asked on

Adding multiple domains to Domain Restrictions on Citrix Web Interface server

Hi All

We are running Citrix 4.5 Enterprise.

We have multiple domains in our forest. I'd like all domains to be able to log onto our Citrix web interface server.

Since we have about fifteen domains, is there any difference as to what order I add them in the Properties for Domain Restrictions on the Web Interface server? Or will alphabetical work fine?

Cheers

ASKER CERTIFIED SOLUTION

Carl Webster

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

kam_uk

ASKER

Hi Carl - why would you do that, out of interest? So it's easier for the users - i.e. they have less further to look within the drop down box when logging in?

The order I list the domains is the order they appear in the drop down on the actual Web Interface?

Carl Webster

Yep, anything to keep users from complaining. I do believe so. I am testing XenServer 5 right now and waiting on UPS to bring me a replacement HD. So I can't power up my lab to test that.

kam_uk

ASKER

Thanks Carl...

Out of interest, how does Citrix query AD? So - for instance - my forest is kam.com. I have uk.kam.com, us.kam.com and japan.kam.com domains...the citrix farm is in the uk domain.

Within Domain Restrictions, I allow any domains...

But if someone from Japan logs on, how will Citrix find their username and password? I don't recall setting an LDAP/DC for Citrix to query?

Carl Webster

When the user logs in via the Web Interface (WI), the WI communicates with the XML Broker on the server(s) you configured for the site, the XML Broker uses the CTXGINA.dll to test the login credentials, if the creds work then the process continues else the user is returned to the log on screen.