Monday, January 30, 2012

Citrix XenApp 6.5 pass-through authentication through Web Interface prompts for log in credentials when you launch a published application

Problem

You’ve followed Citrix’s documentation to configure pass-through authentication but while it works through the Web Interface login page, you find that you are continuously promoted for credentials via the XenApp 6.5 server’s Windows 2008 R2 login screen whenever you try to launch an application:

image

You’re sure that you have the configuration in place.

Solution

Note that there are probably various causes for this but one of the common causes is having the wrong plug-in and for the purpose of this example, the workstation being used to access the published XenApp applications has the incorrect Citrix Receiver.  There are actually 2 Citrix receivers that you can download:

  1. Citrix Receiver
  2. Citrix Receiver Enterprise

It’s easy to overlook the 2 as the second one isn’t clearly labeled as the enterprise version.  Here are the links and the respective screenshots of the page to download them and how they look like in Programs and Features:

Citrix Receiver

http://www.citrix.com/site/ss/downloads/details.asp?downloadId=2319934&productId=1689163&c1=pov1859723&c2=ost12723&c3=sot1689164

image

29.8MB in size.

image

Citrix Receiver Enterprise

https://www.citrix.com/English/ss/downloads/details.asp?downloadId=2319945&productId=1689163

image

55.1MB in size and with the “- Admins” concatenation at the end of “Receiver for Windows 3.1”.  The package is also larger because it’s bundled with the regular Receiver as well:

image

What’s interesting is that the Enterprise version is actually smaller in size than the regular one:

CitrixReceiver.exe – 31,319,99KB
CitrixReceiverEnterprise.exe – 27,154,384KB

image

Note that if you’re reinstalling the Citrix Receiver Enterprise to correct your pass-through authentication problem, make sure you reboot your workstation after the plug-in is installed because I did not see the ssonsvr.exe service listed in task manager until I rebooted the workstation:

image

4 comments:

Anonymous said...

Thanks, that saved me pulling my hair out.

Chris said...

One other step in case this does not work completely.

I added the following lines to c:\inetpub\wwwroot\Citrix\XenApp\conf\default.ica in the WFClient section;

EnableSSOnThruICAFile=On
SSOnUserSetting=On

ref; http://forums.citrix.com/thread.jspa?threadID=250057&start=15&tstart=0

Alex Bandit said...

Very interesting thanks. I believe there's even more that could be on there! keep it up custom software development

Anonymous said...

Thanks Terence, your post solved my problem. To make it finally work I had to add the two lines suggested by Chris

Vaqar Hasan