All post

A look at Citrix Cloud Platform LDAP authentication options

10:04 PM Add Comment
A look at Citrix Cloud Platform LDAP authentication options -

LDAP, as its name implies, is a lightweight protocol for accessing directory services. You can use any external LDAP server such as Microsoft Active Directory or ApacheDS or openLDAP Cloud Platform to authenticate users. Once configured to authenticate users, Cloud Platform will query to the external LDAP server the specified user name / password and the preconfigured settings. LDAP users can coexist with the native user Cloud Platform.

Enabling LDAP Integration

First, we need to inform Cloud Platform via the LDAP server and configurations, they can use. It is a two-step process.

to go

LDAP Global Settings

global setting and for the LDAP search. Here is a screenshot of the settings that I used in my lab for Microsoft AD

settings-screen1

The following global configurations should also be configured that way.

  • ldap.basedn : Sets the basedn for LDAP. Ex: OU = APAC, DC = company, DC = com
  • ldap.bind.principal ldap.bind.password : DN and password for a user, all users in the list can basedn above. Ex: CN = Administrator, OU = APAC, DC = company, DC = com
  • ldap.user.object : type of users within LDAP. The default value is user for AD and interorgperson for OpenLDAP.
  • ldap.email.attribute : E-mail attribute within ldap for a user. The default value for AD and OpenLDAP is mail
  • ldap.firstname.attribute :. First name attribute within ldap for a user. The default value for AD and OpenLDAP is given
  • ldap.lastname.attribute :. Surname attribute within ldap for a user. The default value for AD and OpenLDAP is sn
  • ldap.username.attribute :. User Name attribute for a user within LDAP. The default value is SAMAccountName ldap.nested.groups.enable for AD and uid for OpenLDAP
  • :. If they are true, nested groups will also (this is specific to Microsoft AD) are queried
  • ldap.provider : LDAP provider. ex: openldap, microsoftad
  • ldap.read.timeout:. LDAP connection timeout in milli seconds The default is 1000
  • ldap.request.page. size: page size sent on each request to the LDAP server. The default value is 1000

Restricting the LDAP user to a group: ldap.search.group.principle

  • : this is optional and set if only from this group users listed

LDAP SSL .:

when the LDAP server requires SSL, you need to allow the following configurations.

Before enable SSL for LDAP, you must obtain the certificate that is used the LDAP server and add it to the trusted key store. You need to know the path to the key store and password

  • ldap.truststore : .- trust path
  • ldap.truststore.password : password-confidence

LDAP groups:

  • ldap.group.object : type of groups within LDAP. The default value is set for AD and groupOfUniqueNames for OpenLDAP
  • ldap.group.user.uniquemember :. Attribute for unique members within a group. The default value is Member for AD and unique for OpenLDAP.

LDAP server configuration

call the CloudStack API command addLdapConfiguration and provide host name or IP address and listening port of the LDAP server. You could also configure multiple servers. These are expected to be replicas. If one fails, the next one will be.

You could do the same UI. select the LDAP configuration drop in global settings and click "Settings for LDAP" click.

Screen Shot 2015-10-29 at 3.10.27 pm

Importing user to Cloud Platform

Once LDAP configured successfully on the account page, you will see a new "LDAP account" button as below

Screen Shot 2015-10-29 at 3.18.10 pm

If you click on it, you will be able to see the dialog box that you can either selectively import users to a domain in Cloud Platform or bulk import all the users in LDAP group (enter through the LDAP group name in the LDAP group text box below) to a domain in Cloud Platform. The two api calls that are used herein are ldapCreateAccount (single account creation) and importLdapUsers (bulk import)

Screen Shot 2015-10-29 at 3.20.07 pm

on successfully import users, the user can be used with their LDAP user name and password to login to Cloud Platform. Each password / account change in LDAP should be considered here and account should not be allowed to access the Cloud Platform since it every time, LDAP queries for authentication and does not store anything on the Cloud Platform.

confidence LDAP or Link Cloud Platform Domain to LDAP

The method described above a manual step by the administrator is required to import the user to Cloud Platform. Only then the user would be signing Cloud Platform. With Hollywood release in Citrix Cloud Platform and Apache CloudStack 4.6, to connect its now possible Cloud Platform domains to a group or OU in LDAP. A new API linkDomainToLdap is used to achieve the same. It can also be called from UI domain registry, as shown in the figure below (in red Green button higlighted).

