Any of you citrix experts !!?
Discussion
Hi All, I'm really stuck here - any help would be appreciated ! :)
I've just installed Presentation svr 4 on a windows 2003 server called CTRX3. I also have a 2003 server running the citrix licensing and TS licensing server seperately for redundancy. I have defined a farm (LO_CITRIX) + published an application (in this case internet explorer).
I have activated the terminal server licensing server and added 100 Per User Cal Tokens, and i have also added 10 users onto the citrix licensing. I have more citrix licenses but i wanted to get it running before adding the rest.
When i try to add the farm i get the "There is no Citrix Server configured on the specified address" message.
What i have noticed is my user account (that has domain admins rights) can connect and works superbly whereas a bog standard user (Internet Users group) fails to connect.
Anyone know what i've missed here because i am stumped !?
Thanks
Steve
I've just installed Presentation svr 4 on a windows 2003 server called CTRX3. I also have a 2003 server running the citrix licensing and TS licensing server seperately for redundancy. I have defined a farm (LO_CITRIX) + published an application (in this case internet explorer).
I have activated the terminal server licensing server and added 100 Per User Cal Tokens, and i have also added 10 users onto the citrix licensing. I have more citrix licenses but i wanted to get it running before adding the rest.
When i try to add the farm i get the "There is no Citrix Server configured on the specified address" message.
What i have noticed is my user account (that has domain admins rights) can connect and works superbly whereas a bog standard user (Internet Users group) fails to connect.
Anyone know what i've missed here because i am stumped !?
Thanks
Steve
lockstock2sb said:
Hi All, I'm really stuck here - any help would be appreciated ! 
I've just installed Presentation svr 4 on a windows 2003 server called CTRX3. I also have a 2003 server running the citrix licensing and TS licensing server seperately for redundancy. I have defined a farm (LO_CITRIX) + published an application (in this case internet explorer).
I have activated the terminal server licensing server and added 100 Per User Cal Tokens, and i have also added 10 users onto the citrix licensing. I have more citrix licenses but i wanted to get it running before adding the rest.
When i try to add the farm i get the "There is no Citrix Server configured on the specified address" message.
What i have noticed is my user account (that has domain admins rights) can connect and works superbly whereas a bog standard user (Internet Users group) fails to connect.
Anyone know what i've missed here because i am stumped !?
Thanks
Steve
Very strange! I don't think there's enough info in your description to fix the problem though.
The error message simply means "I tried to connect to a Citrix server and I couldn't".
The strange part is that is seems to work with one user and not another. I assume everything else is equal (you're accessing the farm from the same machine, with the same client configuration etc?).
The first thing to do is check basic connectivity. i.e. when logged in as the non-working user, telnet to the ICA port, i.e. telnet <citrixserver> 1494
You should get connected, if you do that's a start...
>> Edited by _DeeJay_ on Saturday 3rd September 09:26
lockstock2sb said:
When i try to add the farm i get the "There is no Citrix Server configured on the specified address" message.
I assume you mean add in PN client on a PC...
lockstock2sb said:
What i have noticed is my user account (that has domain admins rights) can connect and works superbly whereas a bog standard user (Internet Users group) fails to connect.
From the same PC?
Yeah i've done all my testing from my own machine. Farm configuration was done from PN on the machine also.
When you add the IP address of the server it finds the farm during configuration, so it is being seen. Also the fact that the admins can get in also says to me that the connectivity is ok at a basic level.
The citrix environment is behind a firewall in an external dmz by the way. But obviously if i have connected then the firewall ports are ok otherwise the admins would not get in either.
I will try the telnet thing tomorrow as an extra test and post back. Thanks !
When you add the IP address of the server it finds the farm during configuration, so it is being seen. Also the fact that the admins can get in also says to me that the connectivity is ok at a basic level.
The citrix environment is behind a firewall in an external dmz by the way. But obviously if i have connected then the firewall ports are ok otherwise the admins would not get in either.
I will try the telnet thing tomorrow as an extra test and post back. Thanks !
lockstock2sb said:
Yeah i've done all my testing from my own machine. Farm configuration was done from PN on the machine also.
