NFuse161.book Page Monday, October PM …dabcc.com/nfuse/Docs/SupplementaryGuide161.pdf•The Citrix...

NFuse161.book Monday, October 22, 2001 5:47 PM

Supplementary Guide

Citrix NFuseVersion 1.61Citrix Systems, Inc.


Information in this document is subject to change without notice. Companies, names, and data used in

examples herein are fictitious unless otherwise noted. No part of this document may be reproduced or transmitted in any form or by any means, electronic or mechanical, for any purpose, without the express

written permission of Citrix Systems, Inc.

© 2001 Citrix Systems, Inc. All rights reserved.

Citrix and ICA are registered trademarks, and MetaFrame, MetaFrame XP, Citrix Extranet, SecureICA, NFuse, VideoFrame, Program Neighborhood, Citrix Solutions Network, are trademarks of Citrix Systems, Inc. in the United States and other countries.

UNIX is a registered trademark of The Open Group in the United States and other countries.

Linux is a registered trademark of Linus Torvalds.

AIX and OS/2 are registered trademarks of International Business Machines Corporation.

HP-UX is a registered trademark of Hewlett-Packard Company.

Sun, Java, Solaris, SPARC, JavaServer Pages and iPlanet Web Server are registered trademarks or trademarks of Sun Microsystems Corporation in the United States and/or other countries.

Macintosh and Mac are registered trademarks of Apple Computer, Inc.

Microsoft, Windows, Windows NT, MS-DOS, and ActiveX are registered trademarks of Microsoft Corporation.

Netscape Navigator is a registered trademark of Netscape Communications Corporation.

Novell Directory Services and NDS are registered trademarks of Novell, Inc. in the United States and

other countries. Novell Client is a trademark of Novell, Inc.

Apache is either a registered trademark or trademark of the Apache Software Foundation in the United

States and/or other countries.

RSA Encryption © 1996-1997 RSA Security Inc., All Rights Reserved.

All other trademarks and registered trademarks are the property of their respective owners.

Contents 3


Contents

Chapter 1 Introduction. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5

How to Use This Guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6Documentation Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7

Getting More Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8Using PDF Documentation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

Reader Comments . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

Citrix on the World Wide Web . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10

What’s New in NFuse 1.61 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11

Chapter 2 Installing NFuse 1.61 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13

System Requirements. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14

Installation Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14What Is Installed Where? . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14Required Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15Upgrading an Existing NFuse Installation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15

Installing NFuse on Microsoft IIS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16

Installing NFuse on iPlanet, Tomcat, and Apache Web Servers . . . . . . . . . . . . . . 17

After Installing NFuse . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18

Troubleshooting NFuse Installation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19Using the Repair Option. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19

Uninstalling NFuse 1.61. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20Uninstalling NFuse 1.61 on Microsoft IIS. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20Uninstalling NFuse 1.61 on iPlanet, Tomcat, and Apache . . . . . . . . . . . . . . . . 21

Reinstalling NFuse 1.61 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21

Chapter 3 Configuring and Using NFuse 1.61 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23

What Configuration Is Required? . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24Configuring NFuse to Support Citrix Secure Gateway. . . . . . . . . . . . . . . . . . . 24

About NFuse, Citrix Secure Gateway, and Ticketing . . . . . . . . . . . . . . . 24Using the NFuse.conf File to Configure Secure Gateway Support . . . . . 25Using Scripts to Configure Secure Gateway Support . . . . . . . . . . . . . . . 27

Making NFuse Available to Your Users . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28

CHAPTER 1

Introduction

OverviewWelcome to Citrix NFuse Version 1.61.

This chapter introduces you to the documentation and to NFuse 1.61. Topics include:

• How to use this guide

• Getting more information

• What’s new in NFuse 1.61


6 NFuse Supplementary Guide

How to Use This GuideThis guide is for Citrix server administrators and Web masters who are responsible

for installing, configuring, and maintaining NFuse. The guide describes what’s new

in NFuse 1.61, how to install it, and how to configure and use the new features.

