Learn F5 Technologies, Get Answers & Share Community Solutions Join DevCentral

Filter by:
  • Solution
  • Technology
Clear all filters
Answers

Error in Citrix VDI 1.1.0rc5 iApp

Hi!

Just want to report this, in case it's an issue with the new iApp. I'm ruinng 11.2.1 HF8.

When I turn on advanced options under "Which configuration mode do you want to use" I get the following error.

I've tried a few different config scenarios using advanced, but the same error is thrown. The iApp runs ok when using basic options.

 script did not successfully complete: (can't read "::webui_pool__lb_method_choice_edge": no such variable
 while executing
 "subst $substa_out"
 invoked from within
 "if { [info exists [set substa_in]] } {
 set substa_out [subst $$substa_in]
 set substa_out [subst $substa_out]
 } else {
 ..."
 ("uplevel" body line 3)
 invoked from within
 "uplevel {
 append ::substa_debug "\n$substa_in"
 if { [info exists [set substa_in]] } {
 set substa_out [subst $$substa_in]
 ..."
 (procedure "iapp_substa" line 9)
 invoked from within
 "iapp_substa webui_pool_lb($advanced,$is_edge)"
 invoked from within
 "iapp_conf create ltm pool ${app}_webui_${http_or_https}_pool [iapp_substa webui_pool_ramp_pga($advanced,$do_webui_slow_ramp,$do_webui_pga)] [iapp_s..."
 invoked from within
 "subst $substa_out"
 invoked from within
 "if { [info exists [set substa_in]] } {
 set substa_out [subst $$substa_in]
 set substa_out [subst $substa_out]
 } else {
 ..."
 ("uplevel" body line 3)
 invoked from within
 "uplevel {
 append ::substa_debug "\n$substa_in"
 if { [info exists [set substa_in]] } {
 set substa_out [subst $$substa_in]
 ..."
 (procedure "iapp_substa" line 9)
 invoked from within
 "iapp_substa webui_pool($replace_webtop,$forward_traffic,$new_webui_pool)"
 invoked from within
 "iapp_conf create ltm virtual ${app}_webui_[expr { $webui_encrypted ? "https" : "http" }] destination [iapp_destination $::webui_virtual__addr $port]..."
 invoked from within
 "subst $vs(web)"
 invoked from within
 "if { $is_lb_scenario } {
 if { !$suppress_webui } {
 set apm_profiles ""
 set port [expr { $webui_encrypted \
 ? $::webui_..." line:1012)

/Andreas

0
Rate this Discussion

Replies to this Discussion

placeholder+image

Andreas- This is definitely a bug, so thank you for posting. However, I have so far been unable to reproduce it. If you would, please post the output of "tmsh show sys license" so I can more exactly reproduce your environment. -Fred

0
placeholder+image

This is our license info

Sys::License
Licensed Version    11.2.1
Licensed On         2013/06/25
Service Check Date  2013/06/25
Platform ID         Z100

Active Modules
  APM, Base, VE 
    Anti-Virus Checks
    Base Endpoint Security Checks
    Firewall Checks
    Network Access
    Secure Virtual Keyboard
    APM, Web Application
    Machine Certificate Checks
    Protected Workspace
    Remote Desktop
    App Tunnel
  LTM, 200 Mbps, VE 
    IPV6 Gateway
    Rate Shaping
    Ram Cache
    50 MBPS COMPRESSION
    SSL, 500 TPS Per Core
    Application Acceleration Manager, Core
    Anti-Virus Checks
    Base Endpoint Security Checks
    Firewall Checks
    Network Access
    Secure Virtual Keyboard
    APM, Web Application
    Machine Certificate Checks
    Protected Workspace
    Remote Desktop
    App Tunnel

