NSL6.1 Replaces GINA when Installed on Citrix Server

  • 7000950
  • 16-Jul-2008
  • 26-Apr-2012


Novell SecureLogin
Citrix Server v 4.x
No Novell Client Installed on the Citrix Server


When the option to install Citrix and Terminal Server support is selected during the NSL6.1 install, the install replaces 'msgina' with 'sl_tsgina' in the registry at HKM/Software/Microsoft/WindowsNT/CurrentVersion/Winlogon.

If Gina.DLL in the above registry key previously pointed to MSGina, after the NSL 6.1 install it will point to SL_TSGina. If the GINA.DLL previously pointed to CTXGina and CTXGina pointed to MSGina, the CTX Gina setting will be modified to point to SL_TSGina.

If the active Gina is NWGina (from the Novell Client), the GINA value will not be changed.


This is working as designed. Here are a few points to note:

1. The NSL install respects the existing GINA chain, and replaces msgina with sl_tsgina.dll wherever it finds it. Depending on the existing configuration on the Citrix server, sl_tsgina.dll will appear in the registry after a successful installation under either the GINA.DLL.dll value, or the CTXGina value.

2. Sl_tsgina is a login extension. After sl_tsgina finishes it's work it hands off control to msgina. With sl_tsgina in place the standard Microsoft login prompt appears for this reason.

3. The sole purpose of SL_Tsgina is to work with sl_tsCgina installed by NSL on the workstation side to complete passthrough authentication. Passthrough authentication as referred to here is NSL's way of authenticating a user to a Citrix server by utilizing the initial workstation login. This is all sl_tsgina does; it performs no other function. For more information on passthrough authentication see:

a."How SecureLogin performs passthrough authentication" athttps://support.microfocus.com/kb/doc.php?id=3149664&sliceId=1&docTypeID=DT_TID_1_1&dialogID=41754921&stateId=0%200%2041758498


b." 6.1 Integrating Microsoft Terminal Server and Citrix" at"