This guide assumes knowledge of Citrix MetaFrame XP for Windows and Citrix

MetaFrame for UNIX Operating Systems.

Use this guide in conjunction with the Citrix NFuse Administrator’s Guide and the

Configuring NFuse PDF file.

To find out: See

About the conventions used throughout the

documentation.“Documentation Conventions” on page 7

Where to find further information about NFuse, MetaFrame, and other Citrix products.

“Getting More Information” on page 8

About the new features and enhancements

included in NFuse 1.61.“What’s New in NFuse 1.61” on page 11

How to install NFuse 1.61. “Installing NFuse 1.61” on page 13

How to configure the new features. “Configuring and Using NFuse 1.61” on page

23


Chapter 1 Introduction 7

Documentation ConventionsThe following conventional terms, text formats, and symbols are used throughout the documentation:

Convention Meaning

Boldface Commands, names of interface items such as text boxes and option

buttons, and user input.

Italics Placeholders for information or parameters that you provide. For example, filename in a procedure means you type the actual name of a file. Italics

also are used for new terms and the titles of books.

UPPERCASE Keyboard keys, such as CTRL for the Control key and F2 for the function

key that is labeled F2.

Monospace Text displayed at a command prompt or in a text file.

%SystemRoot% The Windows system directory, which can be WTSRV, WINNT, WINDOWS, or other name specified when Windows is installed.

{ braces } A series of items, one of which is required in command statements. For example, { yes | no } means you must type yes or no. Do not type the

braces themselves.

[ brackets ] Optional items in command statements. For example, [/ping] means that you can type /ping with the command. Do not type the brackets

themselves.

| (vertical bar) A separator between items in braces or brackets in command statements. For example, { /hold | /release | /delete } means you type /hold or/release or /delete.

… (ellipsis) You can repeat the previous item or items in command statements. For example, /route:devicename[,…] means you can type additional devicenames separated by commas.

� Step-by-step procedural instructions

� Indicates a list of related information, not procedural steps.



Getting More InformationThe following Citrix documentation is available:

• The Citrix NFuse Supplementary Guide (this document) explains how to install NFuse Version 1.61, and configure and use the new features.

• The Citrix NFuse Administrator’s Guide introduces Citrix NFuse and explains

how to configure your NFuse Web server, ICA Client devices, NFuse security, and the ICA Program Neighborhood Agent. This guide is on the NFuse CD-ROM and on the Citrix Web site (http://www.citrix.com/support). Select Product Documentation.

• The Configuring NFuse PDF file explains how to customize NFuse. This file is

on the NFuse CD-ROM and on the Citrix Web site

(http://www.citrix.com/support/). Select Product Documentation.

• The NFuse Readme file contains last minute updates, corrections to the

documentation, and a list of known problems. This file is included in the NFuse

1.61 Web download and is on the Citrix Web site.

• The Citrix MetaFrame XP for Windows, Version 1.0, Feature Release 1

Administrator’s Guide explains how to install and configure MetaFrame XP on

Windows servers. Included in this documentation is information about publishing applications, configuring the Citrix XML Service, and configuring

the Citrix SSL Relay. The MetaFrame XP Administrator’s Guide is on the

MetaFrame XP CD-ROM and on the Citrix Web site.

• The Feature Release 1 and Service Pack 3 Installation Guide for Citrix

MetaFrame for Windows Version 1.8 tells administrators how to install and

configure Service Pack 3 and Feature Release 1 on MetaFrame 1.8 for Windows

servers. Included in this documentation is information about configuring the

Citrix XML Service and the Citrix SSL Relay. The Installation Guide is

available on the Feature Release 1/Service Pack 3 CD-ROM and on the Citrix

download site.

• The Citrix MetaFrame for UNIX Operating Systems, Feature Release 1 for

Version 1.1, Administrator’s Guide tells administrators how to install and

configure MetaFrame for UNIX. Included in this documentation is information

about publishing applications and how to configure the XML Service for UNIX. The MetaFrame for UNIX Administrator’s Guide is available on the MetaFrame

for UNIX, Feature Release 1 CD-ROM and on the Citrix Web site.

