• No results found

Administrator’s Guide

N/A
N/A
Protected

Academic year: 2020

Share "Administrator’s Guide"

Copied!
151
0
0

Loading.... (view fulltext now)

Full text

(1)

Administrator’s Guide

Web Interface for MetaFrame XP

Feature Release 3

(2)

Copyright and Trademark Notice

Information in this document is subject to change without notice. Companies, names, and data used in examples herein are fictitious unless otherwise noted. Other than printing one copy for personal use, no part of this document may be reproduced or transmitted in any form or by any means, electronic or mechanical, for any purpose, without the express written permission of Citrix Systems, Inc.

Copyright © 2002-2003 Citrix Systems, Inc. All rights reserved.

Citrix®, ICA (Independent Computing Architecture)®, NFuse®, Citrix Solutions Network™,

MetaFrame®, MetaFrame XP™, Program Neighborhood®, and SpeedScreen™ are registered trademarks or trademarks of Citrix Systems, Inc. in the United States and other countries.

RSA Encryption © 1996-1997 RSA Security Inc., All Rights Reserved.

Trademark Acknowledgements

Adobe, Acrobat, and PostScript are trademarks or registered trademarks of Adobe Systems Incorporated in the U.S. and/or other countries.

Apple, LaserWriter, Mac, Macintosh, Mac OS, and Power Mac are registered trademarks or trademarks of Apple Computer Inc.

DB2 is a registered trademark and PowerPC is a trademark of International Business Machines Corp. in the U.S. and other countries.

Java, Sun, and SunOS are trademarks or registered trademarks of Sun Microsystems, Inc. in the U.S. and other countries. Solaris is a registered trademark of Sun Microsystems, Inc. Sun Microsystems, Inc has not tested or approved this product.

Microsoft, MS-DOS, Windows, Windows NT, Win32, Outlook, ActiveX, and Active Directory are either registered trademarks or trademarks of Microsoft Corp. in the United States and/or other countries.

Netscape and Netscape Navigator are registered trademarks of Netscape Communications Corp. in the U.S. and other countries.

Novell Directory Services, NDS, and NetWare are registered trademarks of Novell, Inc. in the United States and other countries. Novell Client is a trademark of Novell, Inc.

UNIX is a registered trademark of The Open Group.

Apache is either a registered trademark or trademark of the Apache Software Foundation in the United States and/or other countries.

JavaServer Pages and Sun ONE Application Server are either registered trademarks or trademarks of Sun Microsystems Corporation in the United States and/or other countries.

This product incorporates IBM’s XML Parser for Java Edition, © 1999, 2000 IBM Corporation.

All other trademarks and registered trademarks are the property of their owners.

(3)

Contents

Chapter 1 Introduction. . . 9

Overview . . . 9

How to Use this Guide . . . 10

Document Conventions . . . 10

Finding More Information . . . 11

Using PDF Documentation. . . 12

Providing Feedback About This Guide . . . 12

Citrix on the World Wide Web . . . 13

Introducing the Web Interface . . . 14

The Web Interface Features . . . 15

Manageability Features . . . 15

Application Access Features . . . 16

Security Features . . . 16

Client Deployment Features . . . 17

What’s New . . . 17

Platform Additions . . . 18

Manageability Features . . . 18

Application Access Features . . . 18

User Features . . . 18

Installation Features . . . 19

Security Features . . . 19

Web Interface Components . . . 19

MetaFrame Server Farms . . . 19

Web Server . . . 20

ICA Client Device . . . 21

How the Web Interface Works. . . 22

(4)

Chapter 2 Deploying the Web Interface. . . 25

Overview . . . 25

System Requirements. . . 26

MetaFrame Server Requirements . . . 26

Supported MetaFrame Versions . . . 26

Additional Software Requirements . . . 26

General Configuration Requirements. . . 28

Backward Compatibility. . . 28

Web Server Requirements . . . 29

On Windows Platforms . . . 29

On UNIX Platforms . . . 29

ICA Client Device Requirements . . . 30

Installing the Web Interface . . . 31

Installation Overview . . . 31

Installing the Web Interface During MetaFrame XP Installation . . . 31

Installing the Web Interface Separately from MetaFrame XP . . . 32

Upgrading an Existing Installation. . . 32

What Is Installed Where? . . . 33

Security Considerations . . . 35

Required Information . . . 35

Installing the Web Interface on Microsoft IIS. . . 37

Installing the Web Interface on UNIX Platforms . . . 37

File Location Information. . . 42

What to Do Next. . . 44

Troubleshooting the Web Interface Installation . . . 44

Using the Repair Option. . . 45

Uninstalling the Web Interface . . . 46

Uninstalling the Web Interface on Microsoft IIS . . . 46

Uninstalling the Web Interface on UNIX Platforms . . . 47

Chapter 3 Configuring the Web Interface . . . 49

Overview . . . 49

Deciding Which Configuration Method to Use. . . 50

Viewing Additional Information for Error Messages . . . 50

Configuring the Web Interface Using the Administration Tool . . . 51

Accessing the Administration Tool . . . 51

Saving, Applying, and Discarding Changes. . . 52

Getting Help . . . 52

Configuring Authentication . . . 53

Methods of Authentication . . . 53

(5)

Enabling Smart Card Authentication . . . 55

Enabling Guest User Access . . . 59

Enabling Desktop Credential Pass-Through (Single Sign-On) . . . 60

Enabling Explicit Authentication . . . 63

Enabling RSA SecurID Authentication . . . 65

Configuring Ticket Expiration . . . 67

Examples . . . 67

Configuring Communication with MetaFrame . . . 70

Managing Server Farms . . . 71

Configuring Server Settings . . . 71

Configuring Fault Tolerance . . . 73

Enabling Load Balancing Between Servers . . . 73

Specifying the TCP/IP Port for XML Communication . . . 74

Specifying the Transport Protocol . . . 74

Configuring Address Translation. . . 75

Address Translation Types . . . 76

Specifying the Default Behavior . . . 76

Configuring Specific Address Translation Settings . . . 77

Defining Address Translation Mappings . . . 78

Examples . . . 79

Configuring Secure Gateway Support . . . 82

Example . . . 85

Configuring Client-Side Firewall Settings . . . 86

Example . . . 88

Configuring ICA Client Deployment . . . 89

Configuring ICA Client Installation. . . 90

Controlling the Launching and Embedding of Applications . . . 92

Customizing ICA Java Client Deployment . . . 94

Deploying the ICA Java Client Using the Web Interface with Custom SSL/TLS Certificates . . . 96

Allowing Users to Configure Web Interface Settings. . . 98

How User Settings Are Stored on Client Devices . . . 99

Configuring Communication with the Web Interface Extension . . . 99

(6)

