Welcome Guest!   Register | Login | Login Assistance
Extending your Citrix and Terminal Server
environment using .NET and other technologies.

Controlling Access to Web Interface using Web Interface Access Control Center

 

Have you ever had a need to allow only a subset of your users access to Citrix Web Interface or Secure Gateway? This is especially useful if you use an internal Web Interface and an external Web Interface/Secure Gateway environment. You might want to let anybody log on through the internal Web Interface, but restrict access through the external Web Interface/Secure Gateway. Sam Jacobs created a utility to do just that at http://www.ipm.com/home/freecode/RestrictedUsers.zip. The basic concept of this modification is to place a list of users in a text file on your Web Interface server. Then, the code looks in this file at login time to see if the authenticating user is allowed to continue.

This concept works quite well, but I had a request to allow non-technical people to control the access list. Rather than give them rights to the server to modify the text file, I came up with a slightly different solution - the Web Interface Access Control Center. This solution involves placing the allowed users in a database table and comparing the authenticating user to the database table, rather than a text file, at login time. As an added bonus, this solution logs all access attempts to the database as well.

To help implement this solution, I created an ASP.NET interface to allow adding and removing users from the list. This utility integrates with Active Directory to display available users to add to or remove from the access list. In addition, the utility analyzes usage and presents this information in a drill-down format.

Download the Web Interface Access Control Center


The Components

The Web Interface Access Control Center consists of three logical components; a database to store allowed users and access activity, a Citrix Web Interface server, and an IIS Web Application server running the .NET Framework version 2.0 to host the end-user utilities. I say these are three logical components because all three components can reside on the same physical server.

The Database
The database can be any ODBC compliant database such as Microsoft SQL, MSDE, MySql, etc. The database has a very simple structure consisting of only two tables; the WI_Access table to store which users are permitted access via Web Interface, and WI_AccessLog to store access attempts.

The Web Interface Server
Naturally you will need a Citrix Web Interface server. You will need to make one modification in order for this solution to work. The modification instructions can be found in the setup instructions accompanying the download. One thing to note however is if there is a firewall between the Web Interface server and the database, port 1433 will need to opened in order for SQL communication to occur.

The IIS Web Application Server
The IIS Web Application server reads information from the database and reports this information in a drill down fashion. The virtual directory that the web application runs from will need to be configured to use the .NET Framework version 2.0 (this is covered in the setup instructions).


Component Communications

Web Interface Access Control Center Communications


Screen Shots

Access Control List

Click to enlarge


Usage Calendar

Click to enlarge


Day Detail

Click to enlarge


Hour Detail

Click to enlarge


User Detail

Click to enlarge


I hope you find this tool useful. But, keep in mind that while every effort has been made to test this tool, this tool is still in "beta" and may contain bugs. Also, the modification made to Web Interface is not supported by Citrix.






Published: April 04, 2006
Last Modified: April 14, 2008
Tags: Customization Web Interface Databases Citrix Presentation Server
Current Rating:



Comments

Very Cool
Nice work Jason. Now can you create one like this that goes against the IMA data store? Can this intergrate into AD and use groups?
This has been my favorite site for cool Citrix stuff and fun things to ponder and play with!!!

MF Boston

Reply
Very Impressive
An elegant solution to the problem ! My original solution was also not optimal when you had to keep multiple web servers in sync. Keeping the users in a database neatly solves that problem.
Another approach that I've presented is to control access from the CMC (where it should be) by publishing an "authentication" application to authorized users and filtering out the app from the application list.
That approach is discussed in the following Citrix Support Forum post:
http://support.citrix.com/forums/thread.jspa?messageID=297420
It still doesn't have your cool graph, though !

Sam

Reply
Wildcard?
I'd like to use this tool purely for the reporting and allow anyone to connect but it doesn't appear to allow for wildcards. Is that the case or am I missing something?

robert@asgr.com

Reply
Re: Wildcard?
Wildcard's are not currently allowed. I plan on updating the Web Interface Access Control Center soon with some additional functionality. I will include your suggestion in a future release! In the mean time, check out Thomas Koetzing's Analyze Center for Web Interface 4.x.