• The Citrix SSL Relay for UNIX Administrator’s Guide is for system

administrators who are responsible for installing, configuring, and maintaining

Citrix SSL Relay on MetaFrame for UNIX Operating Systems servers. This

guide is available on the MetaFrame for UNIX, Feature Release 1 CD-ROM

and on the Citrix Web site.



• The Citrix NFuse Enterprise Administrator’s Guide Version 1.0 tells administrators how to install and configure NFuse Enterprise. This guide is on

the NFuse Enterprise CD-ROM and on the Citrix Web site.

• The Citrix Secure Gateway Administrator’s Guide Version 1.0 tells administrators how to install and configure Citrix Secure Gateway. This guide is

on the Citrix Secure Gateway CD-ROM and on the Citrix Web site.

Using PDF DocumentationTo access the Citrix documentation that is provided in PDF files, use Adobe

Acrobat Reader 4 or later. Acrobat Reader lets you view, search, and print the

documentation. You can download Acrobat Reader for free from Adobe System’s

Web site (http://www.adobe.com). The self-extracting file includes installation

instructions.

Reader CommentsWe strive to provide accurate, clear, complete, and usable documentation for Citrix

products. If you have any comments, corrections, or suggestions for improving our documentation, we want to hear from you. You can send e-mail to the

documentation authors at:

[email protected]

Please include the product name and version number, and the title of the document in your message.



Citrix on the World Wide WebThe Citrix Web site is at http://www.citrix.com. The site offers a variety of information and services for Citrix customers and users.

From the Citrix home page, you can access Citrix technical support services and

other information designed to assist MetaFrame XP administrators.

The following are some of the resources available on the Citrix Web site:

Citrix Product Documentation Library. The library, which contains the latest documentation for all Citrix products, is at http://www.citrix.com/support (select Product Documentation). You can download updated editions of the documentation

that ships with Citrix products, as well as supplemental documentation that is available only on the Web site.

Citrix ICA Clients. Downloadable Citrix ICA Clients for all supported platforms are

available from http://www.citrix.com/download.

Support options. Program information about Citrix Preferred Support Services

options is available from the Support area of the Citrix Web site at http://www.citrix.com/support.

Software downloads. An FTP server provides access to the latest service packs, hotfixes, utilities, and product literature for download.

Online knowledgebase. The online Solution Knowledge Base contains an

extensive collection of application notes, technical articles, troubleshooting tips, and white papers.

Discussion forums. The interactive online Solution Forums provide outlets for discussion of technical issues with other Citrix users.

FAQs. Frequently Asked Questions (FAQ) pages provide answers to common

technical and troubleshooting questions.

Education. Information about programs and courseware for Citrix training and

certifications is available from http://www.citrix.com/training/.

Contact information. The Web site provides contact information for Citrix offices, including the worldwide headquarters and headquarters for European, Asia Pacific, and Japan operations.

Developer network. The Citrix Developer Network (CDN) is at http://www.citrix.com/cdn. This new, open-enrollment membership program

provides access to developer toolkits, technical information, and test programs for software and hardware vendors, system integrators, ICA licensees, and corporate IT

developers who incorporate Citrix computing solutions into their products.



What’s New in NFuse 1.61NFuse 1.61 offers the following new features:

• Citrix Secure Gateway support—Citrix Secure Gateway provides SSL

security for remote ICA users across the Internet. For information about how

to configure NFuse to support Citrix Secure Gateway, see “Configuring NFuse

to Support Citrix Secure Gateway” on page 24.

• Citrix NFuse Enterprise support—Citrix NFuse Enterprise extends the

application management and deployment features of NFuse to allow user access

to applications provided by multiple MetaFrame farms. For information about how to configure NFuse to support Citrix NFuse Enterprise, see the NFuse

Enterprise Administrator’s Guide.