Configuring the Web Interface Using the Configuration File. . . 103

Examples . . . 118

Configuring Communication with MetaFrame XP . . . 118

Configuring Citrix SSL Relay Communication . . . 118

Configuring Secure Gateway Support . . . 119

Making the Web Interface Available to Users . . . 119

Making the Login Page the Default on IIS . . . 119

What to Do Next. . . 120

Chapter 4 ICA Clients and the Web Interface . . . 121

Overview . . . 121

Using Web-Based ICA Client Installation . . . 122

Copying ICA Client Installation Files to the Web Server. . . 122

Configuring Web-Based ICA Client Installation . . . 123

ICA Win32 Client Installation Files. . . 123

Configuring Installation Captions . . . 124

ICA Java Client Overview . . . 125

The ICA Win32 Program Neighborhood Agent Overview . . . 126

What to Do Next. . . 126

Chapter 5 Configuring Web Interface Security. . . 127

Overview . . . 127

Introduction to Web Interface Security . . . 128

Security Protocols and Citrix Security Solutions . . . 129

SSL . . . 129

TLS. . . 129

Citrix SSL Relay. . . 130

ICA Encryption (Citrix SecureICA). . . 130

Secure Gateway . . . 131

Securing Web Interface Communication. . . 131

ICA Client Device—Web Interface Server Communication . . . 132

Risks . . . 132

Recommendations . . . 133

Implementing SSL/TLS-Capable Web Servers and Web Browsers . . . 133

(7)

Web Interface Server—MetaFrame Server Communication . . . 134

Risks . . . 134

Recommendations . . . 134

Using Citrix SSL Relay . . . 135

Enabling the Server Running the Web Interface on the MetaFrame Server . . . 136

Using the HTTPS Protocol. . . 137

ICA Client—MetaFrame Server Communication. . . 138

Risks . . . 138

Recommendations . . . 138

Use SSL/TLS or ICA Encryption. . . 138

Use Secure Gateway. . . 139

General Security Considerations . . . 139

Chapter 6 Using the ICA Program Neighborhood Agent . . . 141

Overview . . . 141

Using the Program Neighborhood Agent . . . 142

Using the Program Neighborhood Agent Administration Tool . . . 142

Using the Config.xml File . . . 142

Configuring the Web Interface with Program Neighborhood Agent . . . 143

Securing the Program Neighborhood Agent with SSL . . . 144

Example . . . 145

(8)
(9)

Introduction

Overview

Welcome to the Web Interface for MetaFrame XP. This chapter introduces you to the documentation and to the Web Interface. Topics include:

(10)

How to Use this Guide

The Web Interface for MetaFrame XP Administrator’s Guide is for MetaFrame server administrators and Web masters responsible for installing, configuring, and maintaining the Web Interface.

This is a task-based guide to help you set up the Web Interface quickly and easily. This chapter introduces the documentation and the Web Interface, and describes what’s new in this version. Subsequent chapters explain how to deploy and configure the Web Interface in your MetaFrame installation.

This guide assumes knowledge of Citrix MetaFrame XP Server for Windows or Citrix MetaFrame Server for UNIX Operating Systems.

Document Conventions

The following conventional terms, text formats, and symbols are used throughout the printed documentation:

Convention Meaning

Boldface Commands, names of interface items such as text boxes and option buttons, and user input.

Italics Placeholders for information or parameters that you provide. For

example, filename in a procedure means you type the actual name of a file. Italics also are used for new terms and the titles of books.

UPPERCASE Keyboard keys, such as CTRL for the Control key and F2 for the function key that is labeled F2.

Monospace Text displayed at a command prompt or in a text file.

%SystemRoot% The Windows system directory, which can be WTSRV, WINNT, WINDOWS, or other name specified when Windows is installed. { braces } A series of items, one of which is required in command statements. For

example, { yes | no} means you must type yes or no. Do not type the braces themselves.

(11)

Finding More Information

The Web Interface includes the following documentation:

• The Web Interface for MetaFrame XP Administrator’s Guide (this document) provides an overview and explains how to install and configure the server running the Web Interface, ICA Client devices, and security. This guide is on the Components CD-ROM and on the Citrix Web site

(http://www.citrix.com/support). Select Product Documentation.

• Online help for the Administration tool (Admin tool). To access the Admin tool help system, click the Help button that is available on all the pages.The help is displayed in a new browser window.

• The Customizing NFuse Classic guide explains how to customize the Web Interface. This guide is available from the Citrix Web site

(http://www.citrix.com/support/). Select Product Documentation.

• The Readmefile contains last minute updates, corrections to the documentation, and known issues. This file is on the Components CD-ROM and on the Citrix Web site (http://www.citrix.com/support/). Select Product Documentation. Other sources of information about related Citrix products include the following: • The MetaFrame XP Server Administrator’s Guide explains how to install and

configure MetaFrame XP Server for Windows. Included in this documentation is information about publishing applications, configuring the Citrix XML Service, and configuring the Citrix SSL Relay. This guide is on the MetaFrame XP Server for Windows CD-ROM and on the Citrix Web site.

• The Feature Release and Service Pack Installation Guide for MetaFrame XP Server for Windows explains how to install and configure the latest Service Packs and Feature Releases on MetaFrame XP Server for Windows. Included in this documentation is information about configuring the Citrix XML Service and the Citrix SSL Relay. The Installation Guide is available on the Feature Release/Service Pack CD-ROM and on the Citrix Web site.

| (vertical bar) A separator between items in braces or brackets in command statements. For example, { /hold | /release | /delete} means you type

/hold or /release or /delete.

… (ellipsis) You can repeat the previous item or items in command statements. For example, /route:devicename[,…] means you can type additional

devicenames separated by commas.

! Step-by-step procedural instructions.

(12)

• The Citrix MetaFrame Server for UNIX Operating Systems Administrator’s Guide tells administrators how to install and configure Citrix MetaFrame Server for UNIX. Included in this documentation is information about publishing applications and configuring the Citrix XML Service for UNIX. This guide is available on the MetaFrame Server for UNIX CD-ROM and on the Citrix Web site.

• The Citrix SSL Relay for UNIX Administrator’s Guide is for system

administrators who are responsible for installing, configuring, and maintaining Citrix SSL Relay on Citrix MetaFrame Server for UNIX Operating Systems. This guide is available on the Citrix MetaFrame Server for UNIX CD-ROM and on the Citrix Web site.

• The Web Interface Extension for MetaFrame XP Administrator’s Guide

explains how to install and configure the Web Interface Extension for MetaFrame XP. This guide is on the ComponentsCD-ROM and on the Citrix Web site.

• The Secure Gateway for MetaFrame Administrator’s Guide tells administrators how to install and configure the Secure Gateway. This guide is on the

Components CD-ROM and on the Citrix Web site.

Using PDF Documentation

To access the Citrix documentation that is provided in PDF files, use Adobe Acrobat Reader 4 or later. Acrobat Reader lets you view, search, and print the documentation. You can download Acrobat Reader for free from Adobe System’s Web site (http://www.adobe.com). The self-extracting file includes installation instructions.

Providing Feedback About This Guide

We strive to provide accurate, clear, complete, and usable documentation for Citrix products. If you have any comments, corrections, or suggestions for improving our documentation, we want to hear from you. You can send e-mail to the

documentation authors at: [email protected]

(13)

Citrix on the World Wide Web

The Citrix Web site is at http://www.citrix.com. The site offers a variety of information and services for Citrix customers and users.

From the Citrix home page, you can access Citrix technical support services and other information designed to assist administrators.

The following are some of the resources available on the Citrix Web site:

Citrix Product Documentation Library. The library, which contains the latest

documentation for all Citrix products, is available from the Product Documentation area of the Citrix Web site at http://www.citrix.com/support. You can download updated editions of the documentation that ships with Citrix products, as well as supplemental documentation that is available only on the Web site.

Citrix ICA Clients. Downloadable Citrix ICA Clients for all supported platforms are available from http://www.citrix.com/download.