Reply
Application working, UI incomplete
Jason,

I got the WI access utility working by adding names to the WI_Include table manually.

I do not want to connect to AD from the DMz, hence I have used these settings for the web interface:

"ManagementGroup" value="\administrators"

also tried setting "LDAPDomain" =

The UI only shows reporting and I cannot add new users. I even used Windows Authentication for the Virtual directory.

Any suggestions?

Kevin Smith
Senior Systems Engineer
IMG-LLC
ksmith@infomg.com

Reply
Re: Application working, UI incomplete
I agree that opening up AD from the DMZ to the LAN is a bad idea. The way I intended for this to be set up is to use a separate Web Server on the LAN to host the Web Application. The Web Application server is only used for adding users to the access control list and reporting on usage. The Web Interface/Secure Gateway server never contacts the Web Application server. This way, you only have to open port 1433 (SQL) from the Citrix Web Interface server in the DMZ to your SQL server. All the Active Directory LDAP traffic stays on the LAN in this scenario. You can combine the SQL and Web Application server on the same physical box if you desire.

Reply
Web.config syntax
I am getting "access denied" on the /admin/manageaccess.aspx page.

Here are my settings in web.config:






The user "WI_Admin" has been assigned "db

I get the usage calendar and user detail, but cannot manage user access. I have verifed that my sql user can insert and delete from the table.

any ideas?

Thanks,

Kevin Smith

Reply
Re: Web.config syntax
The most likely cause of this is improper settings in the Web.Config file. Verify the following entries:

<add key="LDAPDomain" value="domain"/>
<add key="ManagementGroup" value="domain\group"/>

Where domain = your Active Directory domain, and group = a valid Active Directory group you belong to.

One thing to note, you may have to use your pre-Windows 2000 domain name.


Reply
Re: Re:Web.config syntax
Problem solved: I was using "ManagementGroup = \administrators. This is actually a "builtin" group. I changed the group to \domain admins and all is good.

For LDAPDomain, the DNS format works.

Thanks for building a great tool for Citrix!

Kevin Smith
Senior Systems Engineer
IMG-LLC

Reply
Reports for Remote Users Only
HI,

I got WI 4.2 on DMZ and i only need to log external user connection ( TIME/ DTAE). Is that possible with this utility or do i need to modify?

I got MF XPa 1.0 FR3 And is that possible to get that sort of information with this utility? or any other tool?

Reply
Re: Reports for Remote Users Only
With a slight modification you can accomplish this.
Open up WIACC.cs and find the following text:

try
{
...
}

Replace everything between { and } with the following:

conn.Open();
boolAllowed = true;
string strSQLAllowed = string.Format("INSERT INTO WI_AccessLog (username, logintime, remote_addr, success) VALUES ('{0}', '{1}', '{2}', '{3}')", strUsername, DateTime.Now.ToString(), clientIP, "yes");
System.Data.SqlClient.SqlCommand sqlCmdAllowed = new System.Data.SqlClient.SqlCommand(strSQLAllowed, conn);
sqlCmdAllowed.ExecuteNonQuery();

Reply
This does not work for me
I have setup the application according to the notes but when I access the citrix portal I just get an internal error.

Am I doing something wrong ??

Reply
Re: This does not work for me
What version of Web Interface are you using?

Reply
Almost working - No reporting
Hi Jason, it's Stuart from the Citrix support forum here, we chatted over beers at Briforum in Germany !

I've setup the app as described, inserting users directly into the SQL table works for me, so I guess I'm half there..... but

On browsing to the web site setup as a virtual direcotry, I get the Access log calender, which does not show login attempts on the dates ? Should there also be another button to manage users here ?

Below the calender is the following error:

"The conversion of a char data type to a datetime data type resulted in an out-of-range datetime value"

Also if I try to browse to the /admin/manageaccess.aspx page directly I get the "access denied" message as detailed above.