• Citrix portal product support—With Citrix’s new corporate portal product you can aggregate, personalize, and serve applications, information, resources, and tools to users. Portal users get access to everything—in one place. For information about how to configure NFuse to support the Citrix portal product, see the portal product’s Administrator’s Guide.

• New Windows installer—on the Microsoft Windows platform, the Windows installer replaces the Install Shield installer. The Windows installer also

provides easy-to-use Repair and Remove options. For more information about how to install NFuse 1.61 and use these options, see “Installing NFuse 1.61” on

page 13.

Note For a full list of all the features available in NFuse, see the Citrix NFuse 1.6

Administrator’s Guide.



C H A P T E R 2

Installing NFuse 1.61

OverviewThis chapter describes how to install NFuse 1.61 on your Web server. Topics

covered in this chapter include:

• System requirements

• Installation overview

• Installing NFuse 1.61 on Microsoft IIS

• Installing NFuse 1.61 on iPlanet, Tomcat and Apache Web servers

• Troubleshooting NFuse installation

• Uninstalling NFuse 1.61

• Reinstalling NFuse 1.61



System RequirementsThe system requirements, Web server requirements, and ICA Client device

requirements for NFuse 1.61 are the same as for NFuse 1.6. For more information

about these requirements, see Chapter 2 of the NFuse Administrator’s Guide.

Installation Overview NFuse 1.61 is available for download from the Citrix Web site. Installation

programs for the following Web servers are available:

• Microsoft Internet Information Server (IIS)

• iPlanet, Tomcat, and Apache Web Server for UNIX platforms

What Is Installed Where?When you install NFuse 1.61, files are installed in two main locations—the

software directory and the Web server’s document root:

• The software directory. For example, on Windows this is typically:C:\Program Files\Citrix\NFuse; on UNIX, this may be: /usr/local/tomcat/webapps/Citrix/WEB-INFNFuse software and configuration components are stored here, including:

• NFuse.conf file

• NFuse.properties file

• NFuse Java objects (.jar files)

The NFuse files in this location are global. Therefore, if you make changes to

NFuse.conf, these settings are applied to all Web pages served by NFuse.

• The Web server’s document root. This depends upon where you installed your Web server—for example, on Windows this is typically: C:\Inetpub\wwwroot\Citrix; on UNIX, this may be: /usr/local/tomcat/webapps/CitrixNFuse presentation and layout components are stored in this location, including:

• Scripts (.asp, .jsp and .htm files)

• ICA templates (.ica files)

NFuse files in this location can be tailored to specific Web pages. For example, to run two different NFuse sites on one Web server, you can create two

directories under the Web server’s document root, each with its own custom

scripts and ICA templates.

Chapter 2 Installing NFuse 1.61 15


Required InformationDuring the installation of NFuse, you are prompted for information that includes:

• Citrix server identity. You must identify one or more MetaFrame servers in

your farm that will act as contact points between the server farm and your Web

server. You can specify Windows NT server names, IP addresses, or fully-qualified DNS names. If your server farm is composed of MetaFrame for Windows servers, you can specify the name of any server in the farm. If your server farm is composed of MetaFrame for UNIX Operating Systems servers, you must specify the names of all servers running the Citrix XML Service for UNIX Operating Systems.

• TCP/IP port. You must specify the TCP/IP port on which the specified servers

are running the Citrix XML Service. If you do not know this port number, you

can determine it by checking a MetaFrame server’s port information—for more

information about how to do this, see Chapter 3 of the NFuse Administrator’s

Guide.

• ICA Clients. You are prompted for an ICA Client CD or CD image. Setup

copies the contents of the CD’s ICAWEB directory to a directory called

/Citrix/ICAWEB that it creates off the Web server’s document root. All Web

sites created by the installation process assume that the Web server contains the

ICA Client files in this directory structure. If you do not want to copy the ICA

Clients to the Web server during NFuse installation, you can copy them to the

server later. Make sure you create the required directory structure; for example, in an English installation: <webroot>/Citrix/ICAWEB/en/<icaclientplatform>.

Upgrading an Existing NFuse InstallationThis section provides information about upgrading to NFuse 1.61 from a previous

version of NFuse.

