Citrix Installation and Configuration-II

Citrix Installation and Configuration-1

Citrix Installation and Configuration-III

Hello Professionals,
In previous blog, have installed Citrix Xen App with basic configuration and were at this stage.
There are different tabs which shows different information about XenApp services and configuration.

 This Hotfix management tab shows information about XenApp patching. A patch details will show here if any latest patch is released recently.

Now will start addition/ creation and advanced configuration from this dashboard.
To start it it need to run and discovery command that helps further for adding and configuring of sites and services.

here will select Active Directory for Single Sign-On environment. 

 After next got this error. To troubleshoot this issue gone through with so  many events and logs.Then finally one thing remind me  pre-requisite step before running this run and discovery command.

These configuration should be done with schema administrator privileges its mandatory to run the schema prep and domain prep command before configuration.This should be done from Citrix server and make sure not to perform from any of your Domain Controller.
this tools can be found on Citrix installtion drive\Suppor\Password_Manager\Tools
Before running schemaprep command, run this command with admin access on command prompt
regsvr32 schmmgmt.dll
then
ServerManagerCmd -i RSAT-ADDS 
D:\Support\Password_Mamager\Tools\CtxSchemaPrep
D:\Support\Password_Manager\Tools\CtxDomainPrep and after it ask to reboot the server.
There are steps which i follow and got jump in to different issue. I run SchemaPrep and DomainPrep command it showing error for FSMO Server and domain controller connectivity issue. I found replication issue because for this Schema and Domain command a user ID should have Schema Admin access to Domain, but Id was not showing to any other controller. It took me 45 minute to replicate all the data forcefully and even Active directory user and computer console was not opening on citrix installed server. so i run the below command to check the replication status and force to replicate. As we run the Schema preparation and domain preparation command on the citrix server its very necessary that replication should be perfect.
 REPADMIN /SHOWREPS 
 REPADMIN /SHOWREPL
 REPADMIN /SYNCALL
once replication done both command run properly. So have learnt another pre-requisite that Active Directory Replication should work fine before you run the SchemaPrep and DomainPrep for XenApp further configuration.

and after that all goes fine.

Citrix Web interface: is a sharing connctor in farms that provide a centralized access for application which are on different farms. Its recommended to be hosted on dedicated web servers. XenApp support AD FS and recommended and trusted with Citrix web interface when its being used by different organization.Web Interface is configured in Infrastructure setup to user Access gateway.
Now we are moving with creation of XenApp Sites and XenApp Services from XenApp Dashboard.

 

 first configure the web sites, where it start wih adding the server and farm

there are different options available for configuring authentication method

Windows supports two authentication protocols, Kerberos and NTLM, so applications such as Windows Explorer, Internet Explorer, Mozilla Firefox, Apple Safari, Google Chrome, Microsoft Office, and others, can use Windows passthrough authentication to access network resources without explicit user authentication prompts.When Kerberos pass-through authentication is used to start a XenApp session, there are technical limitations that may affect application behaviour. Applications running on XenApp that depend on the NTLM protocol for authentication generate explicit user authentication prompts or fail. Most applications and network services that support Windows pass-through authentication accept both Kerberos and NTLM protocols, but some do not. In addition, Kerberos does not operate across certain types of domain trust links in which case applications automatically use the NTLM protocol. However the NTLM protocol does not operate in a XenApp session that is started using the Kerberos passthrough authentication, preventing applications that cannot use Kerberos from authenticating silently. Kerberos pass-through authentication for applications expires if the XenApp session is left running for a very long time (typically one week) without being disconnected and reconnected. Kerberos is based on security tickets issued by domain controllers, which impose a maximum refresh period (typically one week). When the maximum refresh period has ended, Windows obtains a new Kerberos ticket automatically by using the cached network credentials that are required for the NTLM protocol. However, these network credentials are not available when the XenApp session was started using Kerberos pass-through authentication.
If you configure both smart card and explicit authentication, users are initially prompted to log on using their smart cards and PINs but have the option to select explicit authentication if they experience any issues with their smart cards.
Its recommended to use passthrough authentication for access scenarios of internal users on managed devices. and if windows is not configured with SSO it will automatically shift to Explicit authentication.
Here you can restrict the domain, if you want to allow to any specific domain only and if you limited the access for a specific domain, it can be changed in future(will share you the steps in next article).

Continued with Full Logon Screen.

in this option, its very much clear why are admins moving with on-line option

Will star with site now

 

Added Citrix installed server, i have only one right now.

 

And once done with Site and services, you can some new tabs and option under SSO with Default Policy and Domain Policy.

Will go through with more points in coming blog. Any query or question, please comment, we are very much available to listen and solve.

Dont let sleep your zeal to learn and earn.

                                                   

Citrix Installation and Configuration-1 

Citrix Installation and Configuration-III