My MAC users are experiencing a strange problem using the Citrix Online Plug-in version 11.0. I understand that there have been some issues regarding the "dazzle access" through Citrix secure gateway, but this problem seems different than those I have read so far.

First a little back ground info:

Citrix Secure Gateway: 3.1.2
WebInterface: 5.2
XenApp 5.0 for Windows Server 2003

First, I created a second XenApp services sites (PnAgentMac). Then I followed the suggestion of Scott MCDonald, and changed the variable [SERVER_AND_PATH] to the FQDN. Now, the dazzle client will contact the server, and I get prompted for mu authentication credentials. I enter the proper information, and as soon as I click "OK", the client appears to hang for a full 1 minute, then returns the error "Unable to connect to server. Check server name and you network connection and try again."

As others have stated, I do not experience this problem using the web client, and my windows users can access via the web interface or the PNAgent site. It acts almost as an authentication issue, however, there is no indication of that in the event logs.

Any advice or ideas are greatly appreciated!

Thanks,
Eric

UPDATED Information:

This morning I conducted a few tests using the modified XenApp services site (/citrix.PNAgentMac), and noticed that the client does not hang, and within seconds authenticates, and displays the available apps in the dazzle client. Externally, however, I still experience the same symptoms.

I am leaning toward a name resolution issue, rather than an authentication issue.

Advice and comments still welcome.

Eric

Eric, is the secure access configured for Secure Gateway on the XenApp Services site?

Scott,

Secure Access is set to "Gateway Direct," which is the same setting used for the original services site.

Thanks,

Eric

Are you using the full path including config.xml as the server path in dazzle ?

There are some other tips on the comments here: http://community.citrix.com/display/ocb/2009/08/12/XenApp+Plugin+and+Dazzle+for+Mac+OS+X+-+Released!
And there is also this hotfix mentioned for secure gateway: http://support.citrix.com/article/CTX110111

Hi Frank,

I am using the full path including the config.xml file. I also look into CTX110111, but that does not apply to my configuration. I am using CSG3.1. I did install the 3.1.3. update, but the same thing happens.

I also compared the config.xml output from both the original XenApp Services Site (PNAGENT) and compared that to the new XenApp Services Site (PNAGENTMAC). The only difference is that the original site processes the variable and uses "localhost", whereas the new site uses the FQDN, that I hard coded.

The dazzle client does process and interpet the FILETYPE variable.

Thanks again!

Eric

OK, so I finally have this one solved.

After creating the new XenApp Service Site, and configuring it just like the original, I had to modify the config.xml file and replace the [SERVER_AND_PATH] variable with FQDN/Citrix/PNAgentNew.

Next, I had to change all references if http:// to https://. This may be related firewall settings, although I am fairly certain that my perimeter firewall allows traffic on both TCP Ports 80 and 443, but I won't be able to verify until Monday morning.

This will make my MAC users very happy! :D

I tested the Dazzle client on an Intel MacBook Pro running OSX Snow Leopard version 10.6.2.

Thanks Scott and Frank for your help.

Eric

I'm having a a problem connecting Dazzle (Snow Leopard, Dazzle 11.0.0) to citrix server inside our firewall. The citrix server is HTTP only (i.e. no HTTPS). When I try to connect, I get the error "The server connection is not secure". Is there a way to set Dazzle preferences to accept HTTP connections?

Thanks.

Yes there is. Check this topic: http://forums.citrix.com/message.jspa?messageID=1420481

Frank,

The thread you referred me to seems to discuss windows install options and registry modifications, but I'm having problem using Dazzle from a Mac running OS X 10.6.2 (Snow Leopard). My company doesn't support Macintoshes, so I'm a bit on my own here. I installed Dazzle (11.0.0) using the .DMG file I downloaded from the Citrix site.

Is there a way to do the "command line" install from a Mac, and if so, how.

Thanks,
-Dave

Oops I didn't see it was about the mac dazzle. I just tested on my mac to connect using just HTTP and it works! I also have the default mac client install from the website, also running snow leopard.

Any ideas on how I can debug this issue? Is there a way to turn on verbose logging or something?

Thanks,
-Dave

Dave, Dazzle should accept a connection to an HTTP site, it will display the warning but you should still be able to connect.

Nope, it doesn't accept the connection. Here is what happens:
1) From applications, I launch dazzle
2) It pops up a window asking for my account info for http://<server name>
3) I enter the username and password, but get an error stating that "The server connection is not secure".
4) I click OK to try the login anyway, but the pop-up window wiggles and will not let me proceed.

-Dave

Hi Dave,

The shaking login dialog is usually because the server has rejected your password, and not to do with SSL. Is there a chance you have the wrong password? Can you try logging in via Web Interface?

Thanks,

Chris

Chris: This was a helpful hint - thanks!

I'm still not able to connect, but have some additional information:

1) In Dazzle, I changed the user name to <domain>\<user name>, and now I now I'm past the "shaking box". However, there are no applications available for me to run.

2) When I login via the web client, I see "Outlook" as an application I can run, but when I click it, my VMware Fusion icon bounces, and then I get an error opening a file "Citrix_02.ica: "The following files that you are trying to open are unavailable to the guest. Creating shared folders for the enclosing directories will allow them to be opened in the future." I'm trying to figure out how to launch Citrix applications without running the vitual PC (i.e. run the citrix client directly on the Mac). Is there some way to change the association of the .ICA files to launch dazzle?

Thanks,
-Dave

On the mac go to \library\application support\citrix and run the program that is listed. Once you do that you should be fine. That will "fix" the MAC to use that application.

Citrix has promised an update to the MAC client at the begining of the year. With any luck they would learn about the problems and come up with a more workable solutions.

I would say 99.9% of the MAC users I have would have no clue what I said in the first part of this. PC users would understand this a bit more.

I have the online plug-in working now. I found the hint in this thread: http://serverfault.com/questions/86194/how-do-i-get-citrix-apps-to-open-with-citrix-client-instead-of-vmware-fusion-on-m Someone suggested that you take an .ICA file, bring up the get info window, and and modify the "Open with:" to use "Citrix Online Plug-In.app".

I still don't have any apps available through Dazzle, but at least now I don't need to launch VMware to run Outlook.

BTW: I know some people were noting that they needed to run Safari in 32-bit mode. My Safari is running in 64-bit mode and launches Online-Plug-in applications fine.

Thanks everyone for the help,
-Dave

Hi Dave, Michael,

Might be worth asking your admin about not getting any apps from Dazzle - it may be that they haven't configured the PNAgent site in the same way as from the Web Interface.

Regarding 2, in addition to Michaels suggestion you could stop Fusion associating any file type with that VM by unticking the "Open your Mac files and web links using Windows applications" option in the application settings. This would stop all documents being automatically openend by the Windows applications though so isn't ideal. Another option is to remove the client from the Windows VM.

To change file type associations individually you need to find a document with an .ica extension (create one in textpad - it doesn't have to be a real .ica file), then right-click on it in finder. Select open with from the menu and then other - navigate to the client engine (/Library/Application Support/Citrix/Citrix online plug-in.app) and make sure that "Always open with" is ticked. Note that this should work but .ica files (or their mime type) is handled by the a browser plug-in in 11.0 so this may not work in all cases.

Thanks,

Chris

You found it while I was composing the reply!

Yes - the 64-bit Safari issue was addressed in an update posed last September.

Thanks,

Chris