Configuring Citrix to authenticate by default to Novell Directory NDS/eDirectory instead of ADS

Issue

Note: The terms NDS and eDirectory are used interchangeably in this document

Customer wanted to configure Citrix to authenticate to NDS (not Active Directory) by default. With SecureLogin SSO they wanted SSO to Citrix that would integrate seamlessly with the Desktop, Published Application, Published Desktop or Nfuse.

Cause

The default authentication for Citrix is Active Directory. The workstation must be configured to support the Novell Directory as the default authentication directory.

If you refer to the Citrix web site and download ""Using MetaFrame XP for Windows, Feature Release 1 with Novell Directory Services"" (CTX16888 last accessed at http://support.citrix.com/kb/entry!default.jspa?categoryID=118&entryID=599&fromSearchPage=true) and use this as a guide you will find ""most"" information needed.

Solution

To enable Citrix to use NDS as an authentication directory you must:

• Review the Using MetaFrame XP for Windows, Feature Release 1 with Novell Directory Services pdf file
• Have the same Username and Password on both Active Directory and NDS (no exceptions)
• Setup the Citrix Management Console to use NDS (refer to page 10)
• Edit the config.xml file to support NDS Line 56 that has false change to true
• Edit the NFUSE.conf for NDS support LoginType=NDS NDSTreeName=CPQ_EDIR_TREE SearchContextList=YourOrg
• *** If you are NOT using ZENWorks edit registry (Citrix document CTX103252) [HKEY_LOCAL_MACHINESOFTWARECitrixNDS]"" SyncedDomainName""=""YourDomain""
• Restart your Citrix server

The problem will be solved and you are now able to login with NDS credentials and access Citrix. If you continue to have problems you may need to contact Citrix directly for support.

Once you can login to Citrix using NDS credentials you may then install SecureLogin and have seamless SSO to all Citrix based applications you have SSO enabled.