Screen Shot 2015-10-29 at 3.30.56 pm

Click the button, you will be presented with a dialog as shown below.

Screen Shot 2015-10-29 at 3.37.20 pm

There are options you fully qualified name of the LDAP group to enter / OU, the account type for the imported users and an option to use Domain Admin username for the domain. On the domain link successfully, all LDAP users are in the configured group / OU log automatically Cloud Platform can. All deleted / disabled users in LDAP unable to be signin and all newly added user can signin import automatically without the step of manually.

EnvokeIT catapulted into new markets with Citrix

11:05 AM Add Comment
EnvokeIT catapulted into new markets with Citrix -

Today's companies are trying to meet customer solutions for rapidly changing needs with bigger and broader.

The rapidly evolving IT landscape and emerging business trends including cloud and mobility require a stronger focus on productivity, customer enjoyment and to stay ahead of technological changes. More than ever clients are VAT Instructions by partners with a solution-oriented approach, coupled .

For this reason sets Citrix strategically expanding our channel programs and partners as EnvokeIT reap the rewards.

Large investments in Citrix training and certification for EnvokeIT, a Gold Citrix Solution Advisor headquartered in Kista, Sweden pays off.

you have and Networking earned for apps and mobile security expand Specialist in Virtualization their Citrix functions with large companies-its core customers and strengthen in the mid-market .

Example: EnvokeIT its virtualization capabilities used to a midsize customers to win a project car dealer, with 430 users, multiple sites and an old, very traditional IT infrastructure.

CEO Mathias Törnblom said, " In just 13 Weeks , we pulled on XenDesktop and consolidates all physical server (four racks) up to six U. The endpoints were thin clients. the customer saved 1 million crowns ($ 0,000 US) to license and with the highly automated, centralized system, the IT team has cut by 70 percent administration time. "

EnvokeIT also believes Citrix specialization helps companies in London to win, where to establish a small branch take advantage of new opportunities.

" specializations are improving the conversations we have with our customers , both net new and current," he said.

we already have a proven track record and now our specializations are proof that we Citrix best practices to follow for the project analysis to build and support processes.

Citrix Service Provider with a difference

In an interesting twist EnvokeIT was also a Citrix Service Provider, but not be able to offer its own hosted services. Instead, the company is supported by other partners for infrastructure to build them.

"We have what we have learned with the biggest companies, work, combining with CSP knowledge and skills and it's like rocket fuel . If a service provider to offer a DaaS / VDI service want we have the expertise to build it without competing with their business. "

the CEO noted that many Citrix service provider prefer external experts in Citrix technology to use instead of increasing effort by their own specialists for hire.

higher confidence, higher yields

specialization has a positive impact on EnvokeIT staff, higher margins to work starting with the distribution with the " awesome "after Törnblom is. The consultants of the companies completed the e-learning courses have gained confidence and better tools to work.

Large Enterprise customers, for EnvokeIT provides ongoing advice and Operations Services will appreciate the fact that the partner's technical expertise in Citrix continues to build solutions.

plus specialization and Citrix Service Provider status "show in our Focus Partner, Citrix that we invest in the relationship , so we can supply the market's best solutions," Törnblom completed ,

to Specialist Step up

If you have not already, start your specialization trip today. Visit Citrix specialist Citrix Partner Central for more details. If you are already a member of the Citrix Partner Network are not, be a partner and grow with us

Stay connected - follow us on Twitter at @CitrixSpecial and @CitrixPartners ; on LinkedIn at Citrix Partner Network and Facebook at Citrix Partner Network .

Almost 3 years increased productivity With XenMobile

9:03 PM Add Comment
Almost 3 years increased productivity With XenMobile -
before my first son was born and I blogged about how Citrix and XenMobile (which was known as the Cloud Gateway at the time) told me helped more 2 months before the birth of my second son flexible with my work / life balance.
with, I started thinking about how the product has developed since then. It is both easier for me to do my job from almost anywhere (I started on the path of FTL at 35,000 feet this blog design WorxNotes SFO use) and makes me more productive.
[1945005UnserKonzeptderArbeit] remained consistent: work is not a place, it is something that gives you do

XenMobile .:

  • user the ability to work from any location in order to secure access to their corporate applications and data delivery
  • companies the knowledge that this is done in a secure manner
What has changed is the growing suite of applications now offered as part of our Worx Suite, as well as the significantly improved infrastructure and safety characteristics of the product.
I could list the various features and go through all the apps, but I want to focus on some of the real use cases that I encounter in my daily life and show how XenMobile really me, while at the same time, my work helps improve productivemehr / life balance.

