open discussion of the potential solution to the problem." Kenny Red, eBay Inc.

See what Experts Exchange can do for you.

Got a question?

We've got the answer.

Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.

Screenshot of Experts Exchange Knowledgebase

Need individual assistance?

Our experts are ready to help.

If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.

Want to learn from the best?

Read articles from industry experts.

Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.

Working on a long term project?

Store your work and research.

Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.

Join the Community

Give a Little. Get a Lot.

Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.

Dear experts,

thank you for your input. While your suggestions are interesting and valuable, the problem turned out to be not related to Novell client at all. It turns out that Citrix web client does not support pass-through authentication on its own; the code needed to make it happen actually resides in Program Neighbourhood agent. Our test workstation that "worked" must have had it installed contrary to the assurances of the admin running the testing.
Anyway, the solution was to install PNAgent WITH pass through authentication enabled and make the following modifications to all APPSRV.INI files:
SSOnUserSetting=On
EnableSSOnThruICAFile=On
On the citrix server side, we needed to allow pass-though authentication and check the box allowing clients to dictate authentication session parameters
Then the clients' ICA files were modified to add the following:
SSONCredentialType=NT
UseLocalUserAndPassword=On
AutoLogonAllowed=On

Note that if I wanted to authenticate against eDirectory I would set SSONCredentialType=NDS or if I had no preference against which directory to authenticate (the default authenticator would pick it up) then I would set SSONCredentialType=Any

All the changes including installing the Citrix client are scripted and invisible to end users.
Vlad

Question

Pass through authentication from Web client with Novell client 4.9x to MPS4

Subscribe now for full access to Experts Exchange and get

Instant Access to this Solution

Citrix, Novell, Microsoft

Metaframe Presentation Server 4, Web client 8