Jump to content
Welcome to our new Citrix community!
  • 0

cannot add Azure hosting connection (Citrix Studio 7.15)


Olaf Scherdin

Question

hello,

 

I'm having a hard time adding a Azure hosting connection through a Proxy (no auth. needed) using Citrix Studio. I added the proxy connection using "netsh winhttp set proxy" in a shell with admin rights. While my own user now uses the configured proxy, CitrixHosting.exe seems to ignore the proxy configuration and tries to directly contact MS infrastructure. This, of course, fails. Yes, the machine was rebooted and the proxy config is persistent.

 

How can this be resolved? And will there me more obstacles of this kind when connecting through a Proxy server?
Giving the connecting machine direct access to the Internet is, for obvious security reason, not an option.

 

best regards
Olaf

Link to comment

5 answers to this question

Recommended Posts

  • 0

Like anything Azure/365 based, the guidance is usually to avoid proxying to them... I had a similar issue to yours a while back, Studio forever thought it was failing auth with a system proxy, despite it not needing to auth

 

My advice, just whitelist the Azure ranges in your firewall, and let the server go direct - i am sure there will be some security people that will not like that, but i don't see a concern when its being limited to where you want it to go

https://www.microsoft.com/en-au/download/details.aspx?id=41653

Link to comment
  • 0
On 23.11.2017 at 9:41 PM, James Kindon said:

Like anything Azure/365 based, the guidance is usually to avoid proxying to them... I had a similar issue to yours a while back, Studio forever thought it was failing auth with a system proxy, despite it not needing to auth

 

My advice, just whitelist the Azure ranges in your firewall, and let the server go direct - i am sure there will be some security people that will not like that, but i don't see a concern when its being limited to where you want it to go

https://www.microsoft.com/en-au/download/details.aspx?id=41653


Thank you James,

that's an hell of a list (of course).
However, I don't think our firewall team is going to implement that... that would be a hell lot of work to do with changes over and over again. :-)

Link to comment
  • 0

Given that my user can use our proxy without authentication, I tried a different approach, but even then I cannot successfully connect:

 

----------bite here ---------------------------------------

$connectionName = "Azure@Company"
$Subscription = "bc3xxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
$applicationPassword = "yCfxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
$azureAdApplication = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
$tenantId = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"

Add-PsSnapin Citrix*

$customProperties = @"

<CustomProperties xmlns="http://schemas.citrix.com/2014/xd/machinecreation" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">

<Property xsi:type="StringProperty" Name="TenantId" Value="$tenantId"/>

<Property xsi:type="StringProperty" Name="AuthenticationAuthority" Value="https://login.microsoftonline.com/"/>

<Property xsi:type="StringProperty" Name="SubscriptionId" Value="$subscription"/>

</CustomProperties>

"@

$connection = New-Item -ConnectionType “Custom” -CustomProperties $customProperties -HypervisorAddress @(“https://management.azure.com/”) ` -Path @(“XDHyp:\Connections\$connectionName”) -Persist -PluginId “AzureRmFactory” -Scope @() ` -SecurePassword (ConvertTo-SecureString -AsPlainText -Force $applicationPassword) -UserName $azureAdApplication

New-BrokerHypervisorConnection -HypHypervisorConnectionUid $connection.HypervisorConnectionUid

----------bite here ---------------------------------------

However, this results in an error: "The hypervisor was not contactable at the supplied address".

Anyone?
I am also still looking for an official answer, if Citrix Studio supports proxy configurations.

Link to comment

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...