Skip to main content

LevelBlue Completes Acquisition of Cybereason.  Learn More

LevelBlue Completes Acquisition of Cybereason.  Learn More

Services
Cyber Advisory
Managed Cloud Security
Data Security
Managed Detection & Response
Email Security
Managed Network Infrastructure Security
Exposure Management
Security Operations Platforms
Incident Readiness & Response
SpiderLabs Threat Intelligence
Solutions
BY TOPIC
Offensive Security
Solutions to maximize your security ROI
Operational Technology
End-to-end OT security
Microsoft Security
Unlock the full power of Microsoft Security
Securing the IoT Landscape
Test, monitor and secure network objects
Why LevelBlue
About Us
Awards and Accolades
LevelBlue SpiderLabs
LevelBlue Security Operations Platforms
Security Colony
Partners
Microsoft Security
Unlock the full power of Microsoft Security
Technology Alliance Partners
Key alliances who align and support our ecosystem of security offerings
Loading...
Loading...

INFO: How do I setup my Citrix Server in AD environment to Authenticate Users?

Expand / Collapse


This article applies to:

  • Filters

Question:

How do I setup my Citrix Server in AD environment to Authenticate Users?

This document assumes you are using the Citrix Presentation Server 4.0 version, includes a feature known as Virtual IP addressing other wise the filter will only see one ip for all users and give the wrong profile.

Reply

Note: Please use these instructions as a general guideline where you may not need to go through each step depending on your setup and environment.

  1. Install windows 2000/2003 server  (must be installed as an application mode)
  2. Configure the network settings, add this server to the domain (member of "XXXX workgroup" è member of "XXX domain")
  3. Apply latest patches
  4. Install Citrix server: MetaFrame Presentation Server 4.0
  5. Add Citrix applications and assign server(s) and users(s).  In this case, the IE browser or other browsers that you use should be added. 
  6. Enable Virtual IP on the farm's Properties page
  7. Set ranges for virtual IP addresses for the farm
  8. Add authenticat.exe and authenticat.cfg in c:\winnt\system32 directory.  Note: An admin can use command line parameters instead of a configuration file.
  9. Make sure authenticat.cfg has the Citrix Option NP[1=enable, 0=disable] enabled
  10. If using new 2.x authenticat the NP[1] parameter is not needed.

 

======authenticat.cfg======

 

RA[192.168.11.109]

NP[1]

  

===== Command Line ======

 

start ""authenticat.exe RA[R3000_Virtual_IP]NP[1]

 

  1. Add Virtual IP process: at minimum, iexplore.exe; authenticator.exe
  2. Manually modify uselogon.cmd in c:\winnt\system32 directory, which to start up the authenticator for each Citrix session.  Note: the sample below is using the command line parameters and assuming that the virtual IP is 192.168.11.109.

 

======uselogon.cmd======

 

If "%SESSIONNAME%" == "Console" GOTO CONSOLE

start authenticat.exe  RA[192.168.11.109]NP[1]

:CONSOLE


This article was previously published as:
8e6 KB 280290

To contact LevelBlue about this article or to request support:


Rate this Article:
     
Tags:

Add Your Comments


Comment submission is disabled for anonymous users.
Please send feedback to Trustwave Technical Support or the Webmaster
.