When you add the IP address of the server it finds the farm during configuration, so it is being seen. Also the fact that the admins can get in also says to me that the connectivity is ok at a basic level.
The citrix environment is behind a firewall in an external dmz by the way. But obviously if i have connected then the firewall ports are ok otherwise the admins would not get in either.
I will try the telnet thing tomorrow as an extra test and post back. Thanks !
The other thing to consider is what IP addresses the Citrix servers are 'seen' on. Are the servers in the DMZ accessed by their 'real' IP addresses or NAT'd?
Access to the Internet (I assume the DMZ is considered external), how is that controlled? Proxy server?
The port used to locate a published app/farm is different to the actual ICA connection, so the ability to do one doesn't mean you can automatically do the other.
OK, so an administrator can get in, but a non-administrative user cannot...I'll assume that your testing involved:
1. Logging in to your PC as you (administrator).
2. Configuring PN and connecting to published app as you (administrator).
3. Whilst still logged on to your PC as you (administrator), changing the credentials in PN and attempting to run the same published app as a non-administrative user.
Test 2 confirms that NAT/firewall ports/ICA listener etc is all OK.
Do you have a proxy between you and the server that would affect non-administrative users differently?
If that is the process you tried, take a look in the server event log...what's there?
Citrix Licensing could be your problem and would be my first bet given that administrative users work...www.knowledgecenter.citrix.com/servlet/KbServlet/download/6293-102-13605/Licensing_Guide.pdf (page 53, first paragraph)
>> Edited by UpTheIron on Sunday 4th September 14:54
1. Logging in to your PC as you (administrator).
2. Configuring PN and connecting to published app as you (administrator).
3. Whilst still logged on to your PC as you (administrator), changing the credentials in PN and attempting to run the same published app as a non-administrative user.
Test 2 confirms that NAT/firewall ports/ICA listener etc is all OK.
Do you have a proxy between you and the server that would affect non-administrative users differently?
If that is the process you tried, take a look in the server event log...what's there?
Citrix Licensing could be your problem and would be my first bet given that administrative users work...www.knowledgecenter.citrix.com/servlet/KbServlet/download/6293-102-13605/Licensing_Guide.pdf (page 53, first paragraph)
>> Edited by UpTheIron on Sunday 4th September 14:54
The internet users group is essentially domain users, but there is a group policy applied that restricts drives, sets home page in IE etc etc. We know this is fine and not causing any problems.
When i have been testing i have been logged in as my personal account (which happens to be a domain admins/administrative account)
What i have noticed today upon testing again is i can add the farm and run it under any user account on my machine. However when i try the same again on the machine next to me it trys to connect to the farm and then i get the error message "There is no citrix metaframe server on the configured address"
When i try adding the farm on the said machine using the admin account for the citrix domain i still get the same message. The PC in question is running PN version 8.00, whereas i'm running version 6.00 and manage to get in so the version is not an issue.
Upon testing the connection on other machines besides these 2 pc's, other pc's can also access the server fine, although i have found another PC thats spitting out the same message.
Again this PC can ping the server etc etc....
Will try the telnet thing now and post back shortly
Thanks for the feedback so far guys !
Steve
EDIT : Sorry, just so you know, the citrix environment is on the other side of a firewall, and the citrix servers have a direct connection out to the net from the outwards...
>> Edited by lockstock2sb on Monday 5th September 11:57
When i have been testing i have been logged in as my personal account (which happens to be a domain admins/administrative account)
What i have noticed today upon testing again is i can add the farm and run it under any user account on my machine. However when i try the same again on the machine next to me it trys to connect to the farm and then i get the error message "There is no citrix metaframe server on the configured address"
When i try adding the farm on the said machine using the admin account for the citrix domain i still get the same message. The PC in question is running PN version 8.00, whereas i'm running version 6.00 and manage to get in so the version is not an issue.
Upon testing the connection on other machines besides these 2 pc's, other pc's can also access the server fine, although i have found another PC thats spitting out the same message.
Again this PC can ping the server etc etc....
