Integrating Novell
and Citrix Technology

David Shepherd

Senior Technical Specialist

Novell Consulting (UK)

Matt D'Amico

System Engineer

Citrix Systems Inc

Introduction

Introduction

Citrix® MetaFrame® Presentation Server 3.0

ZENworks® for Desktops 4.01

ZENworks Desktop Management 6.5

Deployment of an Integrated Novell and Citrix Solution

Synchronization of ZENworks Apps. to Published Apps.

iPrint – site based Printing

Novell and Citrix Web Interface Integration

Nsure™ Identity Manager and Citrix

Future Developments

Conclusions

Citrix and Novell

Citrix MetaFrame Presentation Server 3.0

Key Feature Overview

Simplified Licensing for all Access Suite Products

Enhanced Support for Large Farms

Zone Preference and Failover

SmoothRoaming

Session Reliability

Workspace Control

Dynamic Session Reconfiguration

Feature Overview cont.

Enhanced SpeedScreen™ Support

SpeedScreen Multimedia

Enhanced Client Support for 3.0 Features

Windows 32bit Client Improvements

ICA® Java™ Client Improvements

Installation Requirements

Windows 2000 Server

166+ Pentium, 256MB RAM, 2GB Drive

Windows 2003 Server

550/733MHz, 256MB RAM, 2GB Drive

MetaFrame Presentation Server

400MB Disk for Enterprise Edition

250MB Disk for All client software

50MB Disk for Management Console

Data Store

Access, SQL 2000 MSDE, Oracle, IBM DB2

Directory Service

Windows NT, Active Directory, Novell eDirectory™

Citrix Access Suite Licensing

Licenses reside on the Citrix MetaFrame Access Suite License Server

Moves licensing to higher level and not tied to specific server farms or Citrix products

Managed through the Citrix License Management Console

MetaFrame Presentation Server 3.0 Licensing Architecture

MetaFrame Presentation Server 3.0 Licensing Architecture

Server Farm One

Server Farm Two

Data Store

Data Store

Default Port 27000

ICA Client

ICA Client

This client would consume one license

This client would consume one license

ICA Client

This client would also only consume one licence

License Server

Enhanced Support for Large Farms

‘Improved Large Farm Support’

Reduces IMA network traffic, specifically between zones

Removes inter-zone sharing of load levels

Zone Data Collectors (ZDC) will query other ZDC’s for load information when necessary

Option to revert to ‘legacy’ mode if necessary

Dynamic ZDC replication enhancements

In case of a ZDC election, servers update the new ZDC with multiple-record updates in one IMA message

Reducing traffic between servers and the data store

Improving Directory Change Notification polling /
update mechanisms

Now using a time-stamp / delta based mechanism for DC polling updates for the LHC

Licensing traffic removed from IMA

MetaFrame Presentation Server 3.0
Simplified Farm Architecture

zone

zone

zone

zone

Farm

MetaFrame Presentation Server 3.0 Single Farm

zone

zone

zone

zone

Farm

‘Improved Large Farm Support’

Large Farm Support Summary

Improved support for farms that span WAN’s

Less network traffic generated between servers, ZDC’s and data-store

More responsive admin tools in large farms with limited bandwidth connections

Improved ZDC failover response times

Better data-store server scalability

Dual Proc Database Server May Support Approx 500 + Servers

Zone Preference & Failover Concept

Zone Preference & Failover Concept

ICA Client

zone 2

zone 3

zone 4

zone 1

Zone 1 Preferred Zone

Zone 2 Backup Zone

Zone 3 Backup Zone

Zone Preference and Failover

Specify Primary and Failover Zones

Works with PN Agent and Web Interface only

Session Reliability

Session Reliability

Session Remains open for view in Network Failure

ICA Session Time to Live on Disconnect

Configured as a server policy, default 180 (3 Minutes)

Currently Not available with Secure Gateway

Currently requires 8.x Windows 32client

Can be disabled with User/ICA Client Policies

Session Reliability

Workspace Control

Workspace Control

Aspect of Follow Me Roaming Demo

Settings for PNAgent or for Web Interface users

Logon (disconnected only, all active)

Disconnect (All at once)

Reconnect (disconnected only, all active)

Logoff (For Web Interface only, or all applications also)

Win 32 client and Java 8.x clients are supported

Not for Custom ICA Connections, or Anonymous

Dynamic Session Reconfiguration

Sessions automatically adjust to the display settings of the client device.

