Dennis Werner1709157957

March 23, 2017

My last try to connect to the Farm with Citrix Receiver from outside:

(What Iám wondering for is the Issue with the following error): 2017-03-23 14:33:36.218] [T0Unknown] [sRStore.cpp:262] Gateway selected by user doesn't match any from the store. Using default from store:https://mail.darkworxx.de/

March 23, 2017

My last try to connect to the Farm with Citrix Receiver from outside:

(What Iám wondering for is the Issue with the following error): 2017-03-23 14:33:36.218] [T0Unknown] [sRStore.cpp:262] Gateway selected by user doesn't match any from the store. Using default from store: ...://mail.darkworxx.de/

[2017-03-23 14:33:36.218] [T0Unknown] [sRStore.cpp:262] Gateway selected by user doesn't match any from the store. Using default from store: ......://mail.darkworxx.de/
[2017-03-23 14:33:36.221] [T0Unknown] [sRProvider.cpp:223] <- Inbound SR update finished
[2017-03-23 14:33:36.221] [T0Unknown] [serviceRecordMain.mm:144] [-] -[CtxServiceRecordsSvr handleDiscoveryDocument:]
[2017-03-23 14:33:36.234] [T0Unknown] [serviceRecordMain.mm:144] [+] -[CtxBeaconSvr checkLocationForStore:] (https://mail.darkworxx.de/Citrix/Roaming/Accounts)
[2017-03-23 14:33:36.234] [T0Unknown] [serviceRecordMain.mm:144] -[LocationManager locationRelativeToStoreURL:] Checking Location - https://mail.darkworxx.de/Citrix/Roaming/Accounts
[2017-03-23 14:33:36.234] [T0Unknown] [serviceRecordMain.mm:144] -[LocationManager locationRelativeToStoreURL:] Checking serviceRecordLocation - .....://mail.darkworxx.de/Citrix/DARKWORXX/discovery
[2017-03-23 14:33:36.234] [T0Unknown] [serviceRecordMain.mm:144] -[serviceRecordLocation reachability]    Internal Beacon Beacon Detector for "....://mail.darkworxx.de/" reach = "kReachable" kReachable
[2017-03-23 14:33:36.234] [T0Unknown] [serviceRecordMain.mm:144] -[serviceRecordLocation reachability]    Internal Beacon Reachable (Beacon Detector for ".....://mail.darkworxx.de/" reach = "kReachable")
[2017-03-23 14:33:36.234] [T0Unknown] [serviceRecordMain.mm:144] -[LocationManager locationRelativeToStoreURL:] Location = "kNETWORK_LOCATION_LAN"   (Detector = "Service Record)"
[2017-03-23 14:33:36.234] [T0Unknown] [serviceRecordMain.mm:144] [-] -[CtxBeaconSvr checkLocationForStore:] (NETWORK_LOCATION_LAN)
[2017-03-23 14:33:38.674] [T0Unknown] [serviceRecordMain.mm:144] [+] -[CtxBeaconSvr checkLocationForStore:] (https://mail.darkworxx.de/Citrix/Roaming/Accounts)
[2017-03-23 14:33:38.675] [T0Unknown] [serviceRecordMain.mm:144] -[LocationManager locationRelativeToStoreURL:] Checking Location - ....://mail.darkworxx.de/Citrix/Roaming/Accounts
[2017-03-23 14:33:38.675] [T0Unknown] [serviceRecordMain.mm:144] -[LocationManager locationRelativeToStoreURL:] Checking serviceRecordLocation - ...://mail.darkworxx.de/Citrix/DARKWORXX/discovery
[2017-03-23 14:33:38.675] [T0Unknown] [serviceRecordMain.mm:144] -[serviceRecordLocation reachability]    Internal Beacon Beacon Detector for "https://mail.darkworxx.de/" reach = "kReachable" kReachable
[2017-03-23 14:33:38.675] [T0Unknown] [serviceRecordMain.mm:144] -[serviceRecordLocation reachability]    Internal Beacon Reachable (Beacon Detector for "....://mail.darkworxx.de/" reach = "kReachable")
[2017-03-23 14:33:38.675] [T0Unknown] [serviceRecordMain.mm:144] -[LocationManager locationRelativeToStoreURL:] Location = "kNETWORK_LOCATION_LAN"   (Detector = "Service Record)"
[2017-03-23 14:33:38.675] [T0Unknown] [serviceRecordMain.mm:144] [-] -[CtxBeaconSvr checkLocationForStore:] (NETWORK_LOCATION_LAN)
[2017-03-23 14:33:38.944] [T0Unknown] [serviceRecordMain.mm:144] [+] -[CtxServiceRecordsSvr deleteStore:] (dummyDiscoverySRID)
[2017-03-23 14:33:38.944] [T0Unknown] [sRProvider.cpp:230] -> RemoveStore started. Service Record ID is: dummyDiscoverySRID
[2017-03-23 14:33:38.959] [T0Unknown] [sRProvider.cpp:247] Removed store dummyDiscoverySRID
[2017-03-23 14:33:38.959] [T0Unknown] [sRProvider.cpp:256] <- RemoveStore finished
[2017-03-23 14:33:38.959] [T0Unknown] [serviceRecordMain.mm:144] [-] -[CtxServiceRecordsSvr deleteStore:] (1)
[2017-03-23 14:33:48.824] [T0Unknown] [serviceRecordMain.mm:144] [+] -[CtxServiceRecordsSvr allStores]
[2017-03-23 14:33:48.824] [T0Unknown] [serviceRecordMain.mm:144] [-] -[CtxServiceRecordsSvr allStores]