Support options. Program information about Citrix Preferred Support Services options is available from the Support area of the Citrix Web site at

http://www.citrix.com/support.

Software downloads. An FTP server provides access to the latest service packs, hotfixes, and utilities for download. Software updates are available from the Citrix Knowledge Center area of the Citrix Web site at

http://www.knowledgecenter.citrix.com.

Online knowledge base. The online Solution Knowledge Base contains an extensive collection of application notes, technical articles, troubleshooting tips, and white papers. The Solution Knowledge Base is available from the Support area of the Citrix Web site at http://www.citrix.com/support.

Discussion forums. The interactive online Solution Forums provide outlets for discussion of technical issues with other Citrix users. The Solution Forums are available from the Citrix Knowledge Center area of the Citrix Web site at http://www.knowledgecenter.citrix.com.

Education. Information about programs and courseware for Citrix training and certifications is available from http://www.citrix.com/training/.

(14)

Developer network. The Citrix Developer Network (CDN) is at

http://www.citrix.com/cdn. This open-enrollment membership program provides access to developer toolkits, technical information, and test programs for software and hardware vendors, system integrators, ICA licensees, and corporate IT developers who incorporate Citrix computing solutions into their products.

Introducing the Web Interface

The Web Interface is an application deployment system that provides users with access to MetaFrame applications through a standard Web browser.

The Web Interface employs Java object technology executed on a Web server to dynamically create an HTML depiction of MetaFrame server farms for your users. Each user is presented with all the applications published in the MetaFrame server farms for that user.

With the Web Interface, you have centralized application management capabilities and complete control over the application deployment process. You can create standalone Web sites for application access or Web sites that can be integrated into your corporate portal.

The Web Interface can be configured using the Administration tool; an easy to use graphical user interface available on Windows platforms. You can also edit the configuration file (NFuse.conf) to change many of the Web Interface’s properties. For more information about using these tools, see “Configuring the Web Interface Using the Administration Tool” on page 51 and “Configuring the Web Interface Using the Configuration File” on page 103.

(15)

The Web Interface Features

This section provides information about the Web Interface’s features. For details about which MetaFrame and ICA Client versions are required for particular Web Interface features, see “MetaFrame and ICA Client Version Requirements” on page 27.

Note If the MetaFrame server farm is operating in interoperability mode, some of the Web Interface features introduced since NFuse version 1.51 may be unavailable.

Manageability Features

A Web interface for Citrix Program Neighborhood. Users of almost any ICA Client can benefit from the simplified application access provided by Program

Neighborhood.

Complete administrative control over application deployment. Web server-side scripting lets you configure all ICA Client options in server-side scripts and ICA files.

Integration with popular Web technologies. The Web Interface’s Java objects can be accessed from Web server scripts, such as Microsoft’s Active Server Pages (ASP) and Sun Microsystems’ JavaServer Pages.

Windows Installer support The Web Interface is available in a Windows Installer package (an .msi file). The Windows Installer also provides Repair and Remove options.

Novell Directory Services (NDS) support. The Web Interface Login page for NDS contains a context field, allowing users to search for their user name in the tree to determine which context they are in. NDS authentication is supported on Windows Internet Information Server (IIS)/ASP only.

(16)

Active Directory and user principal name (UPN) support. All Web Interface components are compatible with Microsoft Active Directory. Users visiting Web Interface pages can log on to MetaFrame server farms that are part of an Active Directory deployment and seamlessly access Citrix published applications. The logon pages in Web Interface sites are compatible with Active Directory’s use of user principal names.

Application Access Features

Support for MetaFrame Server for UNIX Operating Systems. Support for MetaFrame Server for UNIX Operating Systems farms allows the Web Interface to display and launch applications running on UNIX platforms on your users’ client devices.

The Web Interface Extension for MetaFrame XP support The Web Interface Extension expands the application management and deployment features of the Web Interface to allow user access to applications provided by multiple MetaFrame server farms.

Backup MetaFrame servers. You can configure backup MetaFrame servers to ensure that users still have access to their applications in the event of a server failure.

Guest users. This feature allows users to log on using a guest or anonymous account.

Logout button. This feature allows the user to log off, clear session cookies, and return to the Login page.

Launching of published content. The Web Interface supports the content publishing features of MetaFrame XP.

Help links. Online help is available on every page for users to seek assistance.

Security Features

(17)

Secure Gateway for MetaFrame support The Secure Gateway, together with the Web Interface provides a single, secure, encrypted point of access through the Internet to MetaFrame servers on your internal corporate networks. The Secure Gateway simplifies certificate management, because a server certificate is required only on the Secure Gateway server, rather than on every MetaFrame server in the server farm.

Ticketing. This feature provides enhanced authentication security. The Web Interface can create tickets that authenticate users to published applications. Tickets have a configurable expiration period and are valid for a single logon. After use, or after expiration, a ticket is invalid and cannot be used to access applications. Use of ticketing eliminates the explicit inclusion of credentials in the ICA files the Web Interface uses to launch applications.

Client Deployment Features

Web-based ICA Client installation. You can use the Web Interface to deploy ICA Clients to any device that has a Web browser. When a client device user visits a Web Interface site, the ICA Client installation code detects the device and Web browser types and prompts the user to install an appropriate ICA Client.

ICA Win32 Program Neighborhood Agent support. The ICA Win32 Program Neighborhood Agent allows users to access Web Interface applications directly from the Windows desktop without using a Web browser. You can remotely configure the placement of links to remote applications from the Start menu, on the Windows desktop, or in the Windows system tray. The Program Neighborhood Agent user interface can also be “locked down” to prevent user misconfiguration.

Improved client detection/installation. The Web Interface has improved client detection abilities and gives administrators more control over the installation options presented to users.

What’s New

NFuse Classic has been integrated as a feature in MetaFrame XP. It is now called the Web Interface for MetaFrame XP. This guide may refer to both older versions of NFuse Classic and the new Web Interface for MetaFrame XP.

(18)

The Web Interface offers the following new features:

Platform Additions

Windows Server 2003 support The Web Interface is now available on Windows Server 2003.

Manageability Features

Multiple MetaFrame server farm support You can configure multiple MetaFrame server farms and provide users with a display of the applications available to them from all farms. You create multiple MetaFrame server farms on the Manage Citrix MetaFrame farms page, then configure each server farm individually. For more information, see “Configuring Communication with MetaFrame XP” on page 118.

Private certificate authority This feature allows you to use a private Certificate Authority with the ICA Java Client. For more information, see “Configuring ICA Client Deployment” on page 89.

Auto proxy support The proxy auto-detection feature in the Win32 and ICA Java Clients is available in the Web Interface. This option instructs the Win32 and ICA Java Clients to detect and use the client browser's proxy settings. For more information, see “Configuring Client-Side Firewall Settings” on page 86.

Application Access Features

RSA SecurID authentication RSA SecurID can be used as an authentication method to access applications running on Windows server families. When logging on to MetaFrame XP using RSA SecurID authentication, users enter a Personal

Identification Number (PIN) followed by the tokencode (the number displayed on the RSA SecurID token). For more information, see “Enabling RSA SecurID Authentication” on page 65.

