Forum Discussion

George_33482's avatar
George_33482
Icon for Nimbostratus rankNimbostratus
May 02, 2017

Citrix StoreFront 3.7 with APM issue

Hello, I am deploying Citrix StoreFront 3.7 with APM 12.1.2. I deployed the configuration as per the latest iapp "; and I am facing the issue of logout message immediately after authentication. when I access the ip address of the VS related to the StoreFront, I get authenticated against AD successfully, and since the app deploys SSO as well, I get the a pop window "your login has expired. please log on again to continue".

 

I removed one of the irules called "citrix_allow_and_redirect" in the VS since it was causing complication issues and because the second one called "citrix_loggedout" works the same as the removed irule.

 

After troubleshooting, I suspected that there is something missing in the deployment of the Citrix (another team), especially when F5 is in the path, because access the StoreFront website directly works properly without any problems. But I just wanted to check if anyone has encountered such issue before.

 

Whether I use SSO or not (removing the SSO from VPE) and entering manually the credentials to access the storefront, after i login into the F5 default page, I am faced with the logon expiration popup window.

 

any ideas are welcome.

 

Regards, George

 

application delivery
BIG-IP Access Policy Manager (APM)
  • JG's avatar
    JG
    Icon for Cumulonimbus rankCumulonimbus
    May 03, 2017

    Yes, I ran into problems with v2.4.0 as well. The two irules conflict with each other and cause errors. The first irule is really redundant and should be removed.

    I also tried v2.4.1rc1. It seems to be better but there is also an intermittent problem. I added the following to the irule as recommended by F5 Support:

    when CLIENT_ACCEPTED {
          ACCESS:restrict_irule_events enable
}

    My support case is still open.

  • NADER_HUSSEIN_3's avatar
    NADER_HUSSEIN_3
    Icon for Nimbostratus rankNimbostratus
    Jun 08, 2017

    DID you configure The STA please make sure the same ip added to on both F5 and Citrix example ADDRESS of Delivery Server/scripts/ctxsta.dll

     

    What are the URLs of the Citrix Secure Ticket Authority Servers

     

  • JG's avatar
    JG
    Icon for Cumulonimbus rankCumulonimbus
    Jun 23, 2017

    Did you configure the F5 to take over the display task or did you pass it to Citrix web interface servers to do it?

     

    Citrix does a call-back to the URL hosted on the F5 after user authentication. Make sure Citrix is configured to use the correct hostname (on the F5) in its configuration for that call-back.