SSLVPN MHMC for Ubuntu Tutorial - The … and Ubuntu.pdf1 SSLVPN MHMC for Ubuntu 12.04 Tutorial (32...

Post on 30-Apr-2018

236 views 0 download

Transcript of SSLVPN MHMC for Ubuntu Tutorial - The … and Ubuntu.pdf1 SSLVPN MHMC for Ubuntu 12.04 Tutorial (32...

1

SSLVPN MHMC for Ubuntu 12.04 Tutorial (32 bit) –

manual installation for Firefox plugins

March 30, 2013 New Citrix

Install Citrix Receiver

- You can find detailed instructions for Ubuntu at:

https://help.ubuntu.com/community/CitrixICAClientHowTo

https://help.ubuntu.com/community/CitrixICAClientHowTo

- I have used the following info (see next) for Ubuntu 32bit (even if it was for Ubuntu 11.1, it also worked for Ubuntu 12.04)

2

Install Citrix Receiver (cont.) Citrix ICA Client 12.1 on Ubuntu 11.10 32-bit

Download and install the 32-bit version of libmotif 3 and create a symlink:

wget -c http://nl.archive.ubuntu.com/ubuntu/pool/multiverse/o/openmotif/libmotif3_2.2.3-4_i386.deb dpkg -i libmotif*i386.deb ln -s /usr/lib/libXm.so.3 /usr/lib/libXm.so.4Download the Citrix Receiver 12.1 .deb files for 'Receiver for Linux 12.1' and the 'USB Support Package' from:

http://www.citrix.com/English/ss/downloads/details.asp?downloadId=2323812&productId=1689163

Install the .deb files with the Ubuntu Software Manager.

Install or update the Adobe Flash Player plugin and update cURL for HDX Flash redirection.

sudo apt-get install flashplugin-installer sudo apt-get install curlRun hdxcheck.sh, which was installed with the Citrix Receiver:

/opt/Citrix/ICAClient/util/hdxcheck.sh

Look back through the messages displayed to check that it found libjpeg.so, as it might fail to do so despite it being installed. If it failed to find it then you can edit /opt/Citrix/ICAClient/util/hdxcheck.sh and change

Lib=find *libjpeg.so*

to

Lib=find / -name *libjpeg.so*

From: https://help.ubuntu.com/community/CitrixICAClientHowTo 3

Install Citrix Receiver (cont.)

Configuring Firefox

Attempt to access your Citrix site. If Firefox prompts you to open a .ica file, choose to open it with /opt/Citrix/ICAClient/wfica.sh, and tell Firefox to remember that choice.

You might see the following error when accessing remote sessions:

Citrix Receiver SSL error Contact your help desk with the following information: You have not chosen to trust"/C=US/ST=/L=/O=Equifax/OU=Equifax Secure Certificate Authority/CN=", the issuer of the server's security certificate ((SSL error 61). If you see the above error, make Firefox's certificates accessible to Citrix using the following:

sudo ln -s /usr/share/ca-certificates/mozilla/* /opt/Citrix/ICAClient/keystore/cacerts

From: https://help.ubuntu.com/community/CitrixICAClientHowTo

4

Install Citrix Receiver (cont.)

- Can be downloaded from the Citrix site:

http://www.citrix.com/downloads/citrix-receiver.html

http://www.citrix.com/downloads/citrix-receiver.html

- Receiver for Linux is found here:

http://www.citrix.com/downloads/citrix-receiver/receivers-by-platform/receiver-for-linux-121.html

http://www.citrix.com/downloads/citrix-receiver/receivers-by-platform/receiver-for-linux-121.html

- Make sure you download the .deb packages (see next images) manually:

5

6

7

8

Manual Installation of the Firefox/Mozilla Plugins

If the automatic download and installation of the plugins for Firefox in Ubuntu fails, you can follow the next description to install them.

9

You can download the F5 plugin from the MHMC Website Help link

(see the next images). However, you’ll need also the “f5 sam inspection host plugin” – both are available here (please

include a link to the compressed files: f5sam.tar.gz and sslvpn.tar.gz)

10

11

12

13

14

15

Use the archived files:

f5sam.tar.gz

sslvpn.tar.gz

16

Firefox/Mozilla zzzzzzz.default directory

1. Find your “default” directory for Firefox, looking under:

Help => Troubleshooting Information =>

Application Basics => Profile Directory - click on Open Directory (see next images)

17

18

19

20

“extensions” directory 2. cd /home/username/desktop (or wherever you downloaded the f5sam.tar.gz and sslvpn.tgz files)

Then:

tar -xzvf f5sam.tar.gz -C ~/.mozilla/firefox/zzzzz.default/extensions

And then:

tar -xzvf SSLVpn.tgz -C ~/.mozilla/firefox/zzzzzz.default/extensions

2a. Make the “extensions” directory if it doesn't already exists:

mkdir -p /home/.mozilla/firefox/zzzzzzzzz.default/extensions

(N.B.: please replace “zzzzzzzz.default” directory with the one you’ve found in step 1),

then untar as above

3. Don’t forget to put also the “f5 sam” folder in “extensions” (see below).

N.B.: in Ubuntu gnome: you can extract the files by right click-ing on the folder and

choosing form the drop-down menu : “extract” option.

21

22

23

24

25

26

You should install first “f5 sam inspection host plugin” from the first folder contained in

“extensions”

27

28

29

30

31

32

33

34

35

36

37

38

Restart your browser,

then install F5 Network Access plugin, contained in the second folder from “extensions” directory, extracted from “sslvpn”

Follow the same steps as above, described for the f5 sam inspection host plugin.

39

40

41

42

43

44

If this warning appears here, it means that you have to enable F5 Network Access plugin from the extension tab (please see the next images).

45

You will have to Enable the F5 Network Access plugin – see the

next images.

46

47

48

49

Don’t forget to restart your browser.

50

51

After restarting your browser, you’ll see your enabled plugins (next

images)

52

53

54

Now you can go to https://sslvpn.metrohealth.org and connect to Metro server

(please see next images).

55

56

57

58

59

60

61

62

63

64

Please open another tab or window (it is important to keep al the windows from the previous slide open! – they represent your connection to the Metro sslvpn),

and go to the following address (type in

your browser’s address bar):

https://portal

65

66

67

68

69

70

71

Ignore this warning

and click OK:

72