Thanks

Stuart

Reply
Re: Almost working - No reporting
There are two issues here. This first is to do with the reporting. It looks like you need to add the following to Web.Config:

- Add ";Current Language=English" after the password on your connection string.

- Add
<globalization requestEncoding="utf-8" responseEncoding="utf-8" culture="en-US" uiCulture="en-US" enableClientBasedCulture="false" responseHeaderEncoding="utf-8" enableBestFitResponseEncoding="false" /> to Web.Config right after <system.web>

The second issue has to do with your LDAP specification in Web.Config. Try using a tool such as ADSI Edit to ensure you are specifying the correct domain name and group.

Reply
Re: Re: Almost working - No reporting
Thanks for your reply Jason.

That's that's fixed the first issue, I can now see the entries in the caleder and get the cool graph when I click.

I'll take a look at the LDAP domain and user string tomorrow and let you know.

Thanks again

Stuart

Reply
admin page not working
Having the same issue as abouve. All works well but if I cannot get manageaccess.aspx to work. I do not see any buttons to add users either. Manually entering users in the database does work. Im trying to use the Domain Admins group with Win2k AD.

Reply
Server Error in '/' Application
Probably something i'm doing wrong...but I am receiving the following error:

Server Error in '/' Application.
--------------------------------------------------------------------------------

Configuration Error
Description: An error occurred during the processing of a configuration file required to service this request. Please review the specific error details below and modify your configuration file appropriately.

Parser Error Message: It is an error to use a section registered as allowDefinition='MachineToApplication' beyond application level. This error can be caused by a virtual directory not being configured as an application in IIS.

Source Error:


Line 30:
Line 31:
Line 32:
Line 33:
Line 34:


Source File: c:\inetpub\wwwroot\citrix\wi_access\web.config Line: 32



Show Additional Configuration Errors:


It is an error to use a section registered as allowDefinition='MachineToApplication' beyond application level. This error can be caused by a virtual directory not being configured as an application in IIS. (c:\inetpub\wwwroot\citrix\wi_access\web.config line 33)




--------------------------------------------------------------------------------
Version Information: Microsoft .NET Framework Version:2.0.50727.42; ASP.NET Version:2.0.50727.42

Any ideas??

Reply
Related to POST Above..LINE 32
Line 32:

Reply
No authentication as administrator
Hi Jason
I also got the WI access utility working by adding names to the WI_Include table manually.

The UI only shows reporting and I cannot add new users. I even used Windows Authentication for the Virtual directory.
I checked the Domainentry and the membergroup very carefully - but I use it on a german-System. I think WI dont find the domain??
The Domainname is lbs-hartberg???
Any suggestions?

Wolf Greiner
LBS Hartberg
w.greiner@lbs-hartberg.ac.at

Reply
everything working but only 50% of users enumerated
Hi all,

I have everything working but the user list is incomplete. The LDAP domain is right and i am a full admin in the group specified for managing. i cannot login to the WI as i get access denied

Reply
No reporting
Hi Jason,
I can restrict access, but i can“t to see the reports..

I get the Access log calender, which does not show login attempts.

What I need to do??

Reply
Re: No reporting
This sounds like your Web.Config file's connection string is not properly configured.

Reply
error message received at WI
I have tried everything and cannot get all users to enumerate from AD. I get about half. i cannot see my own user name in the list and am a member of the group assigned to manage.

If i try access the WI i get the following
Unauthorized Access Attempt

You have not been permitted external access to Web Interface.

This access attempt has been logged.

If you feel this message is in error, please contact the system administrator

If anyone is reading this it would be great to get some help

Reply
Re: error message received at WI
Will you send me the rendered source of the page? Just right-click on the page showing half of the users and select "View Source" (or similar). Then save the source as a text file and email to me.