WorxMail

, the app I use almost every hour of the day that I can not sleep if there is a quick look, if anything to check, has come the press , a response to an urgent e-mail, while I'm out and about my or early morning triage of my inbox is WorxMail. WorxMail gives me a secure access to my corporate email, calendar and contacts at the touch of your thumb.
File Nov 04, 15 03 24
I help with bottle feeding # 2 in the early morning hours on a regular basis, and while with feeding some of the noise in my inbox to clean up, I am able triage view in the App built me ​​different actions on each email with a simple line in a certain direction.
I am pleased to see how we make the integration with 3D touch can even choose the better!
fall I # 1 in school 3 days a week and 2 of those days planned off I 9:00 calls right after its drop-off time. The pace of accession function in calendar allows me with just one touch to meet on my trip to the office dial. No dial a phone number or remembers that the conference ID!

One of the recent additions to the app is the ability to check the availability of staff, you are invited to a meeting.

During a meeting in WorxMail creating is not new, ensures the availability function of the available at the time you are invited to schedule the call and if they are not, it provides an insight into when the best time would be with the participants who would like to invite you host.

I love this feature because it allows me to schedule a meeting, where I will always be available to know that the people that I need at the meeting!

File Nov 04, 15 05 15 File Nov 04, 15 05 26

WorxWeb

How many times have intranet links in a receive email? If you are using a VPN, the chances are you are the dreaded "page not found" message on mirrors to your browser.

Last week I was to obtain an oil-service on my car, and during this time an e-mail alert was received by our JIRA system to let me know that one of our technical writers was for an upcoming ask publication on a demand for clarification. I was the link and respond to the question in JIRA quickly and efficiently to click with WorxWeb. A few years ago, this reaction is would have been delayed again until I was back at my computer.

WorxNotes

Until recently I still was making my notes for almost all with Evernote, I need to create my notes and access to my desktop and laptop devices, not just my phone and tablet. With the introduction of WorxNotes for Web, I am with WorxNotes more and more of the work-related content.

Share File and QuickEdit

I do not want these applications to be underestimated, as they play an important role in the solution (the , felt to me like it should be enabled). I store all of my work-related files in my account Share File and while I largely use the desktop sync versions, I often have to use the mobile applications.

There are often times when I just have to leave the office, go to my car and forgot to send a particular document or slide deck. Fortunately, I am able to file directly from Share File or WorxMail to send (appending Share File function) that go back to store up to my desk and to prevent any further delay on this file to check into circulation to be brought.

[1945005Status-UpdateszuProjektenimSpielzuverschiedenenZielgruppenunddieAnzahlderMale] Another part of my role is to provide I asked to get update ", this film" or "this film" can sometimes be frustrating, especially when I'm out and about, it's QuickEdit to rescue Sun

! From WorxMail, I can open an attachment in QuickEdit, do exactly what the app says and quickly edit a file and there. My update

File Nov 04, 15 17 06

[1945005zurückschicken] productivity driven by the experience and provided really XenMobile experience makes me more productive.

File Nov 04, 14 58 21

Linux Command-Line Tools VDA

8:02 PM Add Comment
Linux Command-Line Tools VDA -

Linux VDA package contains command line utilities to manage user sessions.

The following is the list of available commands sessions from the server and view to manage user or session information

command :.

ctxquery

Description:

This command displays information about users and sessions are logged on the server. Information includes session ID, client device name, address client device IP, session name and username.

Use -f option to change with short format options, the information displayed or -o option for long-format options.

consumption: 

 / usr / local / bin / ctxquery -f short_format_options | -o long_format_options [-m] [user_name]

Example: 

 / usr / local / bin / ctxquery -f idanu

The example shown above list of sessions is connected to the Server, with columns
session id, client device name, client device address, session name, username

Similar commands .:

ctxqsession, ctxqfull, ctxquser

[1945001Alle], the above commands show session information as ctxquery but with pre-formatted output.

ctxqsession by default prints username, session ID, condition, type and unit.

ctxquser by default prints username, session ID, session state when the user has logged on at idle and the date and time of the user.

ctxqfull [1945009 

 / usr / local / bin:] default print user name, session ID, session state, time the user the user has signed up for the date and time on 
 
 consumption at idle / ctxqfull user user_name

command:

ctxdisconnect

Description :.