User Features

ICA Java Client seamless window support Users can take advantage of the session sharing functionality of the ICA Java Client. This feature provides Seamless Window support—users can resize the application window, minimize it, and drag and drop text between the published application and applications running locally on the client device. For more information about configuring the Web Interface with the ICA Java Client, see “Configuring ICA Client Deployment” on page 89.

(19)

Installation Features

WAR file support WAR (Web archives) files are single file archives containing all the resources required to run an application written in JSP/Java servlet technology. Using WAR files, installation of the Web Interface across many platforms is less complex—WAR files can be installed into any compliant Web server on any operating system (such as Solaris, Linux, and Microsoft Windows). For more information, see “Installing the Web Interface on UNIX Platforms” on page 37.

Security Features

Security control settings The Web Interface provides additional security control settings. These settings are configured with NFuse.conf parameters. For more information, see “Configuring the Web Interface Using the Configuration File” on page 103.

Web Interface configuration and the Program Neighborhood Agent To provide additional security, certain Web Interface configuration parameters affect the validation of the Program Neighborhood Agent requests. For more information, see “Configuring the Web Interface with Program Neighborhood Agent” on page 143.

Security Protocols The Web Interface uses Microsoft's Schannel security protocol on Windows platforms. This protocol uses FIPS 140 validated cryptography, a standard required by some organizations. For more information about FIPS 140 validation, see the National Institute of Standards and Technology (NIST) Web site (http://csrc.nist.gov/cryptval/).

Web Interface Components

A Web Interface deployment involves the interaction of three network components: • One or more MetaFrame server farms

• A Web server

• A client device with a Web browser and ICA Client

MetaFrame Server Farms

(20)

Important among a server farm’s standard capabilities is application publishing. This is an administrative task that lets MetaFrame XP administrators make available to users specific applications hosted by the server farm. When a MetaFrame XP administrator publishes an application for a group of users, that application becomes available as an object to which ICA Clients can connect and initiate ICA sessions.

The ICA Program Neighborhood Client interface automates the client-side configurationprocess byeliminating the need for administrators or ICA Client users to browse the network for published applications. Using Program

Neighborhood, users can log on to the server farm and receive a customized list of applications published for their individual user name. This list of applications is called an application set.

The Web Interface server functions as a Program Neighborhood interface for connecting to one or more MetaFrame server farms. The server running the Web Interface queries MetaFrame server farms for application set information and then formats the results into HTML pages that a user can view in a Web browser. To communicate with MetaFrame server farms, the server running the Web Interface communicates with the Citrix XML Service running on one or more MetaFrame servers. The Citrix XML Service is a MetaFrame component that provides published application information to ICA Clients and servers running the Web Interface using TCP/IP. This service functions as the contact point between the server farm and the server running the Web Interface. The Citrix XML Service is installed with MetaFrame XP Server for Windows, Citrix MetaFrame 1.8 Service Pack 2 on MetaFrame 1.8 for Windows systems, and Citrix MetaFrame 1.1 with Feature Release 1 for UNIX Operating Systems on UNIX systems.

Web Server

The Web server hosts the Web Interface Java objects and Web server-side scripts. The Web Interface’s Java objects provide the following services:

• Authenticate users to a MetaFrame server farm or farms

• Retrieve application information, including a list of applications a user can access

• Give administrators the ability to modify the properties of individual applications before presenting them to users

(21)

ICA Client Device

In the context of the Web Interface, an ICA Client device is any computing appliance capable of executing an ICA Client and a Web browser. ICA Client devices include desktop PCs and network computers, among others.

In an ICA Client device, the Web browser and ICA Client work together as a viewer and engine. The Web browser lets users view application sets (created by

server-side scripting on the server running the Web Interface) while the ICA Client acts as the engine that launches published applications.

The Web Interface is integrated with Web-based ICA Client installation. Web-based ICA Client installationis a method of deploying ICA Clients from a Web site. When a user visits a site created with the Web Interface, the Web-based ICA Client installation code detects the device and the Web browser prompts the user to install an appropriate ICA Client. In the case of 16-bit and 32-bit Windows devices, Web-based ICA Client installation can also detect the presence or absence of an installed ICA Client and prompt the user only if necessary. See “Configuring ICA Client Installation” on page 90 for more information.

(22)

How the Web Interface Works

This diagram describes a typical interaction between MetaFrame server farms, a server running the Web Interface, and an ICA Client device.

1. An ICA Client device user utilizes a Web browser to view the Login page and enters their user credentials. The credentials are sent as a standard HTTP request over the default HTTP port 80.

(23)

3. The Citrix XML Service on the designated server then retrieves a list of applications from the server farms that the user can access. These applications comprise the user’s application set. In MetaFrame XP and MetaFrame 1.8 server farms, the Citrix XML Service retrieves the application set from the Independent Management Architecture (IMA) system and Program Neighborhood Service, respectively.

In a MetaFrame Server for UNIX Operating Systems farm, the Citrix XML Service on the designated MetaFrame server uses information gathered from the ICA browser and the local Web Interface configuration file to determine which applications the user can access.

The Citrix XML Service then forwards the user’s application set information to the Web Interface’s Java objects running on the server.

4. The server uses the Web Interface’s Java objects to generate an HTML page containing links to the applications in the user’s application set. Each hyperlink in the HTML page points to a template file stored on the server. This file serves as a template from which the Web Interface can dynamically generate ICA files.

ICA files are text files containing parameters that configure ICA session properties such as the application to run in the session, the address of the server that will execute the application, and the properties of the window in which to display the application. ICA files are written in .ini file format and have an .ica extension.

5. The user initiates the next step by clicking one of the hyperlinks in the HTML page. The Web browser sends a request to the Web server to retrieve an ICA file for the selected application.

The Web server passes this request to the Web Interface’s Java objects, which retrieve the template ICA file. The template file contains substitution tags. The Java objects replace the substitution tags in the template ICA file with

information specific to the user and desired application. The Java objects then send the customized ICA file to the Web browser.

6. The Citrix XML Service is contacted to locate the MetaFrame server in the farm that is the least busy.

7. The Web browser receives the ICA file and passes it to the ICA Client device. 8. The ICA Client receives the ICA file and initiates an ICA session with a

MetaFrame server according to the ICA file’s connection information.

What to Do Next

(24)
(25)

Deploying the Web Interface

Overview

This chapter explains how to install the Web Interface on your server and configure the server to run the Web Interface. Topics include:

• System Requirements

(26)

System Requirements

The following section describes MetaFrame server, Web server, and ICA Client device requirements for the Web Interface.

MetaFrame Server Requirements

To run the Web Interface, your MetaFrame servers must meet the following requirements.

Supported MetaFrame Versions

The Web Interface requires one of the following Citrix platforms:

• MetaFrame XP for Windows Version 1.8 with Feature Release 1 and Service Pack 3

• MetaFrame XP for Windows with Service Pack 2 for Terminal Services Edition • MetaFrame XP for Windows with Service Pack 3 for Windows 2000

• MetaFrame XP for Windows with Service Pack 3 for Windows Server 2003 • MetaFrame for UNIX Operating Systems Version 1.1. with Feature Release 1 The Web Interface operates with these MetaFrame XP versions on all of their supported platforms. For a list of supported platforms, see your MetaFrame XP documentation. Citrix recommends that you have the latest version of the service pack installed on your system.

Additional Software Requirements

MetaFrame XP Server for Windows servers must have: • Service Pack 2 or 3 installed on each server.

