The application enumeration server constructs an ICA file for the user and inserts the STA ticket in the Address field of the ICA file. This ticket and its corresponding data remain in memory at the STA for a configurable number of seconds (100 by default). The STA responds by generating a ticket and sending it back to the application enumeration server. The data sent to the STA includes the address of the XenApp Server to which the user will connect and, in the case of Web Interface 2.0 and Secure Access Manager 2.0, extended information about the name of the current user and the published application the user wants to run. Other components communicate with the STA using XML over HTTP.Īpplication enumeration servers request tickets at application launch time by sending data to the STA as part of a ticket request. The extension is called CtxSta.dll and is hosted in the /Scripts folder by default. For example, if your Web Interface server is protected with RSA SecurID, by design only SecurID-authenticated users can traverse the Secure Gateway server.Ī: The STA is written as an ISAPI extension for Microsoft Internet Information Services (IIS). This design allows the Citrix Secure Gateway server to inherit any authentication methods in your web server. If users have valid STA tickets, the gateway assumes that they passed the authentication checks at the web server and should be permitted access. Application enumeration servers request tickets only for users who are already authenticated to the Web server. Instead, the gateway server defers authentication to an application enumeration server and uses the STA to guarantee that each user is authenticated. Application enumeration servers are responsible for authenticating users, enumerating published application icons, and producing an ICA file for a client that allows them to connect to a published application through a Secure Gateway server.Ī: In Citrix Secure Gateway deployments, the gateway server does not perform authentication of incoming requests.Throughout this article, the following types of servers are grouped into a single category called application enumeration servers: It is used to control access for a Citrix Secure Gateway server.Ī: XenMobile, Web Interface, StoreFront, XenApp Secure Access Manager, NetScaler Gateway and Citrix Secure Gateway interact with STA. Q: What are some of the common configuration Errors seen by Citrix Technical Support? OverviewĪ: The Secure Ticket Authority (STA) is an XML web service that exchanges XenApp server information for randomly generated tickets. Q: How can I test the STA to be sure it is Working properly? Q: Why does the Microsoft IISLockDown Tool break the STA? Q: How should IIS be configured to host the STA? Q: Can I share a Single STA with multiple Farms, Gateways, and Enumeration Servers? Troubleshooting Q: Can I use several STAs with Microsoft Network Load Balancing? Q: Do users logon through the gateway in the morning and run a single published application all day or do they launch several applications throughout the day? Q: How can we set the life time of STA Ticket, after which the ticket should be invalid? Scalability Q: What other information is required to Logon other than a valid STA Ticket? Q: Can an Attacker send random Tickets to the Gateway to Log On? Q: How do I change the STA port from 80 to something else? Q: Must the STA always be addressed using a Fully-Qualified Domain Name? Q: How do I protect the STA Traffic with SSL? Q: Is it possible for someone to hijack a ticket? Q: Are Tickets ever written to Disk at the STA? Q: Is the Ticket validated against the Workstation? Q: What are the differences among different versions of the STA? Security Q: Is there a version of the STA that does not require IIS? Q: What Citrix products interact with the STA? The questions are divided into following four categories: Overview This article answers some frequently asked questions regarding the Citrix Secure Ticket Authority (STA). Note: The same principles and concepts holds good for NetScaler Gateway as well.
#Citrix reciver launches from web but not from application install#
How to Download and Install Secure Gateway for WindowsĬTX101997 FAQ: Citrix Secure Gateway/ NetScaler Gateway Secure Ticket AuthorityĪrticle | Configuration | 133 found this helpful | Created: | Modified: Information How to Configure Secure Gateway HTTP to HTTPS Redirection How to Change the Secure Ticketing Authority Port Number Customers who viewed this article also viewed
0 kommentar(er)