This command can be used to disconnect a session

The session ID can use the command ctxquery (: with flag i, in column SESSION ID) receive will. Users can disconnect only their own sessions if they are not administrators. If the session ID is not available, current session, it will default to separate

consumption :. 

 / usr / local / bin / ctxdisconnect [session_id]

Example: [1945004[
 / usr / local / bin / ctxdisconnect 1

command:

ctxlogoff

Description:

the command given user session log from a server.

If the session ID does not exist, it will log out current session by default. Be noted that the parameter only the session ID, not the user name. The user can only log off session that belongs to it, if it is not an administrator is

consumption :. 

 / usr / local / bin / ctxlogoff [session_id]

Example: 

 / usr / local / bin / ctxlogoff 1

command:

ctxreset

Description:

This command an ICA session is reset. Session ID is mandatory.When a session is in poor condition, this command can be used to clear dirty data and log it compel

consumption :. 

 / usr / local / bin / ctxreset Sitzungs_ID

. Example: 

 / usr / local / bin / ctxreset 1

Man on the server for more information about these commands

Citrix administrators can command line use utilities to

  • Query sessions on his current server "ctxquery -f iustd" and the output format would session ID, user name, server name, session type and device.
  • With Session Ids of ctxquery fast logoff / disconnect / user sessions are reset on the server.
  • command line utilities to script Admin Jobs as logoff all users use.

User can use these commands

  • logoff current session from the terminal.
  • reset session.

query current session details.

What has changed

7:01 PM Add Comment
What has changed -

Recap of the Internet of Things Expo

I visited recently and was a speaker at: IoT in Enterprise One year later of 4. International Internet of things Expo at the Convention Center Santa Clara. I also had the opportunity to attend this event last year and I wrote a blog from the show talking about how "Enterprise effects of IoT" was showing a central theme of last year. I was curious to see if the same topic would still resonate 365 days later and what, if any, changes I would be presented in the content.

Cloud Expo

is seen broken my IoT?

In one of the keynotes, the point was made that no one wakes up to ask if their IoT is broken. But people do in the company wake up worried about how they can increase their income, as they can reduce their costs and how they increase their customer satisfaction. This is the biggest change that I observed from last year to this year.

A year ago, more meetings were focused technology, while this year more of their conversation sessions with the need preceded really focus on the business problems and business results.

This is something that we have directly observed us at Citrix. When we began our research IoT with Citrix, we started with a broad look at how we could fit the Internet of Things in an enterprise setting. We recognized early on that many companies customers really thought, which means the Internet of things for them.

However, when we started focusing in on specific workflow issues, we found it much easier to have a conversation, such as the Internet of Things could help address a problem that they stand today. This evolved to help colleges and universities use the Internet of things in order to reach more students in our current efforts. In this example, we are to a certain problem saw (more pupils to achieve) and then asked if the Internet of Things could help do this, only be used (to automate beyond the classroom).

IoT in Enterprise means the integration of all.

Although I do all to the concept "become reflect carefully integrating all " as we use at Citrix have here, I've definitely heard of this concept over and over again. IoT in Enterprise means together to bind a heterogeneous environment to help the Enterprise bridge the gap between what happens in the back office and what happens in the field. This will lead to a new ecosystem of technologies, platforms, things and organizations a new IoT Stack support and real opportunities for differentiation, in this stack are available.

"More sensors and more data compiled for machines more opportunities improved algorithms and automation to develop. Real-time business intelligence system and awareness will drive the operating costs and prices down, the same customer satisfaction and improve to increase sales. the leading edge companies that these IoT technologies implementation will have an unfair advantage over their competitors. " Chris Matthieu to the possibility for the Internet of things in the Enterprise .

Picture3 But this won 't easy. While companies IT experience to integrate complexity in their network, historically it was with a fairly homogeneous group of devices and suppliers. With the integration of all we are with an explosion of new devices, things, suppliers and applications have to do. Pretty much every session that I attended with the obligatory market forecast Dia began a similar forecast of 25 to 35 billion within 4 years shows equipment in the game. I reinforced this point in my meeting when I referred, as the explosion is being driven by cheaper instruments of Moore's Law to disruption we cause not even now can predict.

The rise of the Internet of Things platform.

