Forum Discussion
Nimbostratustrouble replacing NetScaler for AccessGateway with F5 APM
I'm running 12.0.3, trying to replace my Citrix Netscaler w/ Citrix VDI iApp 2.4. I have XenApp 6.5, StoreFront 3.0 and 3.6 (trying to get either one to work, I don't care which one I end up with).
I've gone through the iApp, everything looks, feels, seems right. I've tried ssl offloading and bridging, tried having a different fqdn for the internal StoreFront server from the F5 virtual server, and having the same. But everything after I logon via the F5 form in my browser, I see the background images load for storefront, and get a message "Cannot get your apps from the store." with an OK button.
I increased the APM logging, I see these lines at the bottom of the log for my session.
Thoughts?
2016-12-02 15:44:51 /Common/xxxxlink.xxxxga.com.app/xxxxlink.xxxxga.com:Common:a9c02a33: Session variable 'session.rest.requestdomain' set to '' 2016-12-02 15:44:51 /Common/xxxxlink.xxxxga.com.app/xxxxlink.xxxxga.com:Common:a9c02a33: Session variable 'session.rest.requesttype' set to '' 2016-12-02 15:44:51 /Common/xxxxlink.xxxxga.com.app/xxxxlink.xxxxga.com:Common:a9c02a33: Session variable 'session.rest.username' set to '' 2016-12-02 15:44:51 /Common/xxxxlink.xxxxga.com.app/xxxxlink.xxxxga.com:Common:a9c02a33: Session variable 'session.sso.token.last.password' set to '*****' 2016-12-02 15:44:51 /Common/xxxxlink.xxxxga.com.app/xxxxlink.xxxxga.com:Common:a9c02a33: Session variable 'session.sso.token.last.username' set to 'xxxxGA\jgrimme' 2016-12-02 15:44:51 /Common/xxxxlink.xxxxga.com.app/xxxxlink.xxxxga.com:Common:a9c02a33: metadata len 508 2016-12-02 15:44:51 /Common/xxxxlink.xxxxga.com.app/xxxxlink.xxxxga.com:Common:a9c02a33: checking start uri match, start uri: '/Citrix/citrixtestWeb/ExplicitAuth/Login', request: '/Citrix/citrixtestWeb/' 2016-12-02 15:44:51 /Common/xxxxlink.xxxxga.com.app/xxxxlink.xxxxga.com:Common:a9c02a33: no start uri match 2016-12-02 15:44:51 /Common/xxxxlink.xxxxga.com.app/xxxxlink.xxxxga.com:Common:a9c02a33: metadata len 508 2016-12-02 15:44:51 /Common/xxxxlink.xxxxga.com.app/xxxxlink.xxxxga.com:Common:a9c02a33: checking start uri match, start uri: '/Citrix/citrixtestWeb/ExplicitAuth/Login', request: '/Citrix/citrixtestWeb/custom/style.css' 2016-12-02 15:44:51 /Common/xxxxlink.xxxxga.com.app/xxxxlink.xxxxga.com:Common:a9c02a33: no start uri match 2016-12-02 15:44:51 /Common/xxxxlink.xxxxga.com.app/xxxxlink.xxxxga.com:Common:a9c02a33: metadata len 508 2016-12-02 15:44:51 /Common/xxxxlink.xxxxga.com.app/xxxxlink.xxxxga.com:Common:a9c02a33: checking start uri match, start uri: '/Citrix/citrixtestWeb/ExplicitAuth/Login', request: '/Citrix/citrixtestWeb/custom/script.js' 2016-12-02 15:44:51 /Common/xxxxlink.xxxxga.com.app/xxxxlink.xxxxga.com:Common:a9c02a33: no start uri match 2016-12-02 15:44:51 /Common/xxxxlink.xxxxga.com.app/xxxxlink.xxxxga.com:Common:a9c02a33: metadata len 508 2016-12-02 15:44:51 /Common/xxxxlink.xxxxga.com.app/xxxxlink.xxxxga.com:Common:a9c02a33: checking start uri match, start uri: '/Citrix/citrixtestWeb/ExplicitAuth/Login', request: '/Citrix/citrixtestWeb/custom/strings.en.js' 2016-12-02 15:44:51 /Common/xxxxlink.xxxxga.com.app/xxxxlink.xxxxga.com:Common:a9c02a33: no start uri match 2016-12-02 15:44:51 /Common/xxxxlink.xxxxga.com.app/xxxxlink.xxxxga.com:Common:a9c02a33: metadata len 508 2016-12-02 15:44:51 /Common/xxxxlink.xxxxga.com.app/xxxxlink.xxxxga.com:Common:a9c02a33: checking start uri match, start uri: '/Citrix/citrixtestWeb/ExplicitAuth/Login', request: '/Citrix/citrixtestWeb/Home/Configuration' 2016-12-02 15:44:51 /Common/xxxxlink.xxxxga.com.app/xxxxlink.xxxxga.com:Common:a9c02a33: no start uri match
9 Replies
Hi Jason,
Is your remote desktop resource pointing toward the connection brokers or the storefront server(s)? (Access Policy ›› Application Access : Remote Desktops : Remote Desktops)
Cheers,
Kees
Jason_GrimmeHi Kees, I actually don't have anything in there, should I? I've not seen anything about that, and I'm not even getting that far yet, still trying to enumerate my apps from StoreFront :)
It's looking to me like I'm not hitting the 'start uri' for the SSO, not sure what may be a miss, I've looked through the manual configuration tables in the iApp and all looks solid, but perhaps the 'start URI' needs to be triggered by the logon form?
Hi Jason,
Sorry, now I see your running in LTM+APM mode. Your right, the "start URI" should be the uri of the storefront login page.
SSO is looking for '/Citrix/citrixtestWeb/ExplicitAuth/Login' but this uri is never presented by storefront. I think it should look like: /Citrix/XenApp/auth/login.aspx
Cheers,
Kees
Manuel_Cristob2Hi Kees, Did you get an answer on this? I am going thru the same issue now
Hi Manuel,
No I did not. What does your APM logging (debug on SSO )say??
Cheers,
Kees
- Manuel_Cristob2
can you try this debugging?
tmsh modify sys dblog.accesscontrol.level{ value “debug” }
and tmsh modify sys dblog.vdi.level{ value “debug” }
Hi Manual,
I think we got mixed up. I am not the one asking the question, I tried to help Jason but he stopped responding.
So I can help you with your issue.
Cheers,
Kees
- Jason_Grimme
sorry I didn't mean to disappear or keep you hanging, just decided to keep my NetScalers as they were much simpler for this function :)
Hi Jason,
No problem. I am glad you got it worked out (with the wrong devices ;-) )
Cheers,
Kees