During NFuse installation on IIS, if the installer detects a previous version of NFuse, it backs up the NFuse.conf, NFuse.properties, and

NFuseErrorsResource.properties files in a backup directory. You are prompted for the location of this backup directory during the installation process—for example, on IIS, this might be: C:\Program Files\Citrix\NFuse\Backup.

On UNIX, files are given a .bak extension—for example, NFuse.conf becomes

NFuse.conf.bak. Files are backed up in the same directory that the new files are

installed in. For example, in a typical Tomcat installation, upgrading results in the

following files in /usr/local/tomcat/webapps/Citrix/WEB-INF/classes:

• NFuse.conf• NFuse.conf.bak• NFuse.properties• NFuse.properties.bak



The NFuse Java objects (.jar files), scripts, and ICA files are not backed up and

remain in the same location.

After you upgrade to NFuse 1.61, your previous NFuse site continues to work as normal.

To apply any customizations from your old site to the new site, edit the new

NFuse.conf file to include your custom settings, or replace the new NFuse.conf file

with the backup, and then restart the Web server.

Installing NFuse on Microsoft IIS

Important During the installation of NFuse on Microsoft IIS, the installer stops

and restarts your Web server and its associated services. This restart causes a

disruption of service to connected users for the duration of the installation.

� To install NFuse 1.61 on Microsoft IIS

1. Make sure you are logged on as an administrator.

2. Copy the NFuse161Setup-IIS.exe file from the download site to your Web

server. Double-click the file.

3. The Installation wizard guides you through the installation process.



Installing NFuse on iPlanet, Tomcat, and Apache Web ServersNFuse requires a servlet engine to work on UNIX platforms. The iPlanet and

Tomcat Web servers include a built-in servlet engine. However, the Apache Web

server requires an additional servlet engine to support NFuse such as Tomcat (note

that Tomcat can be used as a stand-alone Web server or as a servlet engine).

During NFuse installation, you are prompted for locations in which to place the

NFuse files. See the table in Chapter 3 of the NFuse Administrator’s Guide for information about where to install files.

� To install NFuse 1.61 on iPlanet, Tomcat, and Apache Web Servers

1. Log on as root at the server on which you want to install NFuse.

2. Copy the NFuse161Setup-UNIX.tar.gz file from the Citrix download site to an

install directory on your Web server.

3. Unzip the NFuse161Setup-UNIX.tar.gz file. Unzipping the file produces

NFuse161Setup-UNIX.tar, an archive containing the setup files for NFuse.

4. To extract the archived files from NFuse161Setup-UNIX.tar into the install directory, type tar xvf NFuse161Setup-UNIX.tar and press ENTER.

5. Stop your Web server.

6. Type ./setupNFuse to begin the installation.

7. Follow the instructions on the screen to install the NFuse files in the appropriate

directories. See the table on page 28 of the NFuse Administrator’s Guide for information about where to place NFuse files.

8. When installation is complete, you may need to configure your Web server, depending upon which Web server you are using:

• For Apache Web server running Tomcat, no further configuration is required. Stop and restart both Apache and Tomcat.

• For Apache Web server running JServ/GNU JSP, see page 32 of the NFuse

Administrator’s Guide for information about how to configure your Web

server.

• For iPlanet Web server, see page 31 of the NFuse Administrator’s Guide for information about how to configure your Web server.

Note Citrix recommends you retain the contents of the directory the .tar file is extracted into in case you later want to uninstall NFuse—see “Uninstalling NFuse

1.61” on page 20 for more information.



After Installing NFuseAfter you install NFuse 1.61 and configure your Web server if necessary, you may

need to configure NFuse depending upon what other components are in your MetaFrame installation.

• For information about how to configure NFuse for Citrix Secure Gateway, see

“Configuring NFuse to Support Citrix Secure Gateway” on page 24.

• For information about how to configure NFuse for NFuse Enterprise, see the

NFuse Enterprise Administrator’s Guide.

