[Citrix Gateway Trace Study] – LDAP Authentication
Article ID: CTX233027
Updated On:
Description
This trace study looks at how LDAP authentication to the Citrix Gateway works, using a user called "garyca" as an example.
This example trace was carried out in a practice lab environment with the following IP addresses:- VIP:10.90.33.172
- NSIP:10.90.41.200
- SNIP:192.168.0.2
- LDAP/AD server:192.168.0.1 (port 389)
Instructions
Client enters credentials, this is a POST from 10.90.41.87 to 10.90.33.172:
The ADC does a bind request to the LDAP/AD server, authentication leaves from the NSIP In this environment this is an unreachable subnet from the NSIP, so the SNIP is used:
The bind details are visible inside the trace:
Highlighting “simple: 636974726978” will show the unencoded password (citrix):
Bind details are accepted:
A search request is submitted for user “garyca”:
User found, a response is received:
Bind request to authenticate user:
Password:
Success response and unbind from LDAP:
User is redirected to /cgi/setclient?wica for the next stage of the login process:
Issue/Introduction
Additional Information
