Username.ini + “password=” parameter + pwd changin

Hi all –

I have a unique project where we’re publishing apps anonymously via XenAPP and had to figure out a way to do this for different roles of users. Based on the role, they would get the appropriate Citrix Published app and that app would then yet again prompt for it’s own credentials. We wanted to use AD and XenAPP initially but got rejected because of the security architecture teams. Long story… 🙂

Anyhow, I came back with the thought that we can use username.ini’s and define Citrix WI addresses for those appropriate users and still continue to use the anonymously published apps. The apps would be published via differing web interfaces and that would satisfy their requirement.

As I am looking at this more, I am interested in knowing what permissions I have to set so that the “Check here to change password” would work. I am currently using FTP for INI management but WILL be using HTTPS to manage the INI file queries.

Is there a how-to on this? I also imagine this is very rudimentary for password management but at least this gets one requirement completed.

Here’s my wnos.ini and .ini:
wnos.ini —
FormURL=login-logo.bmp

Rapportserver=WDMServ Retry=3

Timeserver=timeserver Timeformat=”24-hour format” Dateformat=mm/dd/yyyy
TimeZone=’GMT – 05:00′ ManualOverride=yes Daylight=yes Start=030507 End=100507 TimeZoneName=”Eastern Standard Time” DayLightName=”Eastern Daylight Time”

DeskColor=”000 000 000″
Desktop=ws.jpg
Screensaver=”0″
SaveSysInfo=usb ScardLog=0xF

autoload=1
SignOn=Yes
Privilege=High
Language=US
DomainList=MyDom
desktopcolordepth=16 rgb565=yes

.ini —
Password=somethingencryptedhere

Printer=LPT2 Name=”LocalUSB” PrinterID=”myPrinter” Enabled=yes
DefaultPrinter=LPT2 PrinterClass=”PCL5″

IcaBrowsing=HTTP
Seamless=yes FullscreenReserved=yes
SessionConfig=ICA SessionReliability=yes
EnableRAVE=yes

CONNECT=ICA
BrowserIP=xxx.xxx.xxx.xxx:8080
Application=”DEV”
Description=”DEV”
AutoConnect=no
Reconnect=yes
Encryption=128
Colors=true
Fullscreen=yes
Resolution=seamless
Logon_Mode=user-specified
HTTPBrowsing=yes
SessionReliability=yes
LocalCopy=no

–> end

Regards,
–Adam