Will try the telnet thing now and post back shortly
Thanks for the feedback so far guys !
Steve
EDIT : Sorry, just so you know, the citrix environment is on the other side of a firewall, and the citrix servers have a direct connection out to the net from the outwards...
>> Edited by lockstock2sb on Monday 5th September 11:57
Assuming that the machine can resolve the name of the Citrix server, then it's highly likely that port 80 is allowed through the firewall, but not tcp/1494 (so PN will work right until the client attempts to use ICA).
I assume you've tried doing the same when logged in as the administrator (which does work) and got a connection (you should see the heartbeat from the Citrix server which outputs "ICA" every 5 seconds)
>> Edited by _DeeJay_ on Monday 5th September 15:39
I assume you've tried doing the same when logged in as the administrator (which does work) and got a connection (you should see the heartbeat from the Citrix server which outputs "ICA" every 5 seconds)
>> Edited by _DeeJay_ on Monday 5th September 15:39
Yeah i've tried the telnet from two different accounts. one domain user and one admin.
EDIT: I can telnet in on xxx.xxx.xx.xx 1494 and i get the ICA messages on the screen. I cant understand why this didnt work earlier !?
I can't get a name resolution on the citrix server, but i was expecting that as the citrix server's dns settings are set for the ISP's dns servers and the firewall's probably blocking the requests from this side anyway.
Its a black art this citrix malarky !!
>> Edited by lockstock2sb on Monday 5th September 16:10
>> Edited by lockstock2sb on Tuesday 6th September 10:33
EDIT: I can telnet in on xxx.xxx.xx.xx 1494 and i get the ICA messages on the screen. I cant understand why this didnt work earlier !?
I can't get a name resolution on the citrix server, but i was expecting that as the citrix server's dns settings are set for the ISP's dns servers and the firewall's probably blocking the requests from this side anyway.
Its a black art this citrix malarky !!
>> Edited by lockstock2sb on Monday 5th September 16:10
>> Edited by lockstock2sb on Tuesday 6th September 10:33
OK...
So you can telnet to 1494, that's good. I presume you can do this on the machine that doesn't work?
Can you telnet to port 80?
I suspect so, given that it works on some PC's, but not others...
Still sounds like licensing, but Terminal Services licensing rather than Citrix...is an event log error (1004) generated (on the Citrix server) when a connection fails?
Does the locally logged on user have the necessary rights to the MSLicensing key in HKLM?
Try deleting HKLM\SOFTWARE\Microsoft\MSLicensing on the failing machine.
What OS is the problem machine running? XP? SP2?
>> Edited by UpTheIron on Monday 5th September 19:11
>> Edited by UpTheIron on Monday 5th September 19:11
So you can telnet to 1494, that's good. I presume you can do this on the machine that doesn't work?
Can you telnet to port 80?
I suspect so, given that it works on some PC's, but not others...
Still sounds like licensing, but Terminal Services licensing rather than Citrix...is an event log error (1004) generated (on the Citrix server) when a connection fails?
Does the locally logged on user have the necessary rights to the MSLicensing key in HKLM?
Try deleting HKLM\SOFTWARE\Microsoft\MSLicensing on the failing machine.
What OS is the problem machine running? XP? SP2?
>> Edited by UpTheIron on Monday 5th September 19:11
>> Edited by UpTheIron on Monday 5th September 19:11
UpTheIron said:
OK...
So you can telnet to 1494, that's good. I presume you can do this on the machine that doesn't work?
Can you telnet to port 80?
I suspect so, given that it works on some PC's, but not others...
Still sounds like licensing, but Terminal Services licensing rather than Citrix...is an event log error (1004) generated (on the Citrix server) when a connection fails?
Does the locally logged on user have the necessary rights to the MSLicensing key in HKLM?
Try deleting HKLMSOFTWAREMicrosoftMSLicensing on the failing machine.
What OS is the problem machine running? XP? SP2?
>> Edited by UpTheIron on Monday 5th September 19:11
>> Edited by UpTheIron on Monday 5th September 19:11
This looks like a very similar problem: www.brianmadden.com/forum/tm.asp?m=6842&mpage=1&key=᪺, and licensing related as already suggested.