• A Feature Release 1 license installed and activated on each server. MetaFrame Server for UNIX Operating Systems must have:

• Feature Release 1 installed on each server.

• A Feature Release 1 license installed and activated on each server.

The Citrix XML Service for UNIX Operating Systems must be running on all MetaFrame Server for UNIX servers in the farm, on the same TCP port, to support ticketing.

(27)

MetaFrame and ICA Client Version Requirements

The following table summarizes the MetaFrame XP and ICA Client versions that are required for key Web Interface features (note that “FR” denotes “Feature Release”).

Web Interface Feature MetaFrame XP Requirements ICA Client Requirements

Ticketing MetaFrame 1.8 FR1

MetaFrame XP 1.0

MetaFrame for UNIX 1.1 FR1

6.0 or later

NDS authentication MetaFrame XP FR1 6.20 or later DNS addressing MetaFrame XP FR1

MetaFrame for UNIX 1.1 FR1

6.20 or later

Smart card support MetaFrame XP FR2 6.30 or later Desktop Credential

Pass Through MetaFrame XP FR2 N/A

Enhanced Content

Publishing MetaFrame XP FR2 6.20 or later

File Type Association

for arbitrary documents MetaFrame XP FR2 6.30 or later Server-side firewall

support MetaFrame 1.8 FR1MetaFrame XP 1.0 MetaFrame for UNIX 1.1

N/A

Client-side firewall

support N/A 6.0 or later for SOCKS 6.30 or later for Secure Proxy

Load balancing MetaFrame 1.8 FR1 MetaFrame XP 1.0 MetaFrame for UNIX 1.1

N/A

End-user change

password MetaFrame XP FR2 Not available on MetaFrame Server for UNIX Operating Systems

N/A

Auto-download ICA

(28)

General Configuration Requirements

MetaFrame XP for Windows servers must be members of a server farm. The servers in the farm must have applications published. Additionally, if your

MetaFrame servers are running MetaFrame 1.8 for Windows, make sure they have applications published under the server farm management scope. For information about server farm membership and publishing applications in a server farm, see the

MetaFrame XP Server Administrator’s Guide.

Note If you are using NFuse 1.6 or later versions of the Web Interface in a MetaFrame 1.8 for Windows environment, you must change the

AddressResolutionType from ipv4-port to ipv4.

MetaFrame Server for UNIX Operating Systems servers also must have

applications published. In addition, these applications must be configured for use with the Web Interface. See the Citrix MetaFrame Server for UNIX Operating Systems Administrator’s Guide for information about installing the Citrix XML Service for UNIX and configuring published applications for use with the Web Interface.

Backward Compatibility

Server farms composed of MetaFrame XP, MetaFrame 1.8, or MetaFrame Server for UNIX Operating Systems servers are backward compatible with:

• NFuse Version 1.5 • NFuse Version 1.51 • NFuse Version 1.6 • NFuse Version 1.61 • NFuse Classic Version 1.7

Pass through authentication (single sign-on)

N/A Full Program Neighborhood ICA

Win32 / Program Neighborhood Agent 6.20 or later

Embedded clients N/A Provided by the Web Interface

Secure Gateway

support MetaFrame 1.8 FR1MetaFrame XP 1.0 MetaFrame for UNIX 1.1 FR1

6.20.986 or later

(29)

Web Server Requirements

On Windows Platforms

You can use the Web Interface on the following Windows platforms and servers: • Internet Information Services 6.0 on Windows Server 2003

• Internet Information Services 5.0 on Windows 2000 with Service Pack 3 The Web Interface requires a Java Virtual Machine (JVM) for execution of its Web Server Extension software. During Web Interface installation on Windows

platforms and servers, the system is automatically checked for a JVM. If a JVM is not present on the system (that is, msjava.dll is not found in the system32 folder), the installation wizard will install a JVM.

On UNIX Platforms

You can use the Web Interface on the following UNIX server/operating system/ servlet engine/JDK combinations:

You can use the Web Interface on other servers that support Java servlets and/or JavaServer Pages. For example:

A copy of the ICA Clients must be present on the server for Web-based installation of the ICA Clients. See “ICA Client Device Requirements” on page 30 for

information about supported ICA Client versions and “Copying ICA Client Installation Files to the Web Server” on page 122 for information about copying the ICA Clients to the server running the Web Interface. If the server is running Tomcat 4.0.5, users must have the latest version of the ICA Client installed on their machines.

Server Operating System Servlet Engine JDK

Apache 1.3.26 Redhat 7.3 Tomcat 4.0.5 Sun 1.4.0

Apache 1.3.26 Solaris 8 Tomcat 4.0.5 Sun 1.4.0

Server Operating System Servlet Engine JDK

Apache 1.3.26 Redhat 7.2 Tomcat 3.2.4 Sun 1.3.1

Apache 1.3.26 Solaris 8 Tomcat 3.2.4 Sun 1.3.1

Sun ONE 6.0 Solaris 9 Sun ONE 6.0 Sun 1.4.0

(30)

If your server has a statically configured IP address, you must define the Primary DNS suffix or a fully qualified DNS domain name for the server. This can be done on Windows 2000 in My Network places/Local Area Connection Properties/ Internet Protocol properties. To verify correct configuration, check to see if a valid DNS suffix is present in the following registry key value data:

Key: HKLM\System\currentControlset\services\tcpip\parameters Value: Domain

Important Using Registry Editor incorrectly can cause serious problems that may require you to reinstall your operating system. Citrix cannot guarantee that problems resulting from the incorrect use of Registry Editor can be solved. Use Registry Editor at your own risk.

ICA Client Device Requirements

To operate with the Web Interface, your ICA Client devices must have a supported ICA Client and Web browser. With the exception of the ICA DOS Client, all ICA Clients that ship on the Components CD-ROM are compliant with the Web Interface. The Components CD-ROM is available in the MetaFrame XP media or ICA Clients are also available for free download from the Citrix Web site.

Important The ICA Client CD-ROM shipping with the Solaris version of MetaFrame for UNIX Operating Systems 1.1 is not compatible with the Web Interface. Users of these systems must download the latest ICA Clients from the Citrix Web site at http://www.citrix.com/download before beginning Web Interface deployment.

The following table lists minimum ICA Client version levels for supported browsers.

ICA Client Version Supported Browsers

Win32 6.1.963 and above Internet Explorer 5 and above

(31)

Citrix recommends that you deploy the latest ICA Clients to your users to ensure that they can take advantage of the latest features. The features and capabilities of each ICA Client differ—for information about supported ICA Client features, see the Citrix ICA Client Administrator’s Guide for the ICA Client in question.

Installing the Web Interface

This section explains how to install the Web Interface on your server. An overview of the installation is provided, together with instructions about how to install the Web Interface on different servers.

Installation Overview

You can install the Web Interface as part of the MetaFrame XP installation or separately from MetaFrame XP. These methods are explained in more detail below. Before installing the Web Interface on Windows platforms, you must install Microsoft Internet Information Services (IIS).

Installing the Web Interface During MetaFrame XP Installation

MetaFrame XP Setup provides the option to install the Web Interface during MetaFrame installation. If you choose this option, the Web Interface is installed on the MetaFrame server and the Web Interface’s Web pages are placed in the Web server’s document root directory on the MetaFrame server. This Web site is fully functional and can be used immediately, without additional configuration. If, during installation, you change the default Web page, the default Web page for your MetaFrame server will be the Web Interface’s Login page.