• For information about how to configure other NFuse properties using

NFuse.conf, ICA Client devices, NFuse security, and the ICA Program

Neighborhood Agent, see the NFuse Administrator’s Guide. To extend and

customize NFuse functionality, see the Customizing NFuse PDF.

After you have configured NFuse, inform your users of the URL for the NFuse

Login page—for more information, see “Making NFuse Available to Your Users”

on page 28.



Troubleshooting NFuse InstallationThis section explains how to use the Repair option that is available on the Windows platform. Also explained is what to do if the Repair option is unavailable or does not fix the problem.

Using the Repair OptionIf you experience problems with your NFuse 1.61 installation, try using the Repair

option to fix the problem. This option is available only on the Windows platform.

The Repair option replaces the NFuse Java objects (.jar files). It does not replace the

scripts (.asp and .htm files), ICA templates (.ica files), or the NFuse.conf file.

� To run the Repair option

1. Double-click the NFuse161Setup-IIS.exe file. The Citrix NFuse 1.61 Setup

dialog box is displayed.

2. Choose Repair and click Next.

3. Follow the instructions on-screen.

Note If the Repair option does not fix the problem, or this option is unavailable

(on UNIX platforms), try uninstalling and then reinstalling NFuse 1.61. For information, see “Uninstalling NFuse 1.61” on page 20 and “Reinstalling NFuse

1.61” on page 21. You must reapply any changes you made in the NFuse.conf file

after reinstalling NFuse.



Uninstalling NFuse 1.61This section describes how to remove NFuse 1.61 from your installation. How

you uninstall NFuse 1.61 depends upon the Web server you are using.

If you upgraded to NFuse 1.61, your previous NFuse installation is not automatically restored when you remove NFuse 1.61; you must reinstall the

previous version. However, because reinstallation overwrites the scripts, you may

lose any customizations you made to your NFuse site—Citrix recommend you

backup your script files before reinstalling your previous version of NFuse, so that you can later reapply your customizations.

Important During the uninstallation of NFuse on Microsoft IIS, the installer stops

and restarts your Web server and its associated services. This restart causes a

disruption of service to connected users for the duration of the installation.

Uninstalling NFuse 1.61 on Microsoft IIS� To uninstall NFuse 1.61 on Microsoft IIS

1. Double-click the NFuse161Setup-IIS.exe file. The following dialog box is

displayed:



2. Choose Remove and click Next.

3. Follow the instructions on-screen.

Uninstalling NFuse 1.61 on iPlanet, Tomcat, and Apache

On UNIX, you use the Remove option to uninstall NFuse. You must run this

command from within the same directory as the original install, because it relies

upon a file in this directory that lists the files the NFuse Setup program originally

installed.

For example, if you extracted the NFuse161Setup-UNIX.tar into the directory: /usr/local/NFuse161, make sure you uninstall from the /usr/local/NFuse161

directory.

� To uninstall NFuse 1.61 on iPlanet Web Server and Apache Server

1. Log on as root at the server from which you want to remove NFuse.

2. Change to the directory from which you originally installed NFuse 1.61.

3. Stop the Web server.

4. Type ./setupNFuse.

5. Select the remove option.

6. Confirm you want to remove NFuse.

Reinstalling NFuse 1.61If you removed NFuse 1.61 but want to reinstall it, follow the instructions for installing NFuse 1.61.

After you reinstall NFuse 1.61, you can reapply any customizations you previously

made by editing the new NFuse.conf file to include your custom settings or by

replacing the new NFuse.conf file with the backed-up file, and then restarting the

Web server. Note that a backup file will only exist if NFuse was upgraded from

NFuse 1.6 to NFuse 1.61.


C H A P T E R 3

Configuring and Using NFuse 1.61

OverviewThis chapter describes how to configure your NFuse Web server to take advantage

of the new features in NFuse 1.61. Topics in this chapter include:

• Configuring NFuse to support Citrix Secure Gateway

• Making NFuse available to users



What Configuration Is Required?When you install NFuse 1.61, additional configuration is required for some new

features. This section describes the NFuse configuration required to support Citrix

Secure Gateway.

