How can I debug problems with Citrix XenApp?

2

1

I'm trying to connect to Citrix via Ubuntu 13.04. When I click on the application/VM button in my browser (url is .../Citrix/XenApp/site/default.aspx), button turns blue (before it was grey). Then, after 30 seconds, a window pops up:

Can't connect to '0.0.0.2 - Generaloffice'
Network is unreachable

Since I can connect to the web site, this seems kinda odd. How can I find out which connection the software is trying to make?

Aaron Digulla

Posted 2013-07-08T10:28:59.497

Reputation: 6 035

Did you have any corporate Proxy Settings in within your Citrix Environment. If the setting for the Access Gateways are not set propably it gets the proxy settings from the corporate network which are not available for you in a public network. – patricks – 2013-07-08T13:58:33.150

@patricks: I'm inside the corporate network. What is "Citrix Environment"? All I have is a Citrix plugin installed in my browser and a button in a web page that I can click. – Aaron Digulla – 2013-07-08T15:31:58.463

You can debug the process with the following steps. First download the ICA File (right click on the application on the Citrix Website -> Save as...). Second step start the Citrix receiver via command line (don't know where ubuntu stores the client but you could try /opt/citrix/bin/wfica) with this options "/opt/citrix/bin/wfica -log $SAVEDFILE – patricks – 2013-07-09T05:58:28.407

@patricks: Thanks the for tip; unfortunately, I failed to download the file. I just get a HTML file with some JavaScript that eventually contains document.location.replace('/Citrix/XenApp/site/launch.ica?... :-/ Is there another way to get this file? – Aaron Digulla – 2013-07-09T09:07:43.297

1you have to setup your browser to download the ICA file instead of opening (or if you have the dialog -> just use "Save.."). – patricks – 2013-07-09T11:14:36.097

Yes, that works! If anyone else needs this for Chrome: Just disable the plugin (use the URL chrome://plugins/) – Aaron Digulla – 2013-07-09T13:49:44.693

@patricks: I could now download the file and run wfica. I get the same error as before. Where does it write the log file to? – Aaron Digulla – 2013-07-09T14:05:39.563

Answers

0

This happens because the ICAClient ignores the system's proxy settings. Instead of using the Web Browser/system's proxy settings, the client tries to connect first to the SSLProxyHost which is mentioned in the launch.ica file.

Try to configure the proxy settings manually.

Edit the file ~/.ICAClient/All_Regions.ini, look for [Network\Proxy]

Change the first two fields:

ProxyType=Script
ProxyAutoConfigURL=http://your.company.com/proxy.pac

I'm not sure what to put in there if you have the URL of a proxy server; maybe the documentation can help in this case.

Additional tipps:

If you can't download the ica file to start the client from the command line, disable the browser plugin and click on the VM button in the Citrix web site. The browser should then download and save the launch.ica file automatically.

If your client complains that it doesn't have a (root) certificate installed for SSL, you need to put more into /opt/Citrix/ICAClient/keystore/cacerts/. A simple source for those is Firefox; search your local copy for *.crt files like GeoTrust_Global_CA.crt. Copy or link those additional certificates to the cacerts folder and the client should be able to find and use them:

cd /opt/Citrix/ICAClient/keystore/
mv cacerts cacerts.bak
ln -s /etc/ssl/certs cacerts

(kudos to bdetweiler for the instructions).

Aaron Digulla

Posted 2013-07-08T10:28:59.497

Reputation: 6 035

This worked for me: cd /opt/Citrix/ICAClient/keystore/; rm -rf cacerts; ln -s /etc/ssl/certs cacerts; – bdetweiler – 2018-03-20T23:06:30.067

@bdetweiler I'd use mv cacerts cacerts-citrix.bak instead of rm -rf. – Aaron Digulla – 2018-05-17T07:49:10.707

True, it is always better practice to rename than remove. Thanks for pointing that out. – bdetweiler – 2018-05-21T15:45:21.083