Citrix MetaFrame XP Farm @ SLAC
Citrix XP Good Practices
- Warning: Please make sure to "logoff" once finish with the Citrix session. To properly logoff, go to the 'Start Menu -> Logoff -> Ok'. Closing the window or selecting 'Start Menu -> Disconnect' will merely disconnect you, which means that your session is sill idled and still using systems resources and any opened files you may have. This could result in file locking problems.
- To enhance your Citrix experience, we recommend you save your data on the Z: drive and have a short cut on the Citrix desktop pointing to the data. If you have a large wts profile (anything on your Citrix desktop or z:\wtsxp folder) will greatly affect your log in and log off process. Please contact wts-admin for more information.
- Citrix servers are set to disconnect and terminate users' session after 3 hours of idled time (no activity). We have limited licenses, so please do not stay logged on if you are not using the Farm. If you get disconnected while your files are opened, you might end up with file locking problems and/or unsaved files.
- If a session freezes so that you cannot properly log off, you should send email to 'firstname.lastname@example.org''so that an administrator can log you off or terminate your session properly.
Citrix XP FAQs/Known Issues
- Don't have a SLAC Citrix account yet? Get one now.
- Can I still log on to the old farm after migrating to the new Citrix XP farm?
- When I first successfully logon to a Citrix Desktop Server, I get an "ICA Client File Security" dialog box. What settings do I use?
- How to configure the Linux Citrix Client?
- How to configure the Mac Citrix Client?
- How to configure the Windows Citrix Client to authenticate via a Web browser?
- How come there are no published applications available when I logon to the web portal?
- How do I map my Windows local drives in my Citrix Session?
- How do I mount my Linux/Unix local drives or AFS Space in my Citrix Session?
- How do I add printers to my Citrix Session?
- What applications are being hosted on the current Citrix Farm?
- How do I add new applications on the Citrix Server Farm?
- How do I configure the Citrix ICA client Program Neighborhood for Windows without using a Web Browser for authentication?
- How long before an inactive Citrix session is disconnected?
- I still need help even after going through the FAQ.
- How do I map the drive of another SLAC Windows computer in my Citrix session?
- Error: ICA File Not Found when launching published applications through http://slaccitrix1.slac.stanford.edu and http://slaccitrix2.slac.stanford.edu?
- Error: Citrix Client Configuration Refresh Error
- Error: "not proper encryption level to access session"
- Error: "You have chosen not to trust the "Thawte Premium Server CA" the issuer of the server security certificate
Yes, Users of the current SLAC Citrix 1.8 Farm will be able to use both Farms as you transition to the new Citrix XP Farm. However, the new Farm will become available for daily use starting March 29th,2004 and the old Citrix 1.8 Farm will be shutdown on May 3rd,2004.
When I first successfully logon to a Citrix Desktop Server, I get an "ICA Client File Security" dialog box. What settings do I use?
The settings should be set as followed:
These settings will allow the Citrix Server to map/mount the local drives from your workstation for read/write access and make the settings permanent in future sessions.
It is likely that your account hasn't been set up for proper access to the Citrix XP Farm. If you're a new user, be sure to have submitted a Citrix Account request http://www2.slac.stanford.edu/computing/windows/services/citrix/accountno_form.html and have received confirmation that your account is registered before you attempt to logon. Please email email@example.com for further assistance if needed.
Your local drives from your Windows workstation are automatically mapped by Citrix. However, Citrix will ask for your permission the first time you logon to the Farm. The following ICA Client File Security dialog box will appear:
Select "Full Access" and "Never ask me again for any application". These settings will allow the Citrix Server to map your local drives for read/write access and make the settings permanent in future sessions.
Once you have specified the path in your ICA client under Tools - Settings - click Preferences 'Drive Mapping', for instance:
Make sure you enable the read/write button after the path you entered to your Unix mount point.
To manually mount/map your specified local drives/volumes on the Citrix XP Server:
First, log in to a full Desktop session on the Citrix XP Server (published application named: "Windows Desktop")
From the User's Desktop, right click on the top left icon 'User on SLACWTSXPxx'
Select 'Map Network Drive'; the Map Network Drive dialog box will appear.