Macintosh 6.0.66 and above Internet Explorer 5 and above

Netscape Communicator 4.7x and above Netscape Navigator 6.21 and above

UNIX for Solaris/

SPARC 6.0.915 and above Netscape Communicator 4.7x and above Redhat Linux 6.3 and above Netscape Communicator 4.7x and above

Netscape Navigator 6.x and above

(32)

If you install the Web Interface as part of MetaFrame XP installation and you select drive remapping, you may need to update the NFuse.properties file to reflect the new drive mappings. Edit the NFuse.properties file (located in the software directory) with the new drive mappings; for example, change c:\ to m:\. Drive remapping occurs during installation of MetaFrame XP; therefore, make these changes after installing MetaFrame XP, but before any feature releases are installed.

Installing the Web Interface Separately from MetaFrame XP

You can install the Web Interface separately from MetaFrame XP using the Components CD-ROM, or by downloading the Web Interface from the Citrix Web site. For details about the information you are prompted for during the installation of the Web Interface, see “Required Information” on page 35.

Installation programs for the following Web servers are available: • Microsoft Internet Information Services (IIS)

• Apache, Sun ONE, and WebSphere for UNIX platforms

For more information about how to install the Web Interface, see “Installing the Web Interface on Microsoft IIS” on page 37 and “Installing the Web Interface on UNIX Platforms” on page 37.

Upgrading an Existing Installation

You can upgrade to the latest version of the Web Interface either by installing MetaFrame XP with Feature Release 3, or by installing the Web Interface from CD-ROM or Web download files.

Upgrading During MetaFrame XP Installation

MetaFrame XP with Feature Release 3 includes the Web Interface. If you

(33)

Upgrading Using the Components CD-ROM or Web Download

You can upgrade to the Web Interface using the Components CD-ROM or the Web Interface files downloaded from the Citrix Web site.

If you are upgrading from NFuse 1.51 (or a later version), settings in the

NFuse.properties file are migrated to the NFuse.conf file—this means that existing settings are automatically migrated to the latest version of the Web Interface. If you are upgrading from version prior to NFuse 1.51, you must first remove the old version before installation. For more information, see the appropriate Citrix NFuse Classic Administrator’s Guide for the version you want to uninstall.

The installer detects the earlier version of the Web Interface and backs up the configuration files and scripts in a backup directory. You are prompted for the location of this backup directory during the installation process such as C:\Program Files\Citrix\NFuse\BackedUpBy20 on IIS. The Web Interface Java objects (.jar files), scripts, and ICA files are not backed up and remain in the same location.

After you upgrade to the Web Interface, your previous site is moved to the backup directory.

Note Your original NFuse.conf settings may not apply in later versions of the Web Interface. See the table listing NFuse.conf parameters in “Configuring the Web Interface Using the Configuration File” on page 103 for more information.

Web Interface Extension Considerations

If you want to upgrade a server that is currently installed with a previous version of the Web Interface and the Web Interface Extension to the Web Interface only (that is, upgrade to the Web Interface without the Web Interface Extension) you must: 1. Remove (uninstall) the Web Interface Extension.

2. Remove the current version of the Web Interface.

3. Install (upgrade to) the latest version of the Web Interface.

For more information about removing and installing the Web Interface Extension, see the Web Interface Extension for MetaFrame XP Administrator’s Guide.

What Is Installed Where?

(34)

The software directory. For example, on Windows this is typically: C:\Program Files\Citrix\NFuse; on UNIX systems, this may be: /usr/local/tomcat/webapps/Citrix/WEB-INF.

Web Interface software and configuration components are stored here, including:

• NFuse.properties file

• Web Interface Java objects (.jar files) • NFuse.conf file

• ICA templates (.ica files)

Note On Windows platforms, the NFuse.conf file is stored in: C:\Program Files\Citrix\NFuse\conf.

The Web Interface files in this location are global. Therefore, if you make changes to NFuse.conf, these settings are applied to all Web pages served by the Web Interface.

The Web server’s document root. This depends upon where you installed your Web server—for example, on Windows this is typically:

C:\Inetpub\wwwroot; on UNIX systems, this may be: /usr/local/webapps. The Web Interface’s presentation and layout components are stored in this location, including scripts (.asp, .jsp, and .htm files).

Web Interface files in this location can be tailored to specific Web pages. For example, to run two different Web Interface sites on one Web server, you can create two directories under the Web server’s document root, each with its own custom scripts.

Web Interface Extension Files

Files for the Web Interface Extension are also installed in the software directory and Web server’s document root when you install the Web Interface separately from MetaFrame XP. For example, on Windows, the NFuseE.jar file is installed in <drive>\Program Files\Citrix\NFuse, and various scripts and images in

(35)

Security Considerations

Citrix recommends that, as with any Windows-based server, you follow Microsoft standard guidelines for configuring your Windows server. In particular, when you install the server, do not use a FAT (File Allocation Table) file system, because this may allow users other than administrators to run the Web Interface Admin tool. If you use a FAT file system, no authentication will occur when the Admin tool is accessed.

Note When using Windows Server 2003 servers, ASP is automatically enabled during the Web Interface installation and is not disabled if the Web Interface is uninstalled.

Required Information

If you install the Web Interface separately from MetaFrame XP using the

Components CD-ROM or Web download files, you are prompted for information during the installation that includes:

MetaFrame server identity. You must identify one or more MetaFrame servers in the farm that will act as contact points between the server farm and the Web server. You can specify MetaFrame server names, IP addresses, or fully-qualified DNS names. You can specify the name of any server in the farm. • TCP/IP port. You must specify the TCP/IP port on which the specified servers are running the Citrix XML Service. If you do not know this port number, you can determine it by checking a MetaFrame server’s port information. For more information about how to do this, see “Viewing the Citrix XML Service Port Assignment” on page 36.

ICA Clients. You are prompted for the Components CD-ROM or CD image. Setup copies the contents of the CD’s ICAWEB directory to a directory called /Citrix/ICAWEB that it creates off the Web server’s document root. All Web sites created by the installation process assume that the Web server contains the ICA Client files in this directory structure. If you do not want to copy the ICA Clients to the Web server during Web Interface installation, you can copy them to the server later. Make sure you create the required directory structure; for example, in an English installation:

(36)

Viewing the Citrix XML Service Port Assignment

If you install the Web Interface separately from MetaFrame XP using the Components CD-ROM or Web download files, during the installation you are prompted for the port number on which the Citrix XML Service is running. The Citrix XML Service is the communication link between the MetaFrame server farm and the server running the Web Interface. This section explains how to display the port number on which the Citrix XML Service is running.

" To view the Citrix XML Service port assignment

• On MetaFrame XP servers, open the Management Console for MetaFrame XP. In the left pane, right-click the server and select Properties. In the Properties

dialog box, select the MetaFrame Settings tab to view the port assignment. If during MetaFrame XP installation, you choose the option to share Internet Information Service’s TCP/IP port with the Web Interface, the Management Console displays Sharing with IIS as the port in use. In this case, to determine the Citrix XML Service port, you must locate the port used by Internet

Information Service’s WWW Service. By default the WWW Service uses port 80.