Allows reconnection of sessions to devices with different display settings.

PN & PN Agent can dynamically adjust live sessions (orientation, color depth, resolution etc)

Multimedia SpeedScreen Acceleration

Multimedia SpeedScreen Acceleration

Photographic Images

Streaming
Audio & Video

Macromedia Flash Content

Citrix ICA Client Enhancements

Client Enhancements

Windows 32bit Client Improvements

Flash Acceleration

Multimedia Enhancements

Bi-Directional Audio Support

ICA Java Client Improvements

Seamless Windows

Session Sharing

Included in Follow Me Roaming

Universal Print Driver version 1 support

Root Certificates for SSL Included

Content Redirection

ZENworks for Desktops 4.01
and its Limitations with Citrix MetaFrame Presentation Server

ZENworks for Desktops 4.01
and issues with Citrix MetaFrame Presentation Server

Good option for Terminal Server only deployments

Issues with Citrix MetaFrame Presentation Server

No Support for Windows Server™ 2003

No support for Citrix Load Balancing. Product has its own load balancing service but not as functional as the Citrix native service

Limited/No Support for Citrix Secure Gateway. With CSG 1.0 relay mode was supported. However, CSG 2.0 no longer uses relay mode.

ZENworks 6.5 Desktop Management

Integration Capabilities

Support for Citrix running on Windows Server 2003.

Support for a ZENworks Application Object directly launching a Citrix published application, Myapps and NAL.

Support for Citrix published application load balancing.

Support for Secure Gateway (In conjunction with Extend Director™ 4.1 Launch Items Gadget).

Deployment of an Integrated Solution
Novell and Citrix

To go MAD or Not?

Deployment of Active Directory as part of a Citrix MetaFrame Presentation Server Farm is purely an application related question.

Do the applications presented by the farm require Active Directory (eg. Exchange)?

If there is no application requirement then installation of Active Directory is not required.

Aims of the Integrated Solution

Citrix MetaFrame Presentation Servers deployed with no AD Forest or NT Domain

Support for Microsoft Windows Server 2003.

User Home Directory/Terminal Server profile on a NetWare® 6.5 Server/ Open Enterprise Server (NetWare/Linux)

User configuration and administration from ConsoleOne®/iManager

Policies deployed from ZENworks for Desktops to manage Citrix

Use of iPrint to manage printing on the servers

Applications presented through the ZENworks Nal/Myapps front end with no difference to the user launching thin/thick apps

Full support for Citrix Load Balancing and Secure Gateway

Software components of the solution

Software required

Novell NetWare 6.5 / Open Enterprise Server

Novell Secure Login 3.5

Novell ZENworks 6.5 Desktop Management

Microsoft Windows 2000 SP4 /2003 Server

Citrix MetaFrame Presentation Server 3.0

Citrix Web Interface (2.0/3.0)

Citrix Secure Gateway

Architecture
of the Demonstration System

Citrix MetaFrame Presentation Server 3.0

Windows 2000 Server SP4

Novell iPrint Agent

ZENworks Management Agent

Citrix Secure Gateway

Citrix Secure Ticketing Agent

Citrix Web Interface Server

SUSE 9.0 Linux

Open Enterprise Linux Server

Runs the directory and provides authentication

Holds the users home directory and profile

Runs the network printers via iPrint

Client System

Windows NT (XP/2000)

Secure Login 3.51 Client

Novell Client 4.9 SP2

Installation of the Terminal Server

Installation Order

Installation of operating system (Windows 2000 SP4/Windows 2003)

Installation of the Novell Client™ (4.9 SP2) with patches

Installation of the iPrint Agent

Installation of the ZENworks Desktop Management Agent

Installation of Citrix MetaFrame Presentation Server 3.0

Application of outstanding service packs/ Hotfixes

1

2

3

4

5

6

Installation of the Operating System

Microsoft Windows 2000 SP4 plus hotfixes /Windows 2003

Install server as Workgroup Server

Install Terminal Server option plus Licensing Server (If first server in farm)

