Can’t get rid of Novell login screen when using pass-threw authenticat 1

[starbow]

I am trying to stream line the authentication process when a user logs in to Citrix MetaFrame FR1.

We are using Novell and Windows Domain authentication. The terminal server has Novell Client 4.83 installed and seems to be talking to the NDS with out a problem.

The problem is that when ever an application is started from Program Neighbourhood or Nfuse the server brings up a Netware login screen and the user has to put their user name and pass word in again before the application will start.

I have scoured the web for a solution and have found a number of references to a registry setting TSClientAutoAdminLogon. And this is definitely set to 1.

I have also checked every thing else I could find to check and still have no joy. The only thing that I have found that stops the problem is allowing anonymous logon to the application. Clearly this totally breaks security.

If any one can help me I am willing to give up my first born at this stage.

I am new to citrix and may have missed something obvious to you out their.

Thanks for any help.

 

[Jontmke]

We never could get this to work. The problem is context. Nfuse will pass the user name and password but will not send the context.
If you make your users log in with the full context then it might work, we never tried that.
Example: jon.systems.users.mytree instead of just jon.

So our users always have to log in.

Jon

There is much pleasure to be gained from useless knowledge. (Bertrand Russell)

 

[BeerGood]

You might want to check out

http://www.citrix.com

- CTX368624 (currently at

http://support.citrix.com/kb/entry!default.jspa?categoryID=118&entryID=1789)

Specifically:


Pass-through authentication of Windows domain credentials does not work from a Windows NT/2000/XP workstation/server when the Novell Client is installed.

The Citrix ICA Win32 Client Version 1050 or later fails to pass the user’s Windows domain credentials when setting the SONCredentialType=NT under the [wfclient] section of the Appsrv.ini file.

To reproduce the issue:

1. Log on to a Windows NT/2000/XP workstation/server or MetaFrame server with the Novell NetWare Client Version 4.83 or later installed and the Citrix ICA Win32 Client Version 1050 or later installed.

2. Configure the Citrix ICA Win32 Client to use Single Sign-On. If it is not already set, you need to log off and back on again.

3. Publish an application to Windows users (Windows NT or Active Directory).

4. Create a connection to the published application either through an application set or custom ICA connection.

5. Connect to the published application.

6. A custom connection displays the Windows NT GINA. An application set connection displays the Program Neighborhood Windows logon box.

Workaround

Move the SSONCredentialType=NT setting from the [wfclient] section of the Appsrv.ini file to the [ApplicationServers] section. Below is an example of where to place the setting:

[WFClient]

Version=2

[Smartcard]

[ApplicationServers]

Test=

[Test]

TransportDriver=TCP/IP

SSONCredentialType=NT


Cheers

 

[Jontmke]

I think the issue is the Novell credentials. If you put the user name and password in Program neighborhood or use the pass through, it only will pass that info.
But, in Novell it uses contexts and that is not passed so the automatic login does not work.

Jon

There is much pleasure to be gained from useless knowledge. (Bertrand Russell)

 

[starbow]

Thanks for every ones help but I still can’t seem to get this working.

It seems to pass the information threw ok to the Citrix box because when I add the following to the apsrv.ini file under the ICA Client directory in the user profile on the WS

SSOnCredentialType=NT
SSOnUserSetting=On

It gets threw to the Application Set without asking for any login info from the user. So pass-threw must be passing on some credentials.

But if you run any of the published applications it pops up with the Novell Logon screen.

The screen has no user name or password info but it dose have the correct context and tree in it if you hit the advanced tab and have a look.

And when you type in the user name and pw for the user. (which matches the NT domain user name and pw) it runs the application without a problem.

If this only happened once then I wouldn’t care but it happens every time you run an application.

If any one has any further thoughts it would be appreciated.