WSA 7.7 identity - Citrix

[FilipOlsen]

Hi Experts :-)

Using transparent proxy S-160 wccp redirect ASA

We are using identity on our Citrix farm and it works ok with sso and IE , but we are using a program which do requests of some sort to fetch data from internet and it only works if you logon directly on console , if this program is runned as a published application , it will not.

I have checked the AD secuity log and when logged on console on Citrix server and request data in this program , i see the user audit success...how ever ,  with published application , it is a different user - krbtgt and audit failure - meaning i wont get any data fetch in program.

Any thoughts on how to solve this ?

Filip

[tarik.boudjemaa]

Hi,

Could you publish us the acces log entry ?

your story with  krbtgt AD domain account is starnge as krbtgt is  an administrator account

http://windowsitpro.com/security/q-what-krbtgt-account-used-active-directory-ad-environment

Are you using  Authentication Surrogates: IP address in the identity added at your policy ?

[FilipOlsen]

Hi Tarik.

Thanks for taking the time to respond.

I will grep the logs and see & check the AD log Again , it can be my mistake about this account.

Im using the session cookie - surrogate type

Thanks