Select an available drive letter in "Drive" field, Place a check mark on "Reconnect at logon" (to make it persistent), then click on "Browse" , Under "My Network Places" expand "Entire Network", expand "Client Network", expand "Client" (please be patient as it takes a little while to enumerate all the local drive resources) and select the drive you want to map. Then click "Ok" to select the drive and "Finish" to map the drive.
Similarly, to mount a drive to any Windows workstation in the Domain, double click on 'My Network Places', select the Domain and then the machine that is providing the network share, and select the share name.
By default, you local printer is automatically created. And to add SLAC network printers:
Your session will be disconnected/terminated after 3 hours of idled time (no activity).
Network drives on the SCS central servers (such as the user home directory (Z drive) or groups directories (V drive) are already automatically mapped when you log into Citrix.
If you need to map to other network drives at SLAC, follow the instructions below.
It is not recommended that you share files this way through any client SLAC computers (e.g., from your SLAC office computer), since such client computers are not backed up nor reliable. User files should be stored in the user home directory (Z drive) or groups directories (V drive).
From the Citrix Application dialog box, select 'Windows Desktop'.
After you get the Windows desktop for the Citrix session, start Windows Explorer. There are several ways you can start Windows Explorer, one way is to right click on the computer icon in the Citrix session desktop.
In Windows Explorer of the Citrix session, go to the Tools menu, select 'Map Network Drive'.
Select a drive letter, and in 'Folder' type in the name of the computer and share that you want to map.
Users may receive the ICA File Not Found error when launching published applications through NFuse.
The following scenarios are known to produce the ICA File Not Found error:
1. Web pages are served with HTTPS and client can not save encrypted pages to disk
When a user clicks an application icon, the launch.ica file is downloaded from the web server and then executed by the local ICA client. If the NFuse web server is using SSL (https://...) and your browser is configured not to save encrypted pages to disk, the launch.ica file can not be written to disk and the ICA client has no file to open.
To resolve this issue, at the client machine:
o In Internet Explorer select go Tools > Internet Options
o Select the Advanced tab
o Beneath the Security section of options, uncheck the option called Do Not save encrypted pages to disk
2. Excessive internet cache
On Windows computers with large hard drives, the Temporary Internet Files folder used by Internet Explorer can become excessively large, causing too much of a delay in the time required to save the launch.ica file and then retrieve it for use by the ICA client.
To resolve this isue, clear the browser cache:
o In Internet Explorer select go Tools > Internet Options
o Select the General tab
o In the Temporary Internet files section of options, click the Delete Files button.
o You may also want to click the Settings button to decrease the amount of disk space to use for the Internet cache.
Citrix client configuration refresh error occurs when Citrix Neighborhood agent being installed by default. To uninstall this option, Start --> Control Panel --> Click on Add/Remove Programs. Find and select 'MetaFrame Presentation Server Client' click 'Change' button. This will start the Citrix Wizard. Select 'Modify' then click 'Next'. Click the button next to the 'Program Neighborhood Agent' and then select 'Entire Feature will be unavailable'. Verify the red 'X' next to the 'Program Neighborhood Agent', click 'Next', 'Next', 'Finish'. The error should be disappear after the reboot of your machine.
For Linux: Click on Network, a pull down menu to choose Connection, set Encryption Level to RC5 (128 bit), then Ok.
This affects some Linux users only.
If you have tried to connect to the Windows Citrix environment from a Linux machine, and get the following error message: "You have chosen not to trust the 'Thawte Premium Server CA' the issuer of the server security certificate".
The Thawte Server CA certificate was renewed and upgraded to Premium by the CA vendor for the Citrix MetaFrame servers.
To resolve this do the following: Download ThawteRoot.crt from http://www2.slac.stanford.edu/computing/windows/services/citrix/linux_client.htm and place it under /usr/lib/ICAClient/keystore/cacerts. This will resolve this issue.