Replicating a Citrix Web Interface site

Citrix

Unlike Storefront the now sunsetting Citrix web interface has no method of replicating sites from one server to another.

However there is a manual method that will allow you to achieve the same results without having to configure all the options again which obviously opens up the possibility of config mismatch.

In order to do this you will need to configure the first web interface server manually as you need.

Then on the second web interface create blank sites using the new site wizard without any configuration and give it the same site name as the site you wish to replicate. When the site is created untick the configure site now option and then click finish.

Now go back to your original web interface server and navigate to the site you would like to replicate and navigate to c:\inetput\www\Citrix\%sitename%\conf\ and copy the webinterface.conf file. Now place it in the same location on your second web interface server. When you open the web interface management console you should now see that the config for that site is the same on the second server as the first.

 

webinterfaceconf

 

Author: Dale Scriven

Breaking a Netscaler HA pair

Citrix

This post will cover how to correctly break a Netscaler HA pair, which might at first seem straightforward but just clicking that remove button will cause you all sorts of stress and more importantly downtime. Obviously because the Netscalers are in an HA pair means you want them and whats behind it to be highly available so any unavoidable downtime will be highly undesirable.

The process for correctly breaking an HA pair is as follows.

 

Logon to the web UI of both the primary and secondary node, and first make sure you know which is which as you certainly do not want to get any of this proceedure mixed up. Hit save on the primary node to ensure your running config is the same as the saved config.

On the Primary netscaler click on the System\High Availability configuration node and right click and open the secondary node.

HApair

staysecondary

 

Check the Stay Secondary radio box and hit OK, this will ensure that the secondary netscaler will not take any part of this process as a failure of the primary. This otherwise might lead to IP conflicts as both netscalers will be advertising the same IP address causing service outages.

So now both your netscalers should be showing this HA configuration.

staysecondary2

 

 

Now right click the secondary node and select remove, once confirming that you have selected the correct node, click yes to remove the node and also yes again to propagate the change to the secondary node.

HAremove

 

Once that has completed switch to the web ui of the secondary node and check the System/High Availability configuration node which should now look like this.

secondary

The netscaler HA pair has now been turned into two standalone netscalers with the same config on both. Changing the state on the secondary node would cause the same IP conflicts so we want to remove the config of the secondary and only leave the NSIP (netscaler IP) for management purposes. The easiest way to do this is goto the Diagnostics node and select the clear configuration option.

clearconfig

Then click the drop down list at the top of the screen and choose FULL, as described this will remove all the config except the NSIP so you will still be able to manage it and set it up for another purpose.

clearconfig2

 

Hit Run when you are ready and wait for the process to complete.

clearconfig3

 

When the config is clear it would now be a good idea to save the current config by hitting the save button at the top of web ui on both the old primary and secondary netscalers.

 

Author: Dale Scriven

 

Free Iscsi SAN with VAAI support

vmware-logo

I’ve come across a great little free Iscsi SAN VA which includes VAAI support. I’ve previously used Opefiler and Freenas to name a few to supply backend storage to my vSphere hosts but this product is new to me.

 

Its called QUADStor and is a Linux or FreeBSD based Iscsi SAN device, Once you have compiled the binaries onto the OS of your choice (redhat,CentOS, SLES, Debian or FreeBSD) provisioning storage is really easy.Compiling the binaries for those not quite so confident for *nix is also easy and every step is well documented from the QUADStor website. The VA must be licensed but its totally free and supports up to 16TB which should be enough for any home lab. Also as the product is in BETA naturally the no production data rule applies.

I shall not go into details on this blog post but its more really to raise awareness of this free option for adding VAAI support to your home lab.

Click here to for more details.

ESXi unable to see ISCSI target in VMware Workstation

vmware-logo

Part of my home lab uses HP n40l’s as hosts and a whitebox with VMware workstation 9 for various VM’s mostly storage based.  However using VMware workstation isn’t without considerations when building an environment like this.

Using products such as Starwind, QUADStor, Openfiler or Freenas (among many others) you may find when deploying iscsi from the storage appliances that whilst the target is visible within the static discovery tab you are unable to find the new targets when scanning for datastores or adding new storage.