Only install required protocols, do not use IPX unless required

Upgrade Web Browser to Internet Explorer 6.0 plus latest security patches

Configure DNS name resolution

Installation of the Novell Client

Novell Client

4.9 Service Pack 2 plus hotfixes

Change user install/execute command before installation

DO NOT INSTALL THE NETIDENTITY AGENT

Disable NMAS™ Authentication

Contextless Login – works reliably with SP2

Change the default location profile – turn off saves

Disable unused name resolution methods

Enter a static configuration for the SLP DA

Configure Bad Name Cache

On W2003 sometimes gives a Service could not be started error

Installation
of Citrix MetaFrame Presentation Server 3.0

MetaFrame Presentation Server Installation

The install detects the Novell Client and makes the following registry changes:

HKLM\Software\Microsoft\Windows NT\CurrentVersion\WinLogon

Value=GinaDLL	Type=REG_SZ	Data=CTXGINA.DLL

HKLM\Software\Microsoft\Windows NT\CurrentVersion\WinLogon

Value=CTXGINADLL Type=REG_SZ Data=NWGINA.DLL

Adds a Citrix GINA to the Server to enhance the information that MetaFrame Presentation Server can send to the Novell Client

Installation
of Citrix MetaFrame Presentation Server 3.0 (cont.)

Novell Client can be installed after MetaFrame Presentation Server but manual registry changes are required

Installation
of the ZENworks Desktop Management Agent

Functionality Required

Application of MS Group Policies held in eDirectory

Dynamic Local User to allow management of users without Active Directory or NT4 Domain

The application of a policy to set the Terminal Server home and profile directories as locations in the NetWare/Open Enterprise File System

Installation
of the Management Agent (cont.)

DO NOT install the Remote Management option

Citrix MetaFrame Presentation Server Configuration

Installation of the iPrint Agent

iPrint Agent Considerations

Run CHANGE USER /INSTALL before install

Use the latest available code (NIPP.exe)

Run CHANGE USER /execute after install

Configure all printers as user printers for MetaFrame Presentation Servers

iPrint Issues on a MetaFrame Presentation Server

ICAPTURE command does not work

No automatic auto-update of the iPrint Agent

Configuration
of ZENworks 6.5 Desktop Management Policies

The following ZENworks Policies need to be configured as part of the User Policy Package:

Dynamic Local User Policy

iPrint Policy

Windows Group Policy

Windows Terminal Server Policy *

Windows 2000 Server Specifics

ZENworks 6.5 Desktop Management does not directly support the Windows Terminal Server Policy. If this policy is required for configuring Terminal Server Specific Parameters.

Install the wmTermSv.sch file from the Zfd 4.01 media.

Configure the Terminal Server Policy Package with the ZEN 4.01 ConsoleOne Snapin.

The ZENworks 6.5 Desktop Management Agent will see the package and apply it.

Apply any required post SP4 hotfixes.

WIN2000

Windows Server 2003 Specifics

No Terminal Server Policy Package.

Terminal Server Profile and Terminal Server Home Directory available through group policies, but only applicable to the Workstation Policy Package.

Window Server 2003 is required to be imported to the Tree. However make certain it will not use any existing Workstation Packages setup for Workstations elsewhere in the Tree since Workstation Policy Package is the same for Servers and Workstations.

WIN2003

Dynamic Local User Policy

Dynamic Local User ...

If using DLU and Group Policies

Make sure the client is using an NWGINA.dll dated 1/11/2004 or later.

Make sure that the ZENworks Desktop Management Agent is the agent that ships with the ZFD65u2.exe update.

iPrint Policy

iPrint Policy Issues

Sometimes does not apply consistently

IPRNTCMD from the login script or APP object

Windows Group Policy

Windows Group Policy...

Window Terminal Server Policy
Windows 2000 Only

Windows Terminal Server Policy
Windows 2000 Only

Assignment of Policy Packages

ZENworks 6.5 Desktop Management allows the assignment of policies by the authenticated operating system. Different policies supported for the following OS types:

Windows 98

Windows 2000

Windows 2000 Server

Windows XP

Windows 2000 Terminal Services

Windows Server 2003

Allows a user to have one policy package for client access and one for Citrix access

iPrint
Site based Printing

Location Dependant Printer Assignment

As a user authenticates to the MetaFrame Presentation Server a printer relevant to the users current location is deployed.