Note For information about how to configure NFuse to support Citrix NFuse

Enterprise, see the NFuse Enterprise Administrator’s Guide.

Configuring NFuse to Support Citrix Secure Gateway

If you are using Citrix Secure Gateway in your MetaFrame installation to provide

a secure Internet gateway between MetaFrame and ICA Client devices, you need

to configure NFuse to support this.

This section explains why you must configure NFuse to work with Citrix Secure

Gateway’s ticketing mechanism, and shows how to configure this using the

NFuse.conf file, or the launch.asp and launch.jsp Web scripts.

About NFuse, Citrix Secure Gateway, and TicketingNFuse performs user authentication in a MetaFrame farm to determine which

users are granted access to the farm. If you are using Citrix Secure Gateway in

your MetaFrame installation, you must configure NFuse to notify Citrix Secure

Gateway that a user is already authenticated on the NFuse Web server.

Ticketing is the mechanism used to notify Citrix Secure Gateway that a user is

already authenticated and should be granted access to the farm. Tickets are

generated and verified by the Citrix Secure Gateway Secure Ticket Authority

(STA) server. When a user selects an application in NFuse, NFuse sends the

address of the MetaFrame server on which the application resides to the STA in

return for a ticket. This ticket is later exchanged by the Citrix Secure Gateway for the address of the MetaFrame server. The use of tickets enhances security, because the internal network addresses of MetaFrame servers are hidden.

For more information about Citrix Secure Gateway, see the Citrix Secure

Gateway Administrator’s Guide.

Chapter 3 Configuring and Using NFuse 1.61 25


Using the NFuse.conf File to Configure Secure Gateway SupportYou can configure NFuse to support Citrix Secure Gateway by making changes to

the NFuse.conf file.

Note The settings in NFuse.conf are global, because all Web pages served by

NFuse draw from this file’s values. If you want to configure individual Web pages, use the launch.asp and launch.jsp scripts to configure NFuse—see “Using Scripts

to Configure Secure Gateway Support” on page 27.

� To configure NFuse to support Citrix Secure Gateway using NFuse.conf

1. Open the NFuse.conf file.

2. Include the following lines in NFuse.conf:

SessionField.NFuse_CSG_STA_URL1=URL

SessionField.NFuse_CSG_Server=GatewayServerName

SessionField.NFuse_CSG_ServerPort=GatewayServerPort

SessionField.NFuse_CSG_Enable=On

SessionField.NFuse_Transport=https

The following table explains what each session field does:

Session Field Description

NFuse_CSG_STA_URL1

NFuse_CSG_STA_URL2

NFuse_CSG_STA_URL3

and so on, up to:

NFuse_CSG_STA_URL256

Specifies the address of up to 256 Ticket Authorities

that NFuse can use. Each URL must begin with “http://” (if communication with the Ticket Authority does not need to be encrypted) or “https://” (if communication

with the Ticket Authority needs to be encrypted). If “https://” is used, the server name in the URL must match the name of the server on the certificate.

NFuse_CSG_Server Specifies the name of the Gateway server that ICA

Clients must use. This name must match the name of the server on the certificate.

NFuse_CSG_ServerPort Specifies the port number on the Gateway server that ICA Clients must use. The default port number is 443.

NFuse_CSG_Enable Enables Citrix Secure Gateway support. This must be

set to “On” or the other Secure Gateway configuration

settings are ignored.



3. Restart the Web server on which NFuse is running to apply the changes.

Example

You want to specify a gateway server called “csg1.citrix.com”, on which ICA

Clients use port 8888, using the following two ticket authority addresses:

• http://server1.citrix.com/scripts/CtxSta.dll

• https://server2.citrix.com/scripts/CtxSta.dll

Include the following lines in NFuse.conf: SessionField.NFuse_CSG_STA_URL1=http://server1.citrix.com/scripts/CtxSta.dll

SessionField.NFuse_CSG_STA_URL2=https://server2.citrix.com/scripts/CtxSta.dll

SessionField.NFuse_CSG_Server=csg1.citrix.com

SessionField.NFuse_CSG_ServerPort=8888

SessionField.NFuse_CSG_Enable=On

SessionField.NFuse_Transport=https

To apply the changes, restart the Web server.