It may be worth a quick check in the Citrix server event log (as it's going to attempt to retrieve a license for you).
Oh, and you may want to xx out that IP address, you never know who's lurking in technical forums ready to break stuff!
UpTheIron said:
Are you serious??? Are you aware of the risks?
Well apart from the ICA traffic the firewall is locked down tighter than a nuns chuff. It was installed some time ago by head office. I'm not up on the ins and outs of the setup but i'm sure this is ok... what risks are you talking about mate ?
UpTheIron said:
OK...
So you can telnet to 1494, that's good. I presume you can do this on the machine that doesn't work?
Can you telnet to port 80?
I suspect so, given that it works on some PC's, but not others...
Still sounds like licensing, but Terminal Services licensing rather than Citrix...is an event log error (1004) generated (on the Citrix server) when a connection fails?
Does the locally logged on user have the necessary rights to the MSLicensing key in HKLM?
Try deleting HKLMSOFTWAREMicrosoftMSLicensing on the failing machine.
What OS is the problem machine running? XP? SP2?
These machines are on XP Sp1, and unfortunately for me have a very specific build with all manner of policies applied. This is again at the wisdom of head office.
Its an utter pain in the arse becuase they want us to fix stuff, but they've locked their own bloody IT teams out of the build ! TWATS ! lol
I'll try and get into the registry though and try. Thanks
_DeeJay_ said:
This looks like a very similar problem: www.brianmadden.com/forum/tm.asp?m=6842&mpage=1&key=᪺, and licensing related as already suggested.
It may be worth a quick check in the Citrix server event log (as it's going to attempt to retrieve a license for you).
Oh, and you may want to xx out that IP address, you never know who's lurking in technical forums ready to break stuff!
I'll have a look at that post - thanks mate !
Oh, and that IP address isnt our external one
Hmmm, not your real IP address? In which case, I assume your Citrix servers aren't actually directly on the Internet (but on a DMZ possibly, with their address NAT'd to the ourside world).
The other possibility here is that PN is attemping to connect to the wrong IP address. I assume your Citrix server are accessed from the Internet as well as internally? If that's the case, you need to tell your client which address to connect to. You'll probably have their real address and an alternate (i.e. internet facing) IP specified on each machine.
Have you configured your clients to connect to the correct one??
Darren.
The other possibility here is that PN is attemping to connect to the wrong IP address. I assume your Citrix server are accessed from the Internet as well as internally? If that's the case, you need to tell your client which address to connect to. You'll probably have their real address and an alternate (i.e. internet facing) IP specified on each machine.
Have you configured your clients to connect to the correct one??
Darren.
Hi Darren ,
There is currently only the 1 server in the farm. It is not accessed externally at this time. Connectivity is fine from the problem client(S) as i can ping and telnet on port 1494 to the server.
What i have noticed is my TS server is only issuing temporary licenses to clients as opposed the user cals i have installed. The TS server has been activated. perhaps this might be a possible cause ?
Steve
, There is currently only the 1 server in the farm. It is not accessed externally at this time. Connectivity is fine from the problem client(S) as i can ping and telnet on port 1494 to the server.
What i have noticed is my TS server is only issuing temporary licenses to clients as opposed the user cals i have installed. The TS server has been activated. perhaps this might be a possible cause ?
Steve
lockstock2sb said:
Hi Darren
There is currently only the 1 server in the farm. It is not accessed externally at this time. Connectivity is fine from the problem client(S) as i can ping and telnet on port 1494 to the server.
What i have noticed is my TS server is only issuing temporary licenses to clients as opposed the user cals i have installed. The TS server has been activated. perhaps this might be a possible cause ?
Steve
Connectivity is fine, because you know what addresss to ping/telnet to (and if the server is NAT'd then that's not necessarily the case with the PM client!)
However, it is very probable that it's a licensing problem and I'd sort out your licensing server first!
Gassing Station | Computers, Gadgets & Stuff | Top of Page | What's New | My Stuff