Error Occurred While Attempting Make Connection Ssl Relay
Developer Network (CDN) ForumsCitrix Insight ServicesCitrix ReadyCitrix Success KitsCloud Provider PackCloudBridgeCloudPlatform (powered by Apache CloudStack)CloudPortalDemo CenterDesktopPlayerEdgeSightEducationForum PrototypeHDX MonitorHDX RealTime Optimization PackHotfix Rollup PackJapanese ForumsKnowledge Center FeedbackLicensingLTSRNetScalerNetScaler E-Business CommunityNetScaler Gateway (Formerly Access Gateway)Profile ManagementProof of Concept KitsProvisioning ServerQuick Demo ToolkitReceiver, Plug-ins, and Merchandising ServerSecure GatewayShareFileSingle Sign-On (Password Manager)SmartAuditorStoreFrontTechnology PreviewsTrial SoftwareUniversal Print ServerUser Group CommunityVDI-in-a-BoxWeb InterfaceXenAppXenClientXenDesktopXenMobileXenServer Discussions Support Forums Programs Archived Products (includes End of Life) XenApp 5.0 for Windows Server 2003 / Presentation Server 4.5 Presentation Server 4.5 - General Javascript Disabled Detected You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality. XML error.. after turn on SSL Relay, got the credential error whn attempt.. Started by Arslan Ahmed , 17 April 2009 - 05:46 AM Login to Reply Arslan Ahmed Members #1 Arslan Ahmed 5 posts Posted 17 April 2009 - 05:46 AM XML error.. after turn on SSL Relay, got the credential error whn attempt to log in WI..HiIn my Environment, i have 1 PS4.5 with R03, R04 loaded on windows 2003 SP2 platform.. in Workgroup environment.everything was working fine, but as requirement i hav been told to shift it on SSL, so i have generate the Certificate through the Certificate Authority. Certificate has the same name as server has as the requirment of citrix.. Certificate installed on IIS serverActivated SSL relay on port 443Changed the XML port to 8282.. No CSG..i get sucessfully login through the PNAgent Site on SSL n applications are working fine.but finally i have been stucked here.. with the web interface.Web Interface Page is apperiaring.. but when i put my usersname/password/domain n login then i get this error"The supplied credentials could not be validated. Either they are incorrect, or there is a problem with the authentication system. Try again, or contact your help desk or system administrator for help."and in Event ViewerEvent Type: ErrorEvent Source: Web Interface at x:\inetpub\wwwroot\Citrix\AccessPlatformEvent Category: NoneEvent ID: 0Date: 4/17/2009Time: 3:03:34 PMUser: N/AComputer: CTXSERVERDescription:All of the configured XML Services for farm "Arwentech" failed to respond to this XML transaction. [Log ID: b649e59]Event Type: ErrorEvent Source
for Help Receive Real-Time Help Create a Freelance Project Hire for a Full Time Job Ways to Get Help Ask a Question Ask for Help Receive Real-Time Help Create a Freelance Project Hire for a Full Time Job Ways to Get Help Expand Search Submit Close Search Login Join Today Products BackProducts Gigs Live Careers Vendor Services Groups Website Testing Store Headlines Experts Exchange > Questions > Problems configuring SSL Relay with Presentataion server 4.5 Want to Advertise Here? Solved Problems configuring SSL Relay with Presentataion server 4.5 Posted on 2008-03-24 Citrix 1 Verified Solution 7 Comments 3,775 Views Last Modified: 2012-06-21 I cannot get SSL Relay to work right. I'm hoping someone can lend some guidance. I have WI set up http://discussions.citrix.com/topic/244850-xml-error-after-turn-on-ssl-relay-got-the-credential-error-whn-attempt/ on a 2003 box, and PS 4.5 on another (the PS box also contains SSL Relay). Eventually the WI will reside in a DMZ, but for setup/troubleshooting reasons, I have them both internally now. I have installed the server certificate on the PS 4.5 box, using the SSL Relay Autoconfig tool. It appears to have installed properly. I have also installed the root certificate on the WI box using the web interface. In SSL Relay, I https://www.experts-exchange.com/questions/23264390/Problems-configuring-SSL-Relay-with-Presentataion-server-4-5.html have adjusted the SSL Relay listening port to 444. However, when I open the Access Management Console and navigate to my site, and then to Manage Server Farms, and change the ssettings so the servers communicate via SSL Relay on port 444, I cannot log in via the web interface. I can view the login page fine, but when I enter my user/pass/domain credentials, I get the following error message. The supplied credentials could not be validated. Either they are incorrect, or there is a problem with the authentication system. Try again, or contact your help desk or system administrator for help. And here are a couple of entries in the applications log on the WI server: 1.) An error occurred while attempting to make a connection with the SSL Relay: "brcitrix-a.tp.tpbp.com:444". Please make sure that there is an SSL Relay running and that it is listening on a valid port. The name contained in the server certificate that the SSL Relay is configured to must match exactly the name of the server to which the connection was attempted. This message was reported from the XML Service at address "ssl://brcitrix-a.tp.tpbp.com:444 (http: 80)/scripts/wpnbr.dll". This XML Service could not be contacted and will be temporarily removed from the list of active services. [Log ID: 55f0422a] 2.) An error occurred while attempting to make a connection with the S