This printer is configured as the users default printer until the user authenticates from another site. Site in the context of this section is a range of IP Addresses within a companies infrastructure either internal or external.

This process purely occurs within the session.

This printer is transparently removed when the user changes site.

Location Dependant Printer Assignment Capabilities

iPrint can allow printers to be deployed by the client devices IP Address.

This allows a local printer to follow a user around from site to site.

Printer is assigned within the session.

iPrint deploys the driver to the MetaFrame Presentation Server.

No changes to the client device

Process is completely transparent to the user.

Printer is assigned by comparing the client devices IP Address to see if it belongs to a particular sites subnet.

How the Printer Is Delivered?

Runs from the Novell Login Script

map ins s1:=sys:public

map p:=%home_directory

if <SESSIONNAME> <>"" THEN

#cmd /c z:prnselect.cmd

#wscript z:readreg.vbs

END

exit

How the Login Script Works

Only runs when authenticating through a Citrix session by the use of the %SESSIONNAME% env variable.

PRNSELECT.CMD – Removes the previous site printer and then uses ICACLIENTINFO util to set env variable to client devices IP Address. The batch file then runs the test utility that reads the client IP Address and compares it to a table and sets an enviroment variable in accordance with the subnet that the client IP Address belongs to.

READREG.VBS – Reads the enviroment variable from the registery and executes the IPRNTCMD command with the correct parameters to setup the printer for the session.

If no match is found then the env variable is set to NOTFOUND and no printer assignment is done.

Novell and Citrix
Web Interface Integration

Citrix Web Interface Server

Issues with Web Interface and Novell Integration

Novell Integrated solution only available on IIS on Windows 2000/2003

Requires Novell Client on the Web Server to support cx-login.

Context-less login solution is slow when large number of contexts exist, 20 contexts can add large amounts of time to the login process due to the mechanisms employed.

Citrix Web Interface
and Context-less login (IIS)

CX Login can be provided without the Novell Client on the Web Server using CLAW http://www.novell.com/coolsolutions/feature/3604.html

Requires the Novell LDAP ActiveX Controls for Citrix Web Interface 2.0

Can support SSL and require the existence of a certificate on the Web Server running Web Interface.

Support Provided for Web Interface 2.0 and 3.0 on IIS.

Jointly developed by Novell Consulting and Centralis.

Installation FAQ for Web Interface 2.0

Installation instructions are part of the download from Cool Solutions

Requires the Novell ActiveX LDAP Control

Can support an SSL Connection to the LDAP Server

Installation FAQ for Web Interface 3.0

Instructions are provided with the download

Error in installation instructions. Second reference to Authentication.cs should be Login.cs

Does not require the LDAP ActiveX Control.

Does not support an anomymous ldap bind, has to be authenticated as an account with a username and a password.

Can support an SSL connection to the LDAP Server.

Advantages of the Solution

Advantages of the Solution

No Novell Client required on the Web Interface Server. No security implications of installing the Novell Client in an Internet facing machine.

Minimal load imposed on the Web Server since the LDAP lookup is serviced from the LDAP Server.

Secure Solution enforced by the use of SSL and a certificate on the Web Interface Server.

Code changes are additional to the existing ASP pages so no existing functionality impacted.

Web Interface 2.0 on Linux
and Novell Integration

No support out of the box for eDirectory, only NT or AD Domain authentication Supported.

Uses Apache 2.0 and Tomcat

Manual editing of configuration files

Configuration of the Solution

Changes required to the following pages after installation

webapps/citrix/MetaFrameXP/include/login.inc. This file is the login form that is altered to get rid of the domain field.

webapps/citrix/MetaFrameXP/include/Login.js. This file is altered to handle the context. An LDAP lookup could be used here in a similar form it IIS.

webapps/citrix/MetaFrameXP/serverscripts/applist.js. This file is changed to support the display of apps by the Novell account.