What was to take away the Enterprise on the key, how to get a handle on the integration of all? Pretty much every session focused on the Internet of Things in the Enterprise referenced the need to help for IoT platform, in dealing with such a heterogeneous environment. This is an area that we can expect to see a lot of innovation and consolidation, as there are quite a few different IoT platforms. In a way, that's fine, than what was during all sessions noted the IoT opportunity in the enterprise quite large and will cover many different areas.

IMG_1853 But what to look for in an IoT platform? How do you find one that suits your needs? Chris Matthieu, the co-founder Octoblu (which was acquired by Citrix) had a good keynote on the last day of the exhibition , where he talked about how difficult it is to build a platform is, and that selling a platform is even more difficult! To be successful with an IoT platform you need good partner and a good developer ecosystem as the Internet of Things too big to solve an idea on their own.

The super quick summary of this year's Internet of Things Expo

my observations IoT Expo of summary then from this year at how search IoT to your business will affect: start with your business problem, to assess which points integration you must address, if you look to solve this problem, and then determine which platforms maintains best address those integration points in the whole ecosystem and partnership platform.

Citrix Labs is an applied research organization in Citrix. To update on what the Citrix Labs team follows, and projects the Labs team is working, you can click the Citrix Trends and Innovation LinkedIn page . Subscribe

XenMobile 10.1 Setup with SSL offload CompleteArch_Domain + Cert Auth

6:00 PM Add Comment
XenMobile 10.1 Setup with SSL offload CompleteArch_Domain + Cert Auth -

Description:

The intention of this paper comprehensive to enable provision of 10.1 XenMobile together with NetScaler malls SSL offload mode configured virtual servers balancing where XenMobile Server and NetScaler is enabled with certificate + domain authentication. The Doc in the link also includes integrating storefront, XNC configuration WorxMail APNS in an outbound proxy setup.

This guide contains the steps Server (XMS and NS) to configure, defined based on the architecture of the document. It includes the after, however, the client (app) configurations are updated shortly. provide

  1. conditions required XenMobile
  2. XenMobile architecture [
  3. Known Issues / restriction
  4. firewall ports requirement
  5. XMS - Setup and configuration
  6. NetScaler configurations
  7. configuration PKI and Credential provider on XMS,
  8. NetScaler Gateway configuration on XMS for certificate + domain authentication
  9. Enabling Worx PIN and password caching
  10. storefront configurations
  11. Create session Politics and Clientless Access policy for HDX traffic
  12. Configuring XMS integration with storefront
  13. configuration XenMobile NetScaler Connector (XNC)
  14. configuration WorxMail for APNS communication.
  15. configuration Share File XMS
  16. End User Experience

Audience:

  1. Citrix XenMobile product Deployment Administrators
  2. Citrix partners
  3. Citrix customer
  4. Citrix SE
  5. Anyone who wants XenMobile 10.x

to implement download link : A step-by-step Setup Guide XenMobile 10.1 Setup with SSL offload CompleteArch_Domain + Cert Auth

Please do not hesitate to contact me if you have any questions about each step in the document.

Thanks,
Mobility Experts
Bipan Kumar LaL
Manager Mobility Expert Team MPG .

Citrix CEIP. - The 100% rule Anonymous

4:59 PM Add Comment
Citrix CEIP. - The 100% rule Anonymous -

CEIP is anonymous product improvement program of Citrix, the Our CEIP program our customers is known as Customer Experience Improvement Program designed to enable us to say what features they like and how to make their systems work without exposing who they are, where they are, or what industry they belong.

how do we ensure that data you send is anonymous?

It starts with a 100% Anonymous Rule. From the beginning, we develop all our CEIP algorithms to gather configuration and performance data, which are not identifiable or PII is free. Citrix can ensure additional steps privacy by transmitting data only to Citrix servers via HTTPS. We do not collect IP addresses, server names or domain names.

How does Citrix use CEIP data?

CEIP is an option that you choose, your product Citrix sends anonymous information back to Citrix and that the data is used to measure to opt-in and once in opt, as the functions used on the Citrix products. These data help Citrix to build and improve features for our customers with better products. So we love to know what operating systems use our XenMobile clients. Is a popular than the other and we have created features that make you happy? We can answer questions like these with CEIP data.

Help us to help you. All you need to do is opt-in.

What products have CEIP available?

  • AppDNA
  • AppOrchestration
  • Citrix Lifecycle Management
  • desktop Player
  • Citrix License Server
  • receiver for Windows
  • Synchronizer
  • Universal Print Server (UPS)
  • XenApp / XenDesktop
  • XenMobile Server
Subscribe to: Posts (Atom)