messages that an ICA client might return when attempting to connect to a MetaFrame server or published application using SSL: Error Message: Troubleshooting SSL Error 4 with Secure Gateway Resolution: Refer to CTX105390 - Troubleshooting SSL Error 4 http://citrixcim.blogspot.com/2012/01/common-ssl-error-messages-and.html with Secure Gateway Error Message: SSL security context is invalid or expired (SSL 15). Resolution: http://www.freelists.org/post/thin/Nfuse-17-and-SSL-https-trouble-no-SSL-relay-or-CSG-required Upgrade the Win32 ICA client to version 6.30.1050 or later. Error Message: Cannot connect to the Citrix MetaFrame server. There is no route from the Citrix SSL Relay to the specified subnet address (SSL error 37). Resolution: Refer to CTX103203 - Error: Cannot connect to the Citrix MetaFrame server. There is no route from the Citrix SSL Relay to the specified error occurred subnet address (SSL error 37). Error Message: SSL Error 37: The proxy could not connect to ;10; (STA server);(sid) port 1494" Cause: This problems seems to occur only when the XenApp server and ICA Client are using different DNS servers Resolution: Enabling XML Service DNS address resolution allows a XenApp server to return the Fully Qualified Domain Name (FQDN) to ICA Clients using the Citrix XML Service Error Message: The Citrix SSL Relay sent a close alert error occurred while (SSL Error 43)" or SSL Error 4. Resolution: Refer to the following Knowledge Center articles: CTX101685 - �The Citrix SSL Relay sent a close alert (SSL Error 43)� or SSL Error 4 CTX116743 - Error: Cannot connect to the Citrix Presentation Server. SSL Error 43 Error Message: The Remote SSL peer sent a bad certificate alert. (SSL Error 49). Resolution: Upgrade the Macintosh ICA client to version 6. 20.142. Error Message: The remote SSL peer sent an unrecognized alert (SSL Error 55)....Error : 132 Reason: The SSL Error 55 is caused by an invalid certificate or a missing root certificate. Resolution: Install an appropriate certificate. Error Message: Security alert: The name on the security certificate does not match the name of the server (SSL error 59). Reason: The ICA Client is attempting to connect to the server using its NetBIOS name, IP address, or a fully-qualified domain name (FQDN) that does not match the subject of the server's certificate. To connect successfully, the ICA Client must connect using the DNS name of the server exactly as it appears on the server certificate. Resolution: In the NFuse scenarios, you must set AddressResolutionType=dns or dns-port in nfuse.conf and enable DNS name resolution on the farm properties panel in the Citrix Management Console. Refer to the following documents for more information about DNS name resolution: Page 65 of the Administrator
Fri, 08 Nov 2002 17:19:31 +0000 I've been working with Citrix NFuse 1.6 and https:// (SSL) connections to our web server with no problems. But I suspect that something has changed in NFuse 1.7 that I'm missing. Server Configuration Windows 2000 Server SP3 Citrix MetaFrame XPe Service Pack 2 (no feature releases) Single server in "farm". Citrix NFuse 1.7 Internet Information Server 5.0 All security hotfixes issued by Microsoft Root CA on certificate is our own organisation installed in browsers. Server Certificate issued and configured for IIs 5.0. IIs & NFuse installed on the same server sharing port 80. SSL port 443. SSL connections only work okay to the Web Server, and we can run web server via https://. NFuseAdmin runs okay via SSL. No need for SSL Relay or CSG as ALL is on the same single server. Citrix NFuse works correctly on this server with no https:// (SSL). the Citrix NFuse login page is displayed via https:// (SSL) correctly, and the padlock is displayed on the browsers. NFuse.conf has the following statements:- SessionField.NFuse_Transport=HTTPS When trying to login, there is a long pause on the following error message is displayed:- ERROR: The MetaFrame server farm cannot process your request at this time. An error occurred while attempting to connect to the MetaFrame server farm. Please make sure that the Citrix XML Service is running on the Metaframe server farm and listening on a valid port. If the Citrix XML service is configured to share ports with the Internet Information Service (IIS), please make sure that the IIS WWW service is running. or ERROR: 403 Error Access Forbidden Just out of curiosity I setup SSL Relay, port 442 and it was kind og working although was complaining about a connection to server:80 now I get the following:- Citrix SSL Relay Version 1.01 Copyright (c)1999-2002 Citrix Systems, Inc. All rights reserved. ******************************************** 08/11/2002 13:59:51: Negotiating with Service Control Manager, please wait...... . 08/11/2002 13:59:51: Using SSL provider S-Channel : CLIENT_SERVER (Build 1360) 08