• On MetaFrame 1.8 servers, the port number is specified in the following registry key:

HKLM\SYSTEM\CurrentControlSet\Services\CtxHttp\TcpPort • On MetaFrame Server for UNIX Operating Systems servers, type

ctxnfusesrv -l at a command prompt to view port information.

Note If necessary, you can change the port used on the MetaFrame server. For MetaFrame 1.8 servers, see the Feature Release and Service Pack Installation Guide for Citrix MetaFrame for Windows. For MetaFrame XP servers, see the installation chapter of the MetaFrame XP Server for Windows Administrator’s Guide. For MetaFrame Server for UNIX Operating Systems servers, see the

(37)

Installing the Web Interface on Microsoft IIS

Important During the installation of the Web Interface on Microsoft IIS, the installer stops and restarts the Web server and its associated services. This restart causes a disruption of service to connected users for the duration of the installation.

" To install the Web Interface on Microsoft IIS

1. Log on as an administrator.

2. If you are installing the Web Interface from the Components CD-ROM, insert the CD-ROM in your Web server’s CD drive. The Citrix MetaFrame XP Components dialog box appears. Select the Web Interface option. If you downloaded the Web Interface from a download site, copy the file NFuseClassic20-IIS.msi to your Web server. Double-click the file. 3. The Installation wizard guides you through the installation process.

CAUTION If you are using MSI 1.x and during the installation you use the command-line option to write details to a log file (msiexec /l*v log.txt /I

NFuse20Setup-IIS.msi or NFuse20Setup-IIS.msi /l*v log.txt /I), or the registry is set to write to a log file when software is installed, the Web Interface Admin tool password appears in the log file in clear text. If you distribute the log file, make sure you remove the password from this file. Citrix recommends that you run MSI 2.0 to avoid this issue. To verify which version of MSI you are using, in a command prompt enter msiexec.

Installing the Web Interface on UNIX Platforms

This section describes how to install the Web Interface on Sun ONE, Apache/ Tomcat, and WebSphere.

The Web Interface requires a servlet engine to work on UNIX platforms. The Sun ONE and WebSphere Web servers include a built-in servlet engine. However, the Apache Web server requires an additional servlet engine to support the Web Interface such as Tomcat (note that Tomcat can be used as a standalone Web server or as a servlet engine).

During Web Interface installation, you are prompted for locations in which to place the Web Interface’s files. See “File Location Information” on page 42 for

(38)

Important Before you make the Web Interface available to your users, you must ensure that the Web Interface icon cache directory can be written to by the account on which the servlet engine is running, is World readable and executable, and that files created in this directory are World readable. The location of this directory will differ based on the servlet engine you are running. For example,

<.war file name>/MetaFrameXP/NFuseIcons/.

" To install the Web Interface on Apache/Tomcat

1. Log on as root to the server on which you want to install the Web Interface. 2. Copy the Web Interface .war file from the Components CD-ROM to the

software directory in which Tomcat is installed. For example: /usr/local/jakarta-tomcat-4.0.5/webapps

3. Rename the .war file to the folder name that will be used when users log in to the Web Interface. For example, if you rename the .war file to Citrix.war, users enter http://<Web server name>/Citrix to log in to the Web Interface. This address is case sensitive.

4. Restart Tomcat.

5. Navigate to the directory in which the Web Interface is installed. Enter

sh postInstall.sh to run the post install script.

6. Enter the name of the MetaFrame server from which you will retrieve application information.

7. Enter the XML port number.

8. Enter Yes or No to install the ICA Clients. 9. Stop and restart Tomcat.

" To install the Web Interface on Sun ONE

1. In the Sun ONE Admin tool, click the Class Manager link. 2. Click Manage, then click the Web Applications tab. 3. Click the Deploy Web Application link.

4. From the WAR file on drop-down list, select Server Machine. 5. Enter the location path for the .war file in the WAR file path field. 6. Enter the log on location for the users in the Application URI field. For

example, if you enter Citrix in this field; users enter

(39)

7. Enter a directory name in which the Web Interface installation files will be located. This directory will automatically be created after the Web Interface is installed.

8. Click OK.

9. Navigate to the directory in which the Web Interface is installed. Enter

sh postInstall.sh to run the post install script.

10. Enter the name of the MetaFrame server from which you will retrieve application information.

11. Enter the XML port number.

12. Enter Yes or No to install the ICA Clients.

13. In the Sun ONE Admin tool, click Apply and then click Apply Changes. The Web server is automatically restarted.

Configuring WebSphere

The following procedure explains how to configure WebSphere for the Web Interface.

" To configure WebSphere Web server for the Web Interface

1. In the /opt/WebSphere/AppServer/bin directory, execute the startupServer.sh file.

2. Start another shell and execute the WebSphere Standard Administrative Console. For example: /usr/IBMWebAS/bin/adminclient.sh.

3. When the Administrative Console opens, click the Wizards icon and then select

Create a Web Application from the drop-down list.

4. In the first page of the wizard, enter Citrix as the Web Application Name. Keep the other defaults and click next.

5. In the next page, expand the Nodes tree and highlight DefaultServlet Engine

and click next.

6. In the next page, enter /Citrixfor the Web Application Web Path. Keep the other defaults and click next.

7. In the next page, enter the Document Root—this path depends on where the Web Interface is installed. For example:

/usr/IBMWebAS/hosts/default_host/Citrix/web.

(40)

Tip To create more space, click the down arrow on the left.

<folder>/nfuse.jar <folder>/NFuseE.jar <folder>/ctxxml4j.jar <folder>/jsafeObf.jar <folder>/sslplus3.1.7.jar <folder>/conf

9. Click Finish to end the wizard.

10. Under the WebSphere Administration Domain tree, expand the branch that is the hostname of your server and highlight Default Server.

11. In the Application Server:DefaultServer pane, enter the following in the

Command line arguments field and click Apply:

-classpath <WebSphere folder>/hosts/default_host/Citrix/servlets/ ctxxml4j.jar:<WebSphere folder>/hosts/default_host/Citrix/servlets/

sslplus3.1.7.jar:<WebSphere folder>/hosts/default_host/Citrix/servlets/jsafe-Obf.jar

12. In the Application Server:DefaultServer pane, enter the following in the Command line arguments field and click Apply:

-Ddefault.client.encoding=iso-8859-1 -classpath

This argument is required to support extended characters (such as Japanese) for some operations in the Web Interface.

13. Start the IBM HTTP service from the appropriate directory (for example: /opt/IBMHTTP/bin) using the command ./apachectl.

14. Open the WebSphere Standard Administrative Console; for example, enter: ./adminclient.sh

15. Highlight the Default Server (if it is not already highlighted) and click the stop

button. Wait until you see a dialog box that says: “Command ‘Default Servcer.stop’ completed Successfully”. Close this dialog box.

16. Click the start button. The Web service restarts. By default, WebSphere listens on port 80.

(41)

" To install the Web Interface on WebSphere

1. Log on as root at the server on which you want to install the Web Interface 2. Copy the Web Interface .war file from the Components CD-ROM to a

temporary directory such as /tmp. 3. Rename the .war file to Citrix.war.

4. In a UNIX shell, enter /opt/IBMWebAS/bin/wartowebapp.sh Citrix.war /opt/ IBMWebAS/hosts/default_host/ Citrix /Citrix Citrix

5. In the WebSphere Standard Administrative Console, start the Citrix Web application.

6. Navigate to the /opt/IBMWebAS/hosts/default_host/Citrix/web directory. Enter

sh postInstall.sh to run the post install script.