Citrix Web Interface 3.0 on Linux

With Citrix MetaFrame Presentation Server 3.0, Citrix shipped a new version of Web Interface

Gives a similar look and feel to Web Interface 3.0 on IIS

Out of the box provides no support for eDirectory authentication.

Changes to the following files give eDirectory authentication

File Changes

Changes required to the following files (WI is the directory under WEBAPPS for Tomcat)

wi/Metaframe/serverscripts/login.js

wi/Metaframe/serverscripts/include.js

wi/WEB-INF/webinterface.conf

Capabilities of the Solution

With the changes to the JSP Pages the following functionality becomes available.

Novell Authentication from Web Interface Server hosted on Apache 2/ Tomcat/ Linux

As demonstrated uses a fixed context but could easily be changed to make an LDAP call in a similar fashion to the IIS solution.

ZENworks Desktop Management and Citrix Integration

ZENworks 6.5 Desktop Management
and Citrix Published Applications

ZENworks Desktop Management has the capability to present a ZENworks application object via NAL/MYAPPs that launches a Citrix Published Application.

User is transparently connected to the Citrix application if the client device is authenticated to the tree.

Citrix Load Balancing works correctly.

Support provided for the Win32 Citrix client.

ZENworks 6.5 Desktop Management
and Citrix Published Applications cont.

Application Object Functionality

The ZENworks Application Object has the following requirements:

Only provides support for the Citrix Win32 client.

Will provide seamless authentication only if the client device has an eDirectory Authentication. If no eDirectory connection exists then the client dialog on the MetaFrame Presentation Server is presented with the user DN filled in but no password.

May have issues with accessing the Citrix application through an ICA proxy.

Launch Items Gadget

A Gadget is provided for exteNd Director™ Standard Portals

Allows the launching of a Citrix application after the user has authenticated to the Portal.

No requirement for an eDirectory client authentication.

Provides support for the Citrix Win32 client.

Supports Citrix Secure Gateway.

ZENworks 6.5 Desktop Management
and Citrix Published Applications Method (1)

Citrix Published Application can be launched from ZENworks Application Objects using another method.

This method provides support for.

Citrix Java Client

Launching a published application seamlessly when the user is 'not' authenticated to the Tree.

No requirement for exteNd Director Standard Edition.

ZENworks 6.5 Desktop Management
and Citrix Web Interface Integration

How to launch a thin client application from the Nal/Myapps front end using an alternate method.

Configuration of Web Interface

Configuration of ZENworks Application Objects

ASP Pages to Allow Application Launch

Two additional ASP pages on the Web Interface Server

Secure Login and script to provide SSO

ZENworks Application Objects configuration to launch Citrix published applications

ZENworks for Desktops Configuration of Application Objects

Create a Template ZENworks Application Object

Allows the easy creation of other applications

Create an Application Object based on the template

Object configured with a Web URL

http:\\nfuse-srv.nwcon.com\examples\login_test.asp ?app=%app%

%app% refers to an app macro set to the name of the Citrix Published APP. This macro is set on an APP by APP basis

The URL launches one of the two ASP custom pages

Configuration of Secure Login

Secure Login Script auto fills the asp form with the users desktop credentials when the form appears. The form is presented by the LOGIN_TEST.asp page called by the application

Secure Login Script

Type ?sysuser #1

Type ?syspassword #2

Click #1

The LOGIN_TEST.asp closes automatically when the form is filled

Configuration of Launch_1.asp Page

Secure Login fills the LOGIN_TEST.asp page form and submits the form

LAUNCH_1.asp page is called with the following parameters:

Username

Password

Citrix Published Application Name

Page renders the ICA file and returns it to the browser

Browse launches the application referred to by the ICA file

Launching ZENworks Application Objects Method (2)

This method just uses a normal ZENworks 6.5 application object.

Requires the installation of the Citrix Program Neighborhood® client setup for credential passing.

ZENworks Application Object calls the Citrix WFCRUN32.exe and passes an INI file that Zen has the ability to pass the value of macros into. This file is created on the fly each time the application is launched.

Uses Macros to set the published application name and the Citrix Server Address.

Benefits of the Approach

Benefits of the approach:

No changes to the back-end systems.

No requirement for any extra client software.

Support for launching the published application via NAL.

