Jump to content
Welcome to our new Citrix community!

StoreFront no longer passes smart card authentication from Wyse zero client after domain controller is upgraded to Server 2016


Alex Clarke

Recommended Posts

Our environment was Wyse 5060 zero clients, smart card authentication, StoreFront 3.14, XenDesktop/XenApp 7.15LTSR, Windows 2008 R2 domain controller. All was working well until the domain controller was upgraded to Windows 2016. That is all that changed. Since then StoreFront no longer passes the smart card authentication successfully to the domain controller when logging in from a zero client. Smart card authentication does not work when logging in from the web portal either.

 

IIS shows 401 errors: (open link in new tab)

image.thumb.png.77dc45f16e8f7b1be72fcce7c4667a90.png

 

Citrix Delivery Services log shows:

 image.thumb.png.ce26b4762e762f55538278784b27a04c.png

 

Kerberos logging shows:

image.thumb.png.1a0fbe1832a556b7f0a62787e281418a.png

 

And the Security log shows:

image.thumb.png.58292bfaa36eade50ccb43a3aa1d5643.png

 

We have tried https://support.citrix.com/article/CTX235268 and https://support.citrix.com/article/CTX216330 to no avail.

Has anyone else seen this issue?

 

 

Link to comment
Share on other sites

  • 2 months later...

Our environment is similar, our domain controllers were upgraded over the weekend and we are now seeing the same issues. Has anyone else seen this or have a solution?

 

Update: It turned out to be an unpublished bug in server 2016 that was causing the issue. Microsoft provided a work around for the issue.

Edited by Skip Loffreda
update
Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...