March 22, 2017

Is there someone specialist, who can help me with my Problem ? The Issue is not resolved.

Many thanks

March 17, 2017

This document in case you have not already followed it should help:

https://docs.citrix.com/content/dam/docs/en-us/categories/advanced-concepts/downloads/netscaler-gateway-11-1-for-storefront-3-6-and-XD-7-9-externa-ica.pdf

To clarify my previous point, you would not need to set ws:// or wss://, URLs yourself. If Storefront and Netscaler Gateway are configured correctly to handle ICA connections externally, you would see the url changed automatically.

When using storefront internally, you would see connection being attempted directly to VDA.

When using Netscaler gateway (NSG), connection would be attempted to NSG which then proxies it to VDA.

Hi Santosh,

i have configured my StoreFront and my Netscaler with the manual from RobinHobo. Not more. And a few Versions ago, it worked for me. But in the actually Version of Citrix StoreFront and Netscaler it will not work. Where is the Point to configure the ICA Handling internal and external ?

Many thanks

March 16, 2017

As Santosh mentioned, you should see 443, has this every worked for you with previous NetScaler version or previous XA/XD version vda in your setup?

To rule out the configuration issues, can you please check on the VDA machine with in windows firewalls, do you see the firewall rules are applied correctly.

Please refer to the http://docs.citrix.com/en-us/xenapp-and-xendesktop/7-13/secure/tls.html for configuration details to be sure you did not miss any configuration on the VDA side.

Thanks

Kishore

The Firewall Rules are off.. But why is the url=ws:// .... the local Adress ? Where can i configure it to the right Adress ?

Thanks

March 16, 2017

INIT :|: CONNECTION :|: WEB SOCKET :|: INFO :|: websocket-url=ws://172.16.10.26:8008

When connecting externally via Netscaler gateway, it should not directly connect to VDA like above. Receiver (browser) won't be able to reach the VDA from external network typically as the IP would be internal only most likely.

Can you check if Storefront and NSG are configured correctly to handle ICA proxy connections.

You should see log something like this ideally:

INIT :|: CONNECTION :|: WEB SOCKET :|: INFO :|: websocket-url=wss://nsg.xyz.com:443

(where nsg.xyz.com is your gateway FQDN)

Where can i configure the url=WSS ??

I think thats the Problem...

The Firewall on every Server is Off...

Thanks

March 16, 2017

Thanks for the htmlreicever logs. Is this an SSL enabled VDA?

Also what OS you are seeing this issue on?

We might need an wireshark trace on the client machine from your setup while connecting via NSG and attempting to launch the resource via htmlreceiver.

Could you please share the error you see with windows receiver in your setup?