Will easily support launching a published application either in the same tree, different tree or within an AD Forest (if the user name and passwords are the same between the eDirectory and AD systems).

Any Citrix required parameter can be easily added to the ZENworks delivered INI file.

Capabilities of the overall solution

Full Support for Citrix Secure Gateway 2.0

Full Support for Citrix Load Balancing

Allows the launching of a Citrix published application from a NAL/MYAPPS interface

User launches the application from one interface and does not need to know whether application is 'thin' or 'fat'

Allows failover of local applications to thin client if the local application fails to launch

Does not interfere change the administrator utilities of either the Citrix or Novell environments

Management and configuration of ‘User' printers via iPrint

Nsure Identity Manager 2
and Citrix

General Issues
Corporate NDS®/eDirectory Implementations and Citrix

Newer versions of the directory required for integration with Citrix MetaFrame Presentation Server V3.0. Corporate Trees may be older versions with few windows available to upgrade the infrastructure

Tree Structures tend to be heavily hierarchical with geographically dispersed sites and possible low WAN bandwidth

MetaFrame Presentation Server Farms tend to be based at one geographical location

No capability to apply different ZENworks Desktop Management Policies and applications dependent on a user accessing the MetaFrame Presentation Server Farm from the Internet than the internal LAN

Citrix Authentication Tree (CAT)
synced to the Corporate Tree via Identity Manager

Corp Tree

Newcastle

Woolsbridge

User 2

Printer

User 1

Server

Andover

IS

User 1

Citrix

Tree

Resources

User 2

User 3

External

Corporate Tree

Citrix Tree

DirXML Link Between Trees

Capabilities of the Solution

Corporate Tree can be an older version of the Novell Directory

All user information including passwords is synchronized by Identity Manager

Citrix Tree is based at one location and can be managed separately to the Corporate Tree

Only one port required to be open (SSL) between Corp and the Citrix Tree

iPrint in the Citrix Tree can be pointed at printers currently connected to the Corp Tree via LPR/LPD

Hierarchical structure in the Corp Tree can be mapped to a flatter structure in the Citrix Tree

Users can still map drives to the Corp Tree

Using Nsure Identity Manager 2
within a Single Tree

Allows the use of 'EXTERNAL' and 'INTERNAL' Organization objects

O=INTERNAL represents the hierarchical Corporate Tree. Users access the MetaFrame Presentation Server Farm from a Citrix client install on their desktop. ZENworks for Desktops 4.01 policies and APPS represent the internal enviroment.

O=EXTERNAL represents a flat container for external access from the INTERNET via Citrix Web Interface. Policies and Apps represent tighter security due to the insecure nature of the access. The O=EXTERNAL container contains copies of user objects from the O=INTERNAL section of the Tree but the policies enforce a tighter security level.

Capabilities of the Solution

Nsure Identity Manager syncronises user objects from the INTERNAL section of the tree to the EXTERNAL section of the same Tree.

Users managed within the INTERNAL container

Only users that meet preset conditions are copied to the EXTERNAL container. (eg. Group Membership)

Web Interface is configured just to look at the EXTERNAL Container and downwards

Web Interface not available from inside the Company Firewall

Synchronization of eDirectory Objects to Citrix

Management
of Citrix MetaFrame Presentation Server 3.0 from eDirectory

Allows for the use of ConsoleOne/iManager to create and manage Citrix specific objects and properties.

Allows the use of ConsoleOne to create and manage Citrix published applications

Allows the assignment of a Citrix administrator by the assignment of a user to a group in eDirectory

Usage Example

Technical Architecture

How the synchronization process works:

Based on a Consulting produced Identity Management Driver

Allows eDirectory events to trigger custom code on the Windows Server 2003. Code can be any command and the event can provide parameters.

Uses the MFCOM api from Citrix which allows the administration of Citrix specific objects and settings.

Allows the creation and deletion of published applications and the assignment of Citrix administrators from ConsoleOne/iManager. Could be used for any property that MFCOM exposes.

Technical Architecture...

Identity Management Driver picks up the event from eDirectory

The Driver can run any command line based on a series of event conditions being met. For example: a create of an application object with certain key attributes filled in.

Once the event happens the driver can fire off a particular piece of code to say for example create a published application.

