- This topic has 10 replies, 3 voices, and was last updated 6 years, 6 months ago by
.
-
Posts
-
First – I’m a complete NOOB on using Wyse terminals. We have client that needs to have their T10 (build 8.0_505) winterms connect to a XenApp desktop through our Netscaler 10.5 VPX.
So far, every configuration I’ve tried has returned a “Citrix sign-on failed” – and I’ve tried about 2 dozen variations of the wnos.ini file. I have managed to get our CA cert loaded, but that’s about the only sign of progress.
Opened a ticket with Citrix, they checked the netscaler configuration, then blew me off with instructions to call Wyse (not really an option, we don’t own the thin clients) – we did confirm that we can logon and open the ./pnagent/config.xml file through a browser.
Not even sure where to start troubling shooting it.
Let me start with a dumb question… is it pnliteserver=https://host.domain.com or pnliteserver=https://host.domain.com/citrix/pnagent/config.xml ?
I have created a document which explains step by step all the configuration needed to
– setup NS 10.5
– configure it
– configure ThinOS
Used that several times in different environment and at the end I always ended up with a perfectly fine running setup.You can download it under Products – ThinOS
CG
if you mean http://www.freewysemonkeys.com/products/1000/NS105_and_ThinOS.pdf
I already had a copy.
One problem with it is that we are using Web Interface, not Storefront, and the document only addresses storefront. I am beginning to suspect that the WI config may be the issue – we are pulling the config.xml, but not connecting to the farm.After entering logon, I do get a message “loading profile” that stays up for 10-15 seconds, then it changes to “Connecting” before I get the sign-on failed message.
I started monitoring nsconmsg -d -g pol_hits – I never see the Wyse terminal hit a session policy – Logging in through a browser I do see the a session policy fire.
We are setup to support multiple AD domains, and the netscaler is configure to accept usernames in UPN format, do I need to set anything on the client side for that? I have been entering the user logon as a UPN
Well, Scratch that idea – setup a new LDAP policy to use sAMAccountName, set the Website to accept it, got the same result: a web browser logon triggers the session policy and displays the config.xml, the thin client does not hit a session policy- I have 2 session polices bound, one is the REQ.HTTP.HEADER User-Agent CONTAINS WTOS/1.0 , the other is ns_true || ns_false, which should cover pretty much anything!
We have a fix! added CAGAuthMethod=LDAP to the pnliteserver line, then discovered Citrix support had changed the plugin type to Java, which I changed back to Windows/Mac O/S- those two item fixed it!
Check Products sections again. There is new PDF called “Installation and configuration of Citrix NetScaler 10.5 to work with ThinOS and Xenith “
CG
The immediate crisis is over, so thanks for your input. But as an FYI, That is the same document I have had all along.
I had same issue, it’s working perfectly from web browser but giving Citrix sign on failed from T10 Wyse with 8.3 firmware. When using CAGAuthMethod fixed the issue. But I am not able to specify multiples storefront or NAG URL in pnlite parameter.
So I used select group parameter and created multiple ini files for different Citrix URL. But caching of wyse with EnableCacheIni parameter is not working,it works fine without select group parameter.
Any clue on this
- You must be logged in to reply to this topic.