Jump to content
Welcome to our new Citrix community!

[SOLVED]Citrix Gateway "Cannot complete your request" after upgrade to 13.0 79.64


Recommended Posts

So... I upgraded Citrix ADC from a 13.0 build 67.39 to 13.0 build 79.64

 

All was working fine before, so I believe it's not a problem with settings.

Fact is, after the upgrade,  I get the infamous "Cannot complete your request" right after inserting the credentials.

Looking at the Authentication logs it does not show failures, the user authenticates successfully.

 

Searching around I found this https://www.ferroquesystems.com/resource/issue-cannot-complete-your-request-error-after-citrix-adc-13-0-b64-35-upgrade/

Which points to official: https://docs.citrix.com/en-us/citrix-adc/current-release/aaa-tm/single-sign-on-types/enable-sso-for-auth-pol.html#citrix-gateway-cases

 

Before I created the Traffic Policy, I searched for the SSO FAIL with grep -n "SSO FAIL" /var/log/ns.log* and zgrep -n "SSO FAIL" /var/log/ns.log*

No results came back but the problem was there.

 

So I created the policy and bound to the Gateway vserver.

Saved config and the problem is still there.

 

Is there any other knowledge about this?

 

Now, there is an important thing... Chrome, Edge and Firefox fail with "Cannot complete your request" however, somehow... Internet Explorer Works!

___________________________

Update 1:
We opened a case, tech support. We were told to revert snapshot (yes it's a VPX) and upgrade to 71.44. We did it, but same problem occurs.

 

___________________________

PROBLEM SOLVED

With the help of Citrix support problem was found out:

The Session policy had the expression "&& REQ.HTTP.HEADER Referer EXISTS"

Session policies were NOT being HIT at all leading to Cannot complete your request.

Removing the expression from the policy solved the problem.

Edited by Felipe Albuquerque
Problem Solved!
Link to comment
Share on other sites

  • 2 months later...
  • 2 months later...
  • 1 year later...
  • 6 months later...
  • 3 weeks later...

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...