Here is the config I'm using

General
Which configuration mode do you want to use? Advanced...
Use APM or Edge Gateway to securely proxy application (ICA) traffic and authenticate users into your Citrix environment? Yes...
What is the Active Directory NetBIOS Domain Name used for your Xen servers? DOMAIN
BIG-IP Access Policy Manager
Should the BIG-IP APM support smart card authentication for Citrix access? No...
How do you want to provide AAA services for your deployment? Use an existing AAA Server Object
Which AAA Server object do you want to use? domain.com_AD_AAA_server
Do you want the BIG-IP system to proxy RSA SecurID for two factor authentication? No...
Virtual Server for Web Interface servers
Should this BIG-IP system load balance Citrix traffic or send it to another BIG-IP system? Yes...
Do you want to replace Citrix Web Interface servers with the BIG-IP system? No...
Do you need to add a custom PNAgent URI? No...
Should the iApp remove the APM session when users log out of the Web Interface servers? Yes...
What IP address will clients use to access the Web Interface servers or the F5 Webtop? 10.10.21.33
Did you deploy Citrix StoreFront? No...
Are you deploying Citrix XenApp or XenDesktop? Deploying XenApp
Do the Web Interface servers use a custom URI or the default? Custom URI...
What is the custom URI on StoreFront or Web Interface server for XenApp or XenDesktop? /Citrix/Custom/
Which certificate do you want to use for authentication? default.crt
Which key do you want to use for encryption? default.key
Do you need to use an intermediate certificate? No...
Do you want to redirect inbound HTTP traffic to HTTPS? Yes...
From which port should HTTP traffic be redirected? 80
Do you want to re-encrypt Web Interface traffic? No...
Where will your BIG-IP virtual servers be in relation to your Web Interface servers? Different subnet...
How have you configured routing on your Web Interface servers? Web interface servers do NOT....
How many connections do you expect to each Web Interface server? fewer than...
How do you want to optimize network connections? Use F5's recommended optimizations...
Do you want to add any custom iRules to this configuration? No irules added
Web Interface servers
What DNS name will clients use to reach the Citrix Web Interface servers? ctxtest.domain.com
Do you want to create a new pool or use an existing one? Create...
Which port have you configured for Web Interface HTTP traffic? 80
Which load balancing method do you want to use? Least connections...
Use a Slow Ramp time for newly added servers? No...
Do you want to enable Priority Group Activation? No...
What are the IP addresses of your Web Interface servers? 10.10.132.10
Create a new health monitor or use an existing one? Create a new...
How many seconds should pass between health checks? 30
Virtual Server for XML Broker Servers
What IP address do you want to use for the XML Broker virtual server? 10.10.21.17
Will the XML Broker traffic arrive encrypted or unencrypted? Unencrypted....
Which port do you want to use for this HTTP virtual server? 80
Where will your BIG-IP virtual server be in relation to your XML Broker servers? Different subnets...
How have you configured routing on your XML Broker servers? XML Broker servers do NOT....
What is the maximum number of connections you expect for each XML Broker server? Fewer...
Which VLANs should accept XML Broker traffic? ...allowed from all VLANS
Do you want to add any custom iRules to this configuration? No irules added
XML Broker Servers
Do you want to create a new XML Broker pool? Create a new pool...
Which load balancing method do you want to use? Least connections...
Use a Slow Ramp time for newly added servers? No...
Do you want to enable Priority Group Activation? No...
What are the IP addresses of your XML Broker servers? 10.10.132.180. Port 80
Create a new health monitor or use an existing one? Use an existing...
Which monitor do you want to use? http
0
placeholder+image

Andreas- This is a puzzler. I followed your config exactly on 11.2.1HF8, and saw no errors. Is there anything atypical about your BIG-IP configuration? Are you using administrative partitions? Have you deleted any persistence profiles? I ask because the template performs feature checks internally, and in your case it misinterpreted a feature check for the core LTM persistence profile /Common/cookie. Please check the output of "tmsh list ltm persistence cookie /Common/cookie". If that command displays any output other than "not found", then let's modify the template to simultantously show us more information and work around the problem. Edit the template and locate the line of code that begins with set is_edge. Immediately below that line, add the line puts "IS EDGE $is_edge", and follow that with the line set is_edge 0. Save the template and re-run your iApp. The first line will deposit the value of $is_edge in /var/tmp/scriptd.out. The value should be 0, but may be 1. The second line forces the value to 0, which should stop the template from attempting to use the non-existent variable. -Fred

0
placeholder+image

Ah, sorry. I forgot to mention that I'm running the iapp in a partition (partition Citrix).
When I run in Common with advanced options, it works.
This virtual big-ip should be pretty standard. It's used for tests and labs, but I don't think we have changed any default profiles etc.

The output from "list /ltm persistence cookie /Common/cookie" is

ltm persistence cookie cookie {
    app-service none
    cookie-name none
    expiration 0
    hash-length 0
    hash-offset 0
    method insert
    mirror disabled
}

I added the lines you suggested to the script below set is_edge.
puts "IS EDGE $is_edge"
set is_edge 0

When I re-ran the iapp in the partition, "IS EDGE 1" was written to scriptd.out, and it created a config. Probably because is_edge was forced to 0.

Tested again in partition Common just to see what was put in scriptd.out.
Running in Common, I got "IS EDGE 0" in scriptd.out

/Andreas

0
placeholder+image

Thanks Andreas. The temporary set is_edge 0 workaround should not interfere with anything else since you are not working with an Edge Gateway license. I will fix the partition handling in the next release candidate, citrix_vdi.v1.1.0rc6. -Fred

0