Modification of attributes and deletion of objects can also be handled.

Takes the ZENworks eDirectory object trustee assignments and uses them to assign the Citrix published application.

Limitations of the Approach

Driver is just One Way

Events are synchronized from eDirectory to Citrix

No objects added from the Citrix Management Console would ever be synchronized back to eDirectory.

Novell iFolder® and Citrix

Citrix and Novell iFolder Integration

Novell iFolder access can be made available from within the Citrix session.

Novell iFolder Client is not supported on a MetaFrame Presentation Server so Netdrive is used to provide access from the Citrix session mapping a drive letter to a users Novell iFolder data store.

Netdrive is available on the Novell iFolder server in SYS:\APACHE2\iFolder\server\netdrive

Netdrive can be auto-configured for a user via the login script.

Netdrive auto-configuration

Script netdrive.vbs is executed from the login script with the users Common Name as a paramter.

Script requires a registry export from a configured netdrive with the username and password entries taken out called netdrive.reg.

Netdrive.vbs is called with the users CN. This checks for the existance of the netdrive registry key and if not found creates it adding the entries required for the username.

This process creates the netdrive connection and allows the user just to enter their password/passphrase on first login.

iChain® 2.3 and Citrix

iChain 2.3 and Citrix

iChain 2.3 offers the following benefits:

Support for iChain as a Citrix ICA proxy. Allows iChain to extend its protection from company Web Servers to include MetaFrame Presentation Servers.

iChain only allows ICA access if the user has been authenticated by iChain and does not require port 1494 to be used beyond the firewall. (Port 80 is used by default).

Has the capability to provide form fill to defined Web Forms. Could be used to replace secure login in the earlier part of this presentation.

TUT 261	Troubleshooting Tips and Tools for iChain 2.3	Neil Cashell – For More information.

Citrix, Novell and Linux

Citrix MetaFrame Presentation Server and SUSE® Linux

Linux Desktops and Citrix

Citrix MetaFrame Presentation Server Supports most Linux flavors as a client.

Web Interface supports Mozilla and Netscape on Linux

Citrix supports both a Linux native client and a Java Client deployed from the Web Browser.

Allows the deployment of WIN32 apps from a Linux enviroment.

Allows the deployment of WIN32 apps that have not yet been ported to a Linux platform.

Demonstration

Third Party Products

Third Party Products

Centralis

Q3 2003

AXE 2.0	ZENworks Application Processing Tool

AXE 3.0	Citrix Pack

Q2 2004

Beta

Synapp	IMA-eDir DirXML based synch

Centralis AXE 3.0 Citrix Pack
Key Features

Simplify

Take application snAppShots reliably on MetaFrame Presentation Servers

Clean the snAppShot, removing the many unnecessary entries

Separate out the user portion for a separate install if required

Standardize

Populate the Citrix published application with information from the AXE application object, including title, command line etc.

Automatically fill in your Citrix published application preferences from global settings, including Color Depth, Windows Size and Encryption Level

Centralize

Automatically assign user rights to the Citrix published application from the AXE application object or allocate them from eDirectory or Domain

Allow the administrator to use either the application executable or a NAL command line to launch the application

Create or update both the ZENworks application object and the Citrix published application in a single operation

Centralis AXE 3.0 Citrix Pack

Centralis Contact Information

Web site

www.centralis.co.uk

Software

www.centralis.co.uk/download

In Conclusion

Conclusion

Citrix and Novell when properly integrated provide a rich, manageable and scalable solution beyond the capabilities that either environment can provide in isolation.

Any Questions?

Contact Information

dshepherd@novell.com

Useful Links

Citrix Integration Methodology:

www.novell.com/coolsolutions/features/a_citrix_methodology.html

Novell Client Documentation:

http://www.novell.com/coolsolutions/appnote/620.html

www.ithowto.com/novell/clientspeed.htm

Citrix Web Interface Documentation

Citrix Consulting Novell Integration Paper

www.thinplanet.net

www.thethin.net

matthew.d'amico@citrix.com

Tablet PC’s, desktop to PDA’s, disconnecting laptop from a separate monitor all of these could result in the need to reconfigure the sessions settings.

Novell Corporate Presentation Template 2005

2003-12-08T12:43:39