Learn F5 Technologies, Get Answers & Share Community Solutions Join DevCentral

Filter by:
  • Solution
  • Technology
Answers

trouble replacing NetScaler for AccessGateway with F5 APM

I'm running 12.0.3, trying to replace my Citrix Netscaler w/ Citrix VDI iApp 2.4. I have XenApp 6.5, StoreFront 3.0 and 3.6 (trying to get either one to work, I don't care which one I end up with).

I've gone through the iApp, everything looks, feels, seems right. I've tried ssl offloading and bridging, tried having a different fqdn for the internal StoreFront server from the F5 virtual server, and having the same. But everything after I logon via the F5 form in my browser, I see the background images load for storefront, and get a message "Cannot get your apps from the store." with an OK button.

I increased the APM logging, I see these lines at the bottom of the log for my session.

Thoughts?

2016-12-02 15:44:51 /Common/xxxxlink.xxxxga.com.app/xxxxlink.xxxxga.com:Common:a9c02a33: Session variable 'session.rest.requestdomain' set to '' 2016-12-02 15:44:51 /Common/xxxxlink.xxxxga.com.app/xxxxlink.xxxxga.com:Common:a9c02a33: Session variable 'session.rest.requesttype' set to '' 2016-12-02 15:44:51 /Common/xxxxlink.xxxxga.com.app/xxxxlink.xxxxga.com:Common:a9c02a33: Session variable 'session.rest.username' set to '' 2016-12-02 15:44:51 /Common/xxxxlink.xxxxga.com.app/xxxxlink.xxxxga.com:Common:a9c02a33: Session variable 'session.sso.token.last.password' set to '*****' 2016-12-02 15:44:51 /Common/xxxxlink.xxxxga.com.app/xxxxlink.xxxxga.com:Common:a9c02a33: Session variable 'session.sso.token.last.username' set to 'xxxxGA\jgrimme' 2016-12-02 15:44:51 /Common/xxxxlink.xxxxga.com.app/xxxxlink.xxxxga.com:Common:a9c02a33: metadata len 508 2016-12-02 15:44:51 /Common/xxxxlink.xxxxga.com.app/xxxxlink.xxxxga.com:Common:a9c02a33: checking start uri match, start uri: '/Citrix/citrixtestWeb/ExplicitAuth/Login', request: '/Citrix/citrixtestWeb/' 2016-12-02 15:44:51 /Common/xxxxlink.xxxxga.com.app/xxxxlink.xxxxga.com:Common:a9c02a33: no start uri match 2016-12-02 15:44:51 /Common/xxxxlink.xxxxga.com.app/xxxxlink.xxxxga.com:Common:a9c02a33: metadata len 508 2016-12-02 15:44:51 /Common/xxxxlink.xxxxga.com.app/xxxxlink.xxxxga.com:Common:a9c02a33: checking start uri match, start uri: '/Citrix/citrixtestWeb/ExplicitAuth/Login', request: '/Citrix/citrixtestWeb/custom/style.css' 2016-12-02 15:44:51 /Common/xxxxlink.xxxxga.com.app/xxxxlink.xxxxga.com:Common:a9c02a33: no start uri match 2016-12-02 15:44:51 /Common/xxxxlink.xxxxga.com.app/xxxxlink.xxxxga.com:Common:a9c02a33: metadata len 508 2016-12-02 15:44:51 /Common/xxxxlink.xxxxga.com.app/xxxxlink.xxxxga.com:Common:a9c02a33: checking start uri match, start uri: '/Citrix/citrixtestWeb/ExplicitAuth/Login', request: '/Citrix/citrixtestWeb/custom/script.js' 2016-12-02 15:44:51 /Common/xxxxlink.xxxxga.com.app/xxxxlink.xxxxga.com:Common:a9c02a33: no start uri match 2016-12-02 15:44:51 /Common/xxxxlink.xxxxga.com.app/xxxxlink.xxxxga.com:Common:a9c02a33: metadata len 508 2016-12-02 15:44:51 /Common/xxxxlink.xxxxga.com.app/xxxxlink.xxxxga.com:Common:a9c02a33: checking start uri match, start uri: '/Citrix/citrixtestWeb/ExplicitAuth/Login', request: '/Citrix/citrixtestWeb/custom/strings.en.js' 2016-12-02 15:44:51 /Common/xxxxlink.xxxxga.com.app/xxxxlink.xxxxga.com:Common:a9c02a33: no start uri match 2016-12-02 15:44:51 /Common/xxxxlink.xxxxga.com.app/xxxxlink.xxxxga.com:Common:a9c02a33: metadata len 508 2016-12-02 15:44:51 /Common/xxxxlink.xxxxga.com.app/xxxxlink.xxxxga.com:Common:a9c02a33: checking start uri match, start uri: '/Citrix/citrixtestWeb/ExplicitAuth/Login', request: '/Citrix/citrixtestWeb/Home/Configuration' 2016-12-02 15:44:51 /Common/xxxxlink.xxxxga.com.app/xxxxlink.xxxxga.com:Common:a9c02a33: no start uri match

0
Rate this Question
Comments on this Question
Comment made 07-Dec-2016 by Kees van den Bos 771

Hi Jason,

Is your remote desktop resource pointing toward the connection brokers or the storefront server(s)? (Access Policy ›› Application Access : Remote Desktops : Remote Desktops)

Cheers,

Kees

0
Comment made 07-Dec-2016 by Jason Grimme 126

Hi Kees, I actually don't have anything in there, should I? I've not seen anything about that, and I'm not even getting that far yet, still trying to enumerate my apps from StoreFront :)

It's looking to me like I'm not hitting the 'start uri' for the SSO, not sure what may be a miss, I've looked through the manual configuration tables in the iApp and all looks solid, but perhaps the 'start URI' needs to be triggered by the logon form?

0
Comment made 07-Dec-2016 by Kees van den Bos 771

Hi Jason,

Sorry, now I see your running in LTM+APM mode. Your right, the "start URI" should be the uri of the storefront login page.

SSO is looking for '/Citrix/citrixtestWeb/ExplicitAuth/Login' but this uri is never presented by storefront. I think it should look like: /Citrix/XenApp/auth/login.aspx

Cheers,

Kees

0
Comment made 13-Jun-2017 by Manuel Cristobal 73

Hi Kees, Did you get an answer on this? I am going thru the same issue now

0
Comment made 13-Jun-2017 by Kees van den Bos 771

Hi Manuel,

No I did not. What does your APM logging (debug on SSO )say??

Cheers,

Kees

0
Comment made 13-Jun-2017 by Manuel Cristobal 73

can you try this debugging?

tmsh modify sys dblog.accesscontrol.level{ value “debug” }

and tmsh modify sys dblog.vdi.level{ value “debug” }

0
Comment made 13-Jun-2017 by Kees van den Bos 771

Hi Manual,

I think we got mixed up. I am not the one asking the question, I tried to help Jason but he stopped responding.

So I can help you with your issue.

Cheers,

Kees

0
Comment made 13-Jun-2017 by Jason Grimme 126

sorry I didn't mean to disappear or keep you hanging, just decided to keep my NetScalers as they were much simpler for this function :)

0
Comment made 13-Jun-2017 by Kees van den Bos 771

Hi Jason,

No problem. I am glad you got it worked out (with the wrong devices ;-) )

Cheers,

Kees

0

Answers to this Question