Jump to content

switching from deprecated classic session policies to advanced session policies seems to break the auth mechanism


Andy Vanderbeken

Recommended Posts

I'm currently setting up a copy of our productional basic ICA ONLY Netscaler Gateway from scratch for QA purposes in order to validate our existing installation procedures and implement new changes. 1 of those changes is simply replacing the deprecated classic policies by advanced policies but when I do so I find that logging on to our published Citrix desktops suddenly no longer works but instead gives:

 

image.thumb.png.edc654ffdf0d267d515b427f25a7697b.png

 

with the following syslog message:

 

image.thumb.png.a715166af816423991506d4ea68538a6.png

 

 

When I unbind that new advanced policy from the Virtual Server and bind once more the classic version (which uses the exact same session profile) instead all immediately works fine again and there is no more warning log entry in the syslog. Here are both policies side by side:

 

image.thumb.png.b5a56b5204efadc1db6ca7dd84c4a603.png

 

Anyone come across the same problem or have any idea ? Switching between both policies is litteraly the only change I'm making between working or not.

 

 

 

 

Additional info

 

Netscaler firmware version: image.png.19dacf1a7b2ec70c6baaa14f72e48e37.png

 

 

Link to comment
Share on other sites

10 hours ago, Ken Zygmunt said:

Andy

 

Edit your Gateway vServer and let me know what your "ICA Only" is set to in 'Basic Settings'. I'm guessing it's set to true?

 

Regards

 

Ken Z

 

Hi Zygmunt,

 

no. I clearly and explicitly mentioned my CAG installation as a "basic ICA ONLY Netscaler Gateway" in my OP to indicate that to anyone that reads this post:

 

image.thumb.png.fd4f93ea74b2af904d0a91981f1a2266.png

 

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...