{"id":3746,"date":"2017-09-06T14:00:44","date_gmt":"2017-09-06T10:00:44","guid":{"rendered":"https:\/\/rakhesh.com\/?p=3746"},"modified":"2017-09-06T14:00:44","modified_gmt":"2017-09-06T10:00:44","slug":"the-citrix-servers-do-not-trust-the-server-this-message-was-reported-from-the-xml-service-at-address","status":"publish","type":"post","link":"https:\/\/rakhesh.com\/citrix\/the-citrix-servers-do-not-trust-the-server-this-message-was-reported-from-the-xml-service-at-address\/","title":{"rendered":"The Citrix servers do not trust the server. This message was reported from the XML Service at address &#8230;"},"content":{"rendered":"<p>If you are able to login to your Citrix Storefront and get a list of application, but when launching something you get an error &#8211;<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-3747\" src=\"https:\/\/i0.wp.com\/rakhesh.com\/wp-content\/uploads\/2017\/09\/XenApp-Error.png?resize=393%2C186&#038;ssl=1\" alt=\"\" width=\"393\" height=\"186\" srcset=\"https:\/\/i0.wp.com\/rakhesh.com\/wp-content\/uploads\/2017\/09\/XenApp-Error.png?w=393&amp;ssl=1 393w, https:\/\/i0.wp.com\/rakhesh.com\/wp-content\/uploads\/2017\/09\/XenApp-Error.png?resize=300%2C142&amp;ssl=1 300w, https:\/\/i0.wp.com\/rakhesh.com\/wp-content\/uploads\/2017\/09\/XenApp-Error.png?resize=150%2C71&amp;ssl=1 150w\" sizes=\"(max-width: 393px) 100vw, 393px\" data-recalc-dims=\"1\" \/><\/p>\n<p>And checking the &#8220;Citrix Delivery Services&#8221; logs on your Storefront gives errors such as these &#8211;<\/p>\n<ul>\n<li><code>The Citrix servers do not trust the server. This message was reported from the XML Service at address\u00a0http:\/\/xxx\/scripts\/wpnbr.dll [NFuseProtocol.TRequestAddress]. <\/code><\/li>\n<li><code>Failed to launch the resource 'xxxx' using the Citrix XML Service at address 'http:\/\/xxx\/scripts\/wpnbr.dll'. The XML service returned error: 'not-trusted'.<\/code><\/li>\n<\/ul>\n<p>You have come to the right place. :)<\/p>\n<p>This is because you probably have &#8220;Domain pass-through&#8221; authentication enabled on your Store <span style=\"text-decoration: underline;\">and\/ or<\/span> the Receiver for Websites (note the latter: easy to miss out). When this is enabled and users visit the Storefront page, they don&#8217;t get the usual username password prompt. Instead they get an option to login with the Windows credentials.<\/p>\n<p>The problem with this is that these Windows credentials are passed on to the Storefront server. The Storefront server is happy, gives the users a list of apps and desktops assigned to them, etc. But when the user clicks on something, it is the Citrix Receiver that comes into play and needs to pass on the credentials to the concerned XenApp or XenDesktop server. <a href=\"https:\/\/support.citrix.com\/article\/CTX133982?_ga=2.211507605.1253999529.1504442015-308490868.1415532733#step-3-new-rec\">Citrix Receiver needs to be explicitly installed with the ability to do Single Sign-On<\/a> (i.e. pass on Windows credentials) and if that&#8217;s not the case users will not be able to launch any app or desktop. (The command line to do such an install is: <code>CitrixReceiver.exe \/includeSSON<\/code>). Once this is done an additional component called <code>ssonsvr.exe<\/code> will be present on the user machine, and that facilitates SSO.<\/p>\n<p>For more details on Citrix Receiver and SSO check out <a href=\"https:\/\/support.citrix.com\/article\/CTX133982\">this link<\/a>. And for an official explanation of what I wrote above, check out this <a href=\"https:\/\/www.citrix.com\/blogs\/2013\/04\/01\/explaining-citrix-pass-through-authentication\/\">blog post<\/a>.<\/p>\n<p>Lastly, if you don&#8217;t want to do any of this, <a href=\"https:\/\/support.citrix.com\/article\/CTX132461\">there is a work around<\/a>. :)<\/p>\n","protected":false},"excerpt":{"rendered":"<p>If you are able to login to your Citrix Storefront and get a list of application, but when launching something you get an error &#8211; And checking the &#8220;Citrix Delivery Services&#8221; logs on your Storefront gives errors such as these &#8211; The Citrix servers do not trust the server. This message was reported from the &hellip; <a href=\"https:\/\/rakhesh.com\/citrix\/the-citrix-servers-do-not-trust-the-server-this-message-was-reported-from-the-xml-service-at-address\/\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">The Citrix servers do not trust the server. This message was reported from the XML Service at address &#8230;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","enabled":false}}},"categories":[657],"tags":[656],"jetpack_publicize_connections":[],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/rakhesh.com\/wp-json\/wp\/v2\/posts\/3746"}],"collection":[{"href":"https:\/\/rakhesh.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/rakhesh.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/rakhesh.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/rakhesh.com\/wp-json\/wp\/v2\/comments?post=3746"}],"version-history":[{"count":0,"href":"https:\/\/rakhesh.com\/wp-json\/wp\/v2\/posts\/3746\/revisions"}],"wp:attachment":[{"href":"https:\/\/rakhesh.com\/wp-json\/wp\/v2\/media?parent=3746"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/rakhesh.com\/wp-json\/wp\/v2\/categories?post=3746"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/rakhesh.com\/wp-json\/wp\/v2\/tags?post=3746"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}