This typically happens I’ve found if you have a storage appliance running on bridged networking within VMware workstation and attempt to connect your physical vSphere hosts to the virtual storage appliance. As in the example video below I have a QUADStor appliance (10.10.10.100)on a bridged networking within VMware workstation which needs to act as storage for my physical hosts (HP n40l’s). They have a separate vswitch also on the 10.10.10.x network which is iscsi port bound. As you can see in the video adding the target addresses allows the target to be seen but not connected too.

 

 

Its no great secret that Iscsi port binding does not support routing however using port binding also causes the above behavior as well. To be honest I’m not sure why removing port binding is required to make this kind of setup work as there is no “routing” to speak of but as this is my home lab I’m quite happy to omit port binding from my config.

 

Author: Dale Scriven

Installing DotNet framework 4 with MDT

Microsoft-Logo

If your having trouble deploying the dotnet framework 4 with the Microsoft Deployment Toolkit (MDT) with a deployment seemingly halting or freezing when installing the framework a minor change in the MDT application properties is in order.

Instead of using the usual dotnetfx40_full.exe /q /norestart substitute the /q (quiet) with /passive.

This allows the dotnet installation to be displayed (still requiring no intervention however) but the installation will complete.

 

dotnetMDT

Author: Dale Scriven

Citrix Native Receiver policy for Netscaler Access Gateway Enterprise Edition

Citrix

Citrix Receiver is available on many devices and is a vast improvement on the old mish-mash of online/offline plugins etc. Combining it with the power of Citrix Cloud Gateway and Netscaler you can get a unified experience across all your devices whether you are using an ipad and android tablet , a smart phone or citrix receiver installed on your PC or mac.
A single Netscaler policy and profile can service the Citrix Receiver across all devices (Mobile, PC & Mac) and I’m about to show you how. I’m presuming that you are fairly familiar with the AGEE and the basics of how it works so I’m just going show the profile and policy creation.

To begin with expand the AGEE node within the Netscaler and then the policies node. Right click on the session policy node and click ADD.

ageesession

 

Within the expression builder click the Add button and configure an expression to REQ.HTTP.HEADER User-Agent CONTAINS CitrixReceiver as below then click OK.

 

receiverHeader

 

Click the Add button again and this time configure another expression to REQ.HTTP.HEADER X-Citrix-Gateway EXISTS as below then click OK.

xcitrixgatewayJPG

 

Before continuing now click on the Match Any Expressions button and select Match ALL expressions instead.

ageeMAE

 

Now its time to create the profile so click NEW on the Request Profile menu item.

AGEENEW

 

Leave the network configuration tab blank but in the Client Experience change the Clientless Access to Off, the plugin type to Java and also ensure that the single sign-on to web applications is enabled.

Clientexperience

 

In the security tab set the Default Authorisation to Allow and enable Secure Browse.

security

 

Finally within the Published Applications tab Set ICA Proxy to ON, Enter the Web address of your storefront server and also configure your single sign-on domain.

PublishedAppsAGEE

 

Then all you need to do is click OK to create the profile and then Create to write the policy. Move the policy if you have more than one against a AGEE Vserver so that it has the highest priority and is read first when a device hits the Vserver.

With this configuration you should be able to take any new installation of citrix receiver on a mobile device for instance and point the account creation wizard at the URL of the Vserver, it will then prompt for your username/password and domain and then automatically add the account to the device with any pre-subscribed apps to the the Receiver window.

Magic init!

 

Author: Dale Scriven

Top 2013 VMware and Virtualization blog results

copy-vhorizona3.gif

Well the results are in and Eric has kindly posted the results over at vsphere-land and I’m very pleased to say that of the 243 blogs vhorizion came 104th. I’m exceedingly pleased and grateful for this result especially seeing as my posts are no where near as plentiful as others.

vhorizon posts are usually the culmination of little known titbits or things I think you may find useful so it seems you dear reader at least find some value in the things I post.

I’m also pleased that my colleagues blogs have also done exceptionally well, great work guys and girls!

I’ll be working over the next year on improving the ranking which I can only do by providing content that you dear reader appreciate so if you have any comments or suggestions please feel free to get in touch admin@vhorizon.co.uk.  Thanks again for your continued support!

Top VMware and virtualization 2013 Blog Results

Author: Dale Scriven

 

New Trainsignal subscription service review

Not really a technical post I know but I thought I’d write a few lines about changes within Trainsignal towers. Any one in the business will be fully aware that they provide top quality video training products across a vast vendor portfolio (Microsoft, Citrix, VMware and Cisco to name a few). However they have recently introduced a new subscription service as their main product.

