Secure ticket authority Citrix Xenapp 6.5 and web interface
Hi,
We have a Citrix secure gateway in comination with web interface 5.3 and it works fine. We host two sites. One is connected to a Xenapp 5.x environment with a secure ticket authority on a Xenapp 5.x server. The other site is connected to a Xenapp 6.5 server and that is working fine in combination with a xenapp 5.x secure ticket authority but when i connect to a Xenapp 6.5 secure ticket authority it is not working. In the eventvwr i see messages like "SSL handshake from client failed."and "Client IP sent bad ticket, connection dropped." and "Incoming Citrix Gateway Protocol downstream data could not be processed." What is wrong?
We have a Citrix secure gateway in comination with web interface 5.3 and it works fine. We host two sites. One is connected to a Xenapp 5.x environment with a secure ticket authority on a Xenapp 5.x server. The other site is connected to a Xenapp 6.5 server and that is working fine in combination with a xenapp 5.x secure ticket authority but when i connect to a Xenapp 6.5 secure ticket authority it is not working. In the eventvwr i see messages like "SSL handshake from client failed."and "Client IP sent bad ticket, connection dropped." and "Incoming Citrix Gateway Protocol downstream data could not be processed." What is wrong?
Double check your WI config for the XA6.5 farm and confirm that the appropriate server(s) are listed as the STA(s). It sounds like there might just be an error here.
ASKER
It is still not working. How can i check if a server is a STA and how can i check that it is working?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
I have just used the medevac tool form Citrix and when i perform a xml ticketing test a see the message "Failure unspecified" so the sta is not working but why.
runs XML/STA IIS integrated or standalone (changed XML-Port "ctxxmlss.exe")?
with IIS integration you have a log file configured within c:\inetpub\Scripts\CtxSta.
with IIS integration you have a log file configured within c:\inetpub\Scripts\CtxSta.
ASKER
Strange, i don't see the scripts directory in c:\inetpub.
Might this be the issue:
http://blog.samkendall.net/2012/01/06/fixed-citrix-xml-service-issue-after-fresh-xenapp-6-5-install/
Might this be the issue:
http://blog.samkendall.net/2012/01/06/fixed-citrix-xml-service-issue-after-fresh-xenapp-6-5-install/
possible ...
do you check "integrate XML with IIS" while installing XenApp?
do you check "integrate XML with IIS" while installing XenApp?
ASKER
In the Citrix Web Interface Management Console, in the Secure Access Settings the Secure Ticket Authority URL was not the same as in the Secure GateWay Configuration.
When we added the same Server(URL) we could login with the new Servers' STA ID.
When we added the same Server(URL) we could login with the new Servers' STA ID.
ASKER
I've requested that this question be closed as follows:
Accepted answer: 0 points for pkfwallast's comment #a40044568
for the following reason:
no one pointed me that those two had to be the same Servers/URL's
Accepted answer: 0 points for pkfwallast's comment #a40044568
for the following reason:
no one pointed me that those two had to be the same Servers/URL's
see my Post ... by: dkottePosted on 2014-02-05 at 14:14:25 ID: 39835402
"all STA's used within a WebInterface Configuration should be listed within the CSG-Config."
"all STA's used within a WebInterface Configuration should be listed within the CSG-Config."
see my Post ... by: dkottePosted on 2014-02-05 at 14:14:25 ID: 39835402
"all STA's used within a WebInterface Configuration should be listed within the CSG-Config."
"all STA's used within a WebInterface Configuration should be listed within the CSG-Config."
Also, consider moving to storefront as web interface is going away.