Session Field Description

NFuse_Transport This field is optional, but Citrix recommends you use

this to secure communication between NFuse and the

XML Service.

If “https” is used, the name in the existing

NFuse_CitrixServer session field must match the name

of the server on the server’s certificate.

Note that setting NFuse_Transport to “https” does not require the NFuse_RelayServer or NFuse_RelayServerPort session fields to be set (as is

the case when NFuse_Transport is set to “ssl”).

Chapter 3 Configuring and Using NFuse 1.61 27


Using Scripts to Configure Secure Gateway SupportScripts allow you to configure NFuse on a per-page basis. For example, if you are

running two different NFuse sites on one Web server, you can use scripts to apply

changes to the one site only.

If your Web site supports Active Server Pages (Microsoft IIS Web servers) use the

launch.asp script to configure NFuse. If your Web site supports Java Servlet Pages

(Apache, Netscape, and iPlanet Web servers) use the launch.jsp script.

� To configure NFuse to support Citrix Secure Gateway using launch.asp

1. Open launch.asp.

2. Include the following lines in launch.asp: Parser.setSingleSessionField "NFuse_CSG_STA_URL1", "URL"

Parser.setSingleSessionField "NFuse_CSG_Server", "GatewayServerName"

Parser.setSingleSessionField "NFuse_CSG_ServerPort", "GatewayServerPort"

Parser.setSingleSessionField "NFuse_CSG_Enable", "On"

Parser.setSingleSessionField "NFuse_Transport", "https"

For information about the session fields, see the table on page 25.


� To configure NFuse to support Citrix Secure Gateway using launch.jsp

1. Open launch.jsp.

2. Include the following lines in launch.jsp:

Parser.setSingleSessionField ("NFuse_CSG_STA_URL1", "URL");

Parser.setSingleSessionField ("NFuse_CSG_Server", "GatewayServerName");

Parser.setSingleSessionField ("NFuse_CSG_ServerPort", "GatewayServerPort");

Parser.setSingleSessionField ("NFuse_CSG_Enable", "On");

Parser.setSingleSessionField ("NFuse_Transport", "https");

For information about the session fields, see the table on page 25.


Tip For more information about configuring NFuse using scripts, see the

Configuring NFuse PDF.



Example

You want to specify a gateway server called “csg1.citrix.com”, on which ICA

Clients use port 8888, using the following two ticket authority addresses:

• http://server1.citrix.com/scripts/CtxSta.dll

• https://server2.citrix.com/scripts/CtxSta.dll

The Web server runs on IIS on Windows. Include the following lines in launch.asp

(note that the first two lines of text below have wrapped): Parser.setSingleSessionField "NFuse_CSG_STA_URL1",

"http://server1.citrix.com/scripts/CtxSta.dll"

Parser.setSingleSessionField "NFuse_CSG_STA_URL2",

"https://server2.citrix.com/scripts/CtxSta.dll"

Parser.setSingleSessionField "NFuse_CSG_Server", "csg1.citrix.com"

Parser.setSingleSessionField "NFuse_CSG_ServerPort", "8888"

Parser.setSingleSessionField "NFuse_CSG_Enable", "On"

Parser.setSingleSessionField "NFuse_Transport", "https"

Restart the Web server to apply the changes.

Making NFuse Available to Your UsersWhen NFuse is installed and configured, inform your users of the URL for the

NFuse Login page. By default, the URL for the NFuse 1.61 Login page is:

http://servername/citrix/nfuse161

NFuse161.book Page Monday, October PM …dabcc.com/nfuse/Docs/SupplementaryGuide161.pdf•The Citrix...

Documents

Transcript of NFuse161.book Page Monday, October PM …dabcc.com/nfuse/Docs/SupplementaryGuide161.pdf•The Citrix...