In the past if you wanted a Trainsignal product you would open your wallet and pay the going rate for the single video series (give or take currency conversions it was usually around the £230-£250 for me). When you bought the item you received instant access to the video series online and Trainsignal sent you by post the 2 disk dvd, which included mobile versions of the training and audio as well. This is where I thought that Trainsignal should provide a download only option with a slightly different pricing model as whenever I bought one and Mr UPS turned up at the door he would never hand it over without import taxes being paid which was usually about £18-30 or so not too much to worry about I agree however it did add to the cost of the “free delivery” offered by Trainsignal.

 

Now however Trainsignal offer a subscription based server for $49 a month (read that as about £30) where you have full unrestricted access to all their training products online and practice exams. Videos can also be downloaded and played using their offline player (which currently is windows and mac only). So this makes it really into the Netflix of the IT training space.

I am aware that there is a competitor that does a similar thing however their subscription cost is alot higher and also of the videos that my colleagues have shown me the quality is nowhere near that in delivery or content or Trainsignals.

Personally I love Trainsignal products but my one issue with them is that once the exam is passed that the product relates too, the dvd’s are essentially shelved and never used again. Video are great for showing you a whole topic but for quick referencing a particular item its google or a book. This is where the subscription server comes into its own. So that’s access to an all you can learn buffet without the investment ageing for the princely sum of £30-ish a month which roughly rounds up to 2 full old school DVD versions of Trainsignal products per year. How many Trainsignal video courses can you get through in a year (an awful lot), and also you get access to new content as it is released.

One of the first things I check for any subscription service is that, if you can join with the click of a mouse then you can also leave with the click of a mouse. If you have to phone a number to cancel a subscription I’m not interested in what your offering. Luckily Trainsignal passes again with flying colours here with a handy end subscription option within your profile.

They are also offering a 3 day free trial of the service which one one hand I think a little mean spirited as we are all busy IT pro’s and 3 days doesn’t usually give you alot of downtime to have a good sniff round something new, but on the other hand I can see why they do this (no one wants to give anything away for free right)!

 

Overall the new subscription service is great value for money and I’ve already signed up, however as always there is an item currently missing that I think should be included. There should be an option to view the content on mobile devices which at the moment is not supported. Although I’ve tested viewing the videos on my Xoom’s browser and whilst it works an app would be most beneficial I think to the value of the subscription.

 

Overall this is a great move by Trainsignal and I love the new format and is a great way to push forward your own learning. To learn more and sign up HERE

 

Author: Dale Scriven

Top virtualization blogs 2013 – Vote Now

vmware-logo

Voting has opened for the top virtualization blogs 2013 over at vsphere-land. This is an annual vote for who you think is the top 10 virtualization bloggers of the year.

This is a great opportunity to show your appreciation for various blogs that have provided useful content to you over the last year, and also its a great opportunity to find new ones. Whilst voting for your favourites, have a look at the ones you have not visited before as every single blog on that list has fantastic articles waiting to be discovered.

Head over to the vsphere-land survey by clicking here.

Author: Dale Scriven

Forcing a xenserver vm to shutdown

Citrix

Forcing a xenserver vm to shutdown is sometimes required if a vm’s active reboot or shutdown task refuses to complete correctly.

 

You’ve tried restarting a xenserver vm and it appears to be stuck with the orange circle icon next to the vm and the force restart/shutdown options are not available, so the vm is stuck in a bit of a limbo, you can’t restart it you cant shut it down, the vm itself generally is not running…. So now what!?

 

In order to get things going again you need to delve in the console and kill the vm’s task.

1/ Take a note of the vm’s uuid by clicking on the vm and hitting the general tab then right click on the uuid and select copy. Paste the contents into notepad or something similar for easy reference.

uuid

2/ On the home server running the vm open the console and type list_domains. Take a note of the ID number that is next to the uuid of the vm noted earlier (in this case the id is 1).

listdomains

3/ navigate to /opt/xensource/debug then type “destroy_domain -domid 1″ replace 1 with your own domain ID.

destroydomain

The vm will then be forced to shutdown, note that whilst there is no real alternative to this method if you find yourself in this situation is it the same yanking out the power cable on the vm so it is always a good idea to wait a reasonable amount of time before performing these actions to make sure that the vm will not shutdown on its own.

 

 

Author: Dale Scriven