Comments on: Mixed Novell and AD Authentication issues http://www.techagility.info/2008/03/mixed-novell-and-ad-authentication-issues/ using Technology to become more Agile at work and play - and more thoughts on VDI, Thin Clients, VMware, Citrix, etc... Wed, 28 Jul 2010 07:37:52 -0400 hourly 1 http://wordpress.org/?v=3.0 By: dcaddick http://www.techagility.info/2008/03/mixed-novell-and-ad-authentication-issues/comment-page-1/#comment-551 dcaddick Thu, 27 Mar 2008 11:27:50 +0000 http://www.techagility.info/2008/03/27/mixed-novell-and-ad-authentication-issues/#comment-551 Thanks for that Neil, I have also seen that work quite well for Citrix environments, however unfortunately the particular case I'm looking at now is related to a VDI/BladePC instance with no Citrix components so Web Interface is not an option for now. Cheers, Dave Thanks for that Neil, I have also seen that work quite well for Citrix environments, however unfortunately the particular case I’m looking at now is related to a VDI/BladePC instance with no Citrix components so Web Interface is not an option for now.

Cheers,
Dave

]]> By: Neil Spellings http://www.techagility.info/2008/03/mixed-novell-and-ad-authentication-issues/comment-page-1/#comment-550 Neil Spellings Thu, 27 Mar 2008 07:08:48 +0000 http://www.techagility.info/2008/03/27/mixed-novell-and-ad-authentication-issues/#comment-550 One solution is to use Web Interface, which provides an LDAP contextless login that does not require the GINA support mentioned above. Basically the website performs an LDAP query to find your full OU path, and then passes this as your username to the GINA in your ICA session which works great. There are also some other tricks you can do with Web Interface if you wish to authenticate using your NDS credentials, but do an AD login to Citrix, although this requires your directories to by in sync using something like DirXML Cheers Neil One solution is to use Web Interface, which provides an LDAP contextless login that does not require the GINA support mentioned above.

Basically the website performs an LDAP query to find your full OU path, and then passes this as your username to the GINA in your ICA session which works great.

There are also some other tricks you can do with Web Interface if you wish to authenticate using your NDS credentials, but do an AD login to Citrix, although this requires your directories to by in sync using something like DirXML

Cheers

Neil

]]>