Thanks

Kishore

Hi Kishore,

i think yes, the VDA is SSL. Only the Delivery Controller is http. The Netscaler ist an VPX1000 the newest Version. I think 11.1.53...nc. In Windows Receiver i get no error, the Application will not start. I Only get a Message that says that there a Network problems on : IP_Adress:1494 ..... not more. :-(

March 16, 2017

Also are you seeing the above working when not using HTMLReceiver but with Windows Receiver connected via NetScaler Gateway?

Thanks

Kishore

With the Windows Receiver i`ll have the same issue.

March 16, 2017

Also are you seeing the above working when not using HTMLReceiver but with Windows Receiver connected via NetScaler Gateway?

Thanks

Kishore

And here the Logfile of the HTML 5 Receiver while i am trying to open a Desktop Session:

start Session

SESSION:|:BROWSERINFO:|:navigator =Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:52.0) Gecko/20100101 Firefox/52.0

SESSION:|:BROWSERINFO:|:os =MAC

SESSION:|:BROWSERINFO:|:browser =FIREFOX;version=52

SESSION:|:PREFERENCE:|:ajax=true

SESSION:|:CONNECTION:|:ICA:|:ica type=autoOpener

SESSION:|:CONNECTION:|:LOADTIME:|:ica load time =123

SESSION:|:CONNECTION:|:LOADTIME:|:script load =882

SESSION:|:PREFERENCE:|:language=de

SESSION:|:CONNECTION:|:LOADTIME:|:language =948

SESSION:|:CONNECTION:|:initializing session

ResUtil : singleMonitor function

ResUtil : Session Resize event: screen width, height and displayDetails 1366 768 {"lASAm":false,"g1bnB":0,"sg7EJ":false,"sQJ6X":false,"fU53V":1,"rAnXL":false,"ktBKP":{"width":1366,"height":605},"T4l_b":[{"bounds":{"left":0,"top":0,"width":1366,"height":604},"workArea":{"left":0,"top":0,"width":1366,"height":604}}]}

SESSION:|:CONNECTION:|:UI:|:initializing ui-interface

SESSION:|:CONNECTION:|:LOADTIME:|:ui initialize =35

SESSION:|:CONNECTION:|:ICA:|:ClientVersion 2.3.0.328

SESSION:|:CONNECTION:|:ICA:|:initializing ica-interface

SESSION:|:CONNECTION:|:LOADTIME:|:ica initialize =15

SESSION:|:ICA:|:Encryption level : Basic

SESSION:|:ICA:|:CHANNEL:|:supported channelCTXCPM

SESSION:|:ICA:|:CHANNEL:|:supported channelCTXTW

SESSION:|:ICA:|:CHANNEL:|:supported channelCTXTWI

SESSION:|:ICA:|:CHANNEL:|:supported channelCTXCLIP

SESSION:|:ICA:|:CHANNEL:|:supported channelCTXCAM

SESSION:|:ICA:|:CHANNEL:|:supported channelCTXMM

SESSION:|:ICA:|:CHANNEL:|:supported channelCTXCTL

SESSION:|:ICA:|:CHANNEL:|:supported channelCTXEUEM

SESSION:|:ICA:|:CHANNEL:|:supported channelCTXFILE

SESSION:|:ICA:|:WRAPPER:|:INFO : session size in icastack {"width":1366,"height":604,"hPt8E":1489648007880}

INIT :|: CONNECTION :|: TRANSPORT DRIVER :|: TRYING FOR SOCKET CONNECTION ON 172.16.10.26 : 8008

INIT :|: CONNECTION :|: WEB SOCKET :|: INFO :|: websocket-url=ws://172.16.10.26:8008

INIT :|: CONNECTION :|: WEB SOCKET :|: INFO :|: Current Protocol Index is : 0

INIT :|: CONNECTION :|: TRANSPORT DRIVER :|: SOCKET CONNECTED. Setting CGP Channel

INIT :|: CONNECTION :|: CGP SOCKET :|: INFO :|: Start Initializing CGP Socket

INIT :|: CONNECTION :|: CGP SOCKET :|: INFO :|: Finish Initializing CGP SOCKET

SESSION:|:ICA:|:TWI :|: ={{"seamlessMode":false}}=

INIT :|: CONNECTION :|: WEB SOCKET :|: INFO :|: websocket-url=ws://172.16.10.26:8008

