• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 684
  • Last Modified:

citrix xenapp5 problem

Hi Experts,
I have  installed a XENAPP5 server on a vm with win2008.
So far Citrix is working, internal.
But I cannot connect from external to my created desktops.
The link I have was working in the past, but now not anymore.
How to troubleshoot this error ?
0
Eprs_Admin
Asked:
Eprs_Admin
  • 14
  • 9
10 Solutions
 
Dirk KotteSECommented:
how do you connect to the desktop?
are you using WebInterface,VPN,CSG,CAG,... Firewall...,NAT?
you can try to telnet your Citrix-server at port 1494.
0
 
Eprs_AdminSystem ArchitectAuthor Commented:
I try with telnet but nothing happens
0
 
Eprs_AdminSystem ArchitectAuthor Commented:
yes we try to connect over the webinterface.
The first login is ok.
But when I click the Desktop Icon then the error 1030 pops up.
0
NFR key for Veeam Backup for Microsoft Office 365

Veeam is happy to provide a free NFR license (for 1 year, up to 10 users). This license allows for the non‑production use of Veeam Backup for Microsoft Office 365 in your home lab without any feature limitations.

 
vblazierCommented:
The Citrix Web Interface (CWI) runs over ports 80/443.  From what you conveyed,  http/https is configured properly on the firewall, which is why you're able to log in from the outside.  

Published Applications ("created desktops", as you say) use different ports than 80/443.  I suspect your firewall and CWI aren't configured properly for allowing traffic in/out using the proper ports.

Configure your firewall so that these ports are opened (NAT/PAT):

TCP 80, 443, 1494, 2598
UDP 1604

You will also need to configure the settings on your CWI site to accommodate translated access, for which you'll need to reference the Administrator's Guide for your version of CWI.  

Good luck.

~Victor Blazier
0
 
Eprs_AdminSystem ArchitectAuthor Commented:
when I connect, I can login.
When I click my desktop, this error pops up :

 xenapp5 error
0
 
Eprs_AdminSystem ArchitectAuthor Commented:
here is the detail text:

java.io.IOException: Server dropped connection
      at com.citrix.client.module.td.TransportDriver.run(Unknown Source)
      at java.lang.Thread.run(Unknown Source)
0
 
Dirk KotteSECommented:
try the native client.
the error messages from the native client are more usefull.

if you use NAT there are some more problems.
you need NAT for port 80/443 to reach the WI - this should work because you see the webpage.
then you has to configure address-translation at the WI as 1to1 or to use altaddr at the XenAppServer.
i need many more details about you accesss scenario to offer more help.
0
 
Eprs_AdminSystem ArchitectAuthor Commented:
what do you mean by native client ?
0
 
Dirk KotteSECommented:
if you see the java-error at the client side likely you use the java-client.
if you click the icon - you see a pop-up window with java-startup?

download the client for windows from here:
http://www.citrix.com/lang/English/lp/lp_2309126.asp

0
 
Eprs_AdminSystem ArchitectAuthor Commented:
same error with the web client - reciever 3.0
0
 
Eprs_AdminSystem ArchitectAuthor Commented:
yes I see this pop up from java, when trying to connect.
0
 
Eprs_AdminSystem ArchitectAuthor Commented:
hi dkotte:

the problem must be on the server.
Because I try to login to the xen desktop with localhost and I have the same error.

It has nothing to do with the firewall.

0
 
Dirk KotteSECommented:
hi,
try to disable the java client within the webinterface.
0
 
Eprs_AdminSystem ArchitectAuthor Commented:
we tried this, the native client and the java client not working.
Do you know how to repair it or put back to default settings ?
0
 
Eprs_AdminSystem ArchitectAuthor Commented:
Do you also know this command ?
keytool -import -trustcacerts -alias myrootcert -file c:\bin\rootcert.cer –keystore c:\Program Files\Java\j2re1.4.2_01\lib\security\cacerts

we cannot execute it, can you explain the command maybe ?
0
 
Dirk KotteSECommented:
... repair it:
- within the WI Configuration goto the site and select "repair site"
or create a new one and check if this will work.

... or reinstall the native client at the client-side

... within native client you should not need certificates within the java directory

?... you use private certs to accessing your infrastructure internaly?

 
0
 
Eprs_AdminSystem ArchitectAuthor Commented:
I already reinstalled the native client on the client.
We have the same problem with the native client.

I will try the repair site.

Do you know this : SSL handshake failed ?
0
 
Dirk KotteSECommented:
>hi dkotte:
>
>the problem must be on the server.
>Because I try to login to the xen desktop with localhost and I have the same error.
>
>It has nothing to do with the firewall.

at the top you say "So far Citrix is working, internal"

0
 
Dirk KotteSECommented:
>SSL handshake failed ?

you are using SecureGateway or AccessGateway?
0
 
Eprs_AdminSystem ArchitectAuthor Commented:
we are using Secure Gateway and I reinstalled it right now and configured it.
No also internal it is not working. I can reach the server from outside but my app or desktop will not open.
0
 
Dirk KotteSECommented:
but from inside you dont use the CSG?
0
 
Eprs_AdminSystem ArchitectAuthor Commented:
I don't know exactly.
How can I find out ?
0
 
Dirk KotteSECommented:
you can look to the WI-configuration.
there you should see if the CSG connection are configured.
 
0
 
Eprs_AdminSystem ArchitectAuthor Commented:
NO SOLUTION.
But thanks for the help.
We did a complete reinstallation of CITRIX XENAPP5 :-)
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

  • 14
  • 9
Tackle projects and never again get stuck behind a technical roadblock.
Join Now