7. Enter the name of the MetaFrame server from which you will retrieve application information.

8. Enter the XML port number.

9. Enter Yes or No to install the ICA Clients.

(42)

File Location Information

During Web Interface installation, you are prompted for locations in which to place the Web Interface’s files. The following table lists these files by type. Use this table as a reference when installing the Web Interface and configuring the Web server.

File Type Description Directory

Web Interface Java objects:

nfuse.jar ctxxml4j.jar jsafeObf.jar sslplus3.1.7.jar NFuseE.jar

Java objects including the base Web Interface Class files, IBM XML parser, and SSL/SOCKS provider Classes and cryptographic libraries.

On Tomcat, the installer determines the location of these files. On other platforms, place these files in the classpath.

Configuration files: NFuse.conf NFuse.properties NFuseAdmin.properties NFuse.dtd

CtxSTA.dtd nfuse.txt

NFuseClientDetect Strings.properties NFuseErrors Resource.properties

Text files containing Web Interface configuration parameters, XML definitions, display strings, error message strings, and Web-based ICA Client installation strings.

(43)

Web pages Web Interface pages Place these files in any directory from which your Web server can serve Web pages. Setup defaults to the directory <webroot>/Citrix/ NFuse.

Icon files The setup program creates an icon cache directory that the Web Interface’s Java objects use to store application icons (.gif files).

Place this directory in any location from which your Web server can serve Web pages. Setup defaults to the

<webroot>/Citrix/NFuse/

NFuseIcons directory. If you change the path from the default, you must update the SessionField.NFuse_ IconCache parameter in the NFuse.conf file.

ICA Clients Citrix ICA Client installation files used by Web Interface Web sites to install ICA Clients on client devices.

Setup prompts you to supply the Components CD-ROM or CD image and then copies the contents of the CD’s ICAWEB directory to a /Citrix/ ICAWEB directory off the Web server’s Web publishing root.

The Web Interface pages assume the ICA Client files are stored in this directory structure.

If the Components CD-ROM is not available, you can copy the contents of the CD’s ICAWEB directory to your Web server after Setup completes.

(44)

What to Do Next

After you install the Web Interface, you are ready to make the Web Interface available to your users.

However, you may need to configure the Web Interface depending upon what other components are in your MetaFrame installation, or you may want to customize or extend the Web Interface’s capabilities.

• For information about how to configure the Web Interface for the Secure Gateway using the Admin tool, see “Configuring Secure Gateway Support” on page 82.

• For information about how to configure the Web Interface Extension for the Web Interface using the Admin tool, see “Configuring Communication with the Web Interface Extension” on page 99 and the Web Interface Extension for MetaFrame XP Administrator’s Guide.

• For information about how to configure the Web Interface using the Admin tool or NFuse.conf file, see “Configuring the Web Interface Using the

Administration Tool” on page 51 or “Configuring the Web Interface Using the Configuration File” on page 103.

• For information about security considerations, see “Configuring Web Interface Security” on page 127.

• To extend and customize Web Interface functionality, see the Customizing NFuse Classic guide.

After you finish configuring the Web Interface, inform your users of the URL for the Login page—for more information, see “Making the Web Interface Available to Users” on page 119.

Troubleshooting the Web Interface Installation

(45)

Using the Repair Option

If you experience problems with the Web Interface installation, try using the

Repair option to fix the problem. The Repair option replaces missing files; it does not replace the scripts (.asp and .htm files) or the NFuse.conf file.

On Windows platforms, you can use either of the following procedures.

" To run the Repair option from the Control Panel

1. From the Control Panel, select Add or Remove Programs.

2. From the Add or Remove Programs dialog box, select Web Interface for MetaFrame XP.

3. Click Change.

4. Follow the instructions on screen.

Alternatively, you can run the Repair option by clicking the Web Interface .msi file.

" To run the Repair option from the .msi file

1. Double-click the NFuseClassic-IIS.msi file. The Web Interface for MetaFrame XP Setup dialog box appears.

2. Select Repair and click Next. 3. Follow the instructions on screen.

(46)

Uninstalling the Web Interface

If you installed the Web Interface on Windows separately from MetaFrame XP using the Components CD-ROM or Web download files, you can use the Add/ Remove Programs option available from Start>Settings>Control Panel

If you installed the Web Interface as part of MetaFrame XP, to uninstall the Web Interface you must uninstall MetaFrame XP. When you remove MetaFrame XP, the previous version of the Web Interface is automatically restored.

When you uninstall the Web Interface, all Web Interface files are removed, including the ICAWEB directory and the Web Interface’s backup files. Therefore, if you want to keep any Web Interface files, copy these to another location before you uninstall the Web Interface.

Under some circumstances, the Web Interface uninstaller may fail. Possible causes are:

• Insufficient registry access for the uninstaller

• The CTX_NFUSE_ADMIN user is no longer present • The uninstaller has insufficient permissions to remove the

CTX_NFUSE_ADMIN user

• IIS has been removed from the system after the Web Interface was installed • The Microsoft JVM has been removed from the system

Important During the uninstallation of the Web Interface on Microsoft IIS, the installer stops and restarts the Web server and its associated services. This restart causes a disruption of service to connected users for the duration of the installation.

Uninstalling the Web Interface on Microsoft IIS

" To uninstall the Web Interface on Microsoft IIS

1. Use the Add/Remove Programs option available from Start>Settings> Control Panel.

(47)

Uninstalling the Web Interface on UNIX Platforms

" To uninstall the Web Interface on Apache/Tomcat

1. Navigate to the directory in which you originally copied the .war file. 2. Stop your Web server.

3. Enter rm -rf <.war file name>

" To uninstall the Web Interface on SunONE

1. In the Admin tool, navigate to the Deploy Web Apps section. 2. From the drop-down menu, select delete.

(48)
(49)

Configuring the Web Interface

Overview

This chapter explains how to configure and customize the Web Interface using the Admin tool (the graphical user interface) and the Web Interface configuration file. Topics include:

• Deciding Which Configuration Method to Use

(50)

Deciding Which Configuration Method to Use

This section helps you to determine which method of configuring the Web Interface is best for your needs.

You can configure and customize the Web Interface using the following methods:

Admin tool. This Web-based graphical user interface allows you to perform day-to-day administration tasks quickly and easily. For example, you can use the Admin tool to specify the settings that users can adjust on the Settings page, or to configure user authentication to the Web Interface. After you make changes using the Admin tool, you save and apply them so your configuration takes effect. The Admin tool is available only on Windows/IIS machines, and requires Internet Explorer 5.0 or later. For information about how to configure the Web Interface using the Admin tool, see “Configuring the Web Interface Using the Administration Tool” on page 51and the Admin tool online help.

The Web Interface configuration file. The NFuse.conf file allows you to change many of the Web Interface’s properties, and is available on both Windows and UNIX platforms. You can use this file to perform day-to-day administration tasks and customize many more settings. You edit the values in the NFuse.conf file and then stop and restart your Web server to apply the changes. For information about configuring the Web Interface using the NFuse.conf file, see “Configuring the Web Interface Using the Configuration File” on page 103.

Web server scripts, Citrix substitution tags, and Java servlets. You can use the Web Interface’s application programming inte

References

Related documents