INIT :|: CONNECTION :|: WEB SOCKET :|: INFO :|: Current Protocol Index is : 1

INIT :|: CONNECTION :|: WEB SOCKET :|: INFO :|: websocket-url=ws://172.16.10.26:8008

INIT :|: CONNECTION :|: WEB SOCKET :|: INFO :|: Current Protocol Index is : 2

SESSION:|:ICA:|:TRANSPORT:|:DRIVER:|:close with code=1006

INIT :|: CONNECTING :|: TRANSPORTDRIVER :|: CGP HANDSHAKE FAILED. TRYING ICA-Socks

SESSION :|: CGP :|: STATE :|: CGP-CORE :|: Changing core state from :0 To 0

INIT :|: CONNECTION :|: TRANSPORT DRIVER :|: TRYING FOR SOCKET CONNECTION ON 172.16.10.26 : 8008

INIT :|: CONNECTION :|: WEB SOCKET :|: INFO :|: websocket-url=ws://172.16.10.26:8008

INIT :|: CONNECTION :|: WEB SOCKET :|: INFO :|: Current Protocol Index is : 0

INIT :|: CONNECTION :|: TRANSPORT DRIVER :|: SOCKET CONNECTED. Setting SOCKSV5 Channel

INIT :|: CONNECTION :|: WEB SOCKET :|: INFO :|: websocket-url=ws://172.16.10.26:8008

INIT :|: CONNECTION :|: WEB SOCKET :|: INFO :|: Current Protocol Index is : 1

March 16, 2017

Also are you seeing the above working when not using HTMLReceiver but with Windows Receiver connected via NetScaler Gateway?

Thanks

Kishore

Here is the Log from the HTML 5 Receiver:

start Session

SESSION:|:BROWSERINFO:|:navigator =Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:52.0) Gecko/20100101 Firefox/52.0

SESSION:|:BROWSERINFO:|:os =MAC

SESSION:|:BROWSERINFO:|:browser =FIREFOX;version=52

SESSION:|:PREFERENCE:|:ajax=true

SESSION:|:CONNECTION:|:ICA:|:ica type=autoOpener

SESSION:|:CONNECTION:|:LOADTIME:|:ica load time =135

SESSION:|:CONNECTION:|:LOADTIME:|:script load =895

SESSION:|:PREFERENCE:|:language=de

SESSION:|:CONNECTION:|:LOADTIME:|:language =996

SESSION:|:CONNECTION:|:initializing session

ResUtil : singleMonitor function

ResUtil : Session Resize event: screen width, height and displayDetails 1366 768 {"lASAm":false,"g1bnB":0,"sg7EJ":false,"sQJ6X":false,"fU53V":1,"rAnXL":false,"ktBKP":{"width":1366,"height":605},"T4l_b":[{"bounds":{"left":0,"top":0,"width":1366,"height":604},"workArea":{"left":0,"top":0,"width":1366,"height":604}}]}

SESSION:|:CONNECTION:|:UI:|:initializing ui-interface

SESSION:|:CONNECTION:|:LOADTIME:|:ui initialize =41

SESSION:|:CONNECTION:|:ICA:|:ClientVersion 2.3.0.328

SESSION:|:CONNECTION:|:ICA:|:initializing ica-interface

SESSION:|:CONNECTION:|:LOADTIME:|:ica initialize =16

SESSION:|:ICA:|:Encryption level : Basic

SESSION:|:ICA:|:CHANNEL:|:supported channelCTXCPM

SESSION:|:ICA:|:CHANNEL:|:supported channelCTXTW

SESSION:|:ICA:|:CHANNEL:|:supported channelCTXTWI

SESSION:|:ICA:|:CHANNEL:|:supported channelCTXCLIP

SESSION:|:ICA:|:CHANNEL:|:supported channelCTXCAM

SESSION:|:ICA:|:CHANNEL:|:supported channelCTXMM

SESSION:|:ICA:|:CHANNEL:|:supported channelCTXCTL

SESSION:|:ICA:|:CHANNEL:|:supported channelCTXEUEM

SESSION:|:ICA:|:CHANNEL:|:supported channelCTXFILE

SESSION:|:ICA:|:WRAPPER:|:INFO : session size in icastack {"width":1366,"height":604,"hPt8E":1489647857933}