DIGIPASS Pack for Citrix on WI 4.5 does not detect a login attempt. Creation date: 28/02/2008 Last Review: 04/03/2008 Revision number: 2

Transcription

1 DIGIPASS Pack for Citrix on WI 4.5 does not detect a login attempt. Creation date: 28/02/2008 Last Review: 04/03/2008 Revision number: 2 Document type: How To Security status: EXTERNAL Summary This document describes how to troubleshoot a DIGIPASS Pack for Citrix on Citrix Web Interface (WI) 4.5, when no login attempts are detected or logged. Details The Digipass Pack for Citrix installs a filter on the IIS6 that will intercept the logon attempts. The credentials are then sent to VACMAN Middleware (VM) 3.0 for verification. The problem described in this document has the following symptoms: Logging in with the static password (Active Directory password) works correctly. Logging in with the One Time Password (OTP) fails. The login attempt is not detected by the VASCO filter. You will not see any authentication requests coming in on the VM 3.0. When you activate tracing on the VASCO filter: - you will see the startup of the filter in the trace file - you will not see the login attempts in the trace file. Cause During installation of the VASCO filter the installation tries to detect which version of the Citrix Web Interface is installed on the machine. Due to configuration and language settings the installer will not always correctly detect the Citrix WI version. This results in that the VASCO filter is not configured correctly. No login attempts are detected or logged by the filter..doc 4/03/ :28 Page 1 of 5

2 Solution You can manually verify the detected version. If needed, you can modify the settings in the VASCO Citrix filter as well as in IIS6. 1. Check IIS Settings The different versions of the Citrix WI use different paths to the Citrix authentication page. Below are the defaults path used by the different versions of the WI: - Citrix WI 4.6: /Citrix/AccessPlatform/auth/login.aspx - Citrix WI 4.5: /Citrix/Metaframe/auth/login.aspx - Citrix WI 4.0: /Citrix/MetaFrame/auth/login.aspx - Citrix WI 3.0: /Citrix/MetaFrame/default/login.aspx Please note that this may differ in your installation depending on the language and configuration settings. Configure the Wildcard Application Maps: The authentication page of the Citrix WI 4.5 is Open the IIS Manager. Go to Web Sites Default Web Site Citrix MetaFrame Right-Click and choose properties from the drop-down list.doc 4/03/ :28 Page 2 of 5

3 Click Configuration button In the Wildcard Application Maps choose Insert and enter the path to the Vasco filter DLL file between quotes ( ), and press the OK button. The default location is: "C:\Program Files\VASCO\Digipass Pack for Citrix Web Interface\Bin\vmiisext.dll".doc 4/03/ :28 Page 3 of 5

4 Configure the Web Server Extensions: Go to the Web Server Extensions. If the VM IIS6 Extension does not exist, it has to be created and has to point to the Vasco filter DLL. The default location is: C:\Program Files\VASCO\Digipass Pack for Citrix Web Interface\Bin\vmiisext.dll.doc 4/03/ :28 Page 4 of 5

5 2. Check Vasco Filter Configuration Configure the Base URL : Go to Start Programs Vasco Digipass Pack for Citrix Web Interface Digipass Pack for Citrix Web Interface Configuration Click Authentication Click Edit Make sure the Base URL is the URL being used to go to the Citrix authentication page. For WI 4.5 this is /Citrix/MetaFrame/auth/login.aspx 3. Restart IIS Admin server After having made the changes as described above, restart the IIS Admin server. You should now see authentication requests being logged to the Vasco filter trace file. If authentications still fail you can check to KB100037: Middleware 3.0 Citrix troubleshooting for information about known configuration errors Applies to: Vacman Middleware 3.0 and Digipass for Citrix Web Interface 4.5 More information: KB : Middleware 3.0 Citrix WI4.6 filter does not detect login attempts KB : Middleware 3.0 Citrix WI4.0 filter does not detect login attempts KB : Middleware 3.0 Citrix WI3.0 filter does not detect login attempt.pdf.doc 4/03/ :28 Page 5 of 5