Thanks,
Jason

Reply
Application Error
i am getting a following error while trying to view "show denied login".
'lbUsers' has a SelectedIndex which is invalid because it does not exist in the list of items.
Parameter name: value.
Stack Trace:
[ArgumentOutOfRangeException: 'lbUsers' has a SelectedIndex which is invalid because it does not exist in the list of items.
Parameter name: value]
System.Web.UI.WebControls.ListControl.set_SelectedIndex(Int32 value) +1777006
PerUserUsage.lbUsers_DataBound(Object sender, EventArgs e) +24
System.Web.UI.WebControls.BaseDataBoundControl.OnDataBound(EventArgs e) +86
System.Web.UI.WebControls.ListControl.PerformSelect() +60
System.Web.UI.WebControls.BaseDataBoundControl.DataBind() +70
System.Web.UI.WebControls.BaseDataBoundControl.EnsureDataBound() +82
System.Web.UI.WebControls.ListControl.OnPreRender(EventArgs e) +26
System.Web.UI.WebControls.ListBox.OnPreRender(EventArgs e) +9
System.Web.UI.Control.PreRenderRecursiveInternal() +77
System.Web.UI.Control.PreRenderRecursiveInternal() +161
System.Web.UI.Control.PreRenderRecursiveInternal() +161
System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) +1360

any help would be appreciated.
i am using Windows 2000 Server SP4, WI 4.2

Reply
Globalisation (or Globalization, as you would put it)
Thanks for this excellent control.

Two things I would like to add. Most environments will find that the virtual folder for the Website will work best when set to Basic Authentication only. Might be worth adding to the setup instructions, and anyone experienced enough with IIS can always choose to ignore it.

Secondly, I have found that it has some issues when used on a server with non-US date/time formats (ie where the date format is dd/mm/yyyy)

The trick is that datetime representations in SQL statements are ALWAYS mm/dd/yyyy format, whereas everywhere else in .NET code it will use the local formats. So whenever we read or write from the SQL, we need to be sure its in the expected format!

To get it all to work smoothly I found the following changes were required:

WIACC.cs
============
Insert these two lines above the line that starts: //Retrieve the username...

System.Globalization.CultureInfo cultureUS;
cultureUS = new System.Globalization.CultureInfo("en-US", true);

Replace two instances of
DateTime.Now.ToString()
with
DateTime.Now.ToString(cultureUS)


UsageCalendar.aspx.cs
======================
function loadDays()
-------------------
Insert these two lines into above the line that starts: //Set up SQL query parameters

System.Globalization.CultureInfo cultureUS;
cultureUS = new System.Globalization.CultureInfo("en-US", true);

replace the line
tmpDate = DateTime.Parse(strMonth + "/1/" + strYear);
with
tmpDate = DateTime.Parse(strMonth + "/1/" + strYear,cultureUS);

replace the line
strSQL = String.Format("SELECT logintime, success FROM WI_AccessLog WHERE logintime BETWEEN '{0}' AND '{1}'", startDate.ToShortDateString(), endDate.ToShortDateString());
with
strSQL = String.Format("SELECT logintime, success FROM WI_AccessLog WHERE logintime BETWEEN '{0}' AND '{1}'", startDate.ToShortDateString(cultureUS), endDate.ToShortDateString(cultureUS));

HourDetail.aspx.cs
=====================
function Page_Load()
---------------------
Insert these two lines at the top of the function:

System.Globalization.CultureInfo cultureUS;
cultureUS = new System.Globalization.CultureInfo("en-US", true);

Replace these lines
int intMonth = Int16.Parse(strDate.Split('/')[0]);
int intDay = Int16.Parse(strDate.Split('/')[1]);
int intYear = Int16.Parse(strDate.Split('/')[2]);
with
DateTime dtTmp = DateTime.Parse(strDate);
int intMonth = dtTmp.Month;
int intDay = dtTmp.Day;
int intYear = dtTmp.Year;

Replace these lines
string strStart = string.Format("{0} {1}:00:00", strDate, strHour);
string strEnd = string.Format("{0} {1}:59:59", strDate, strHour);
with
string strStart = string.Format("{0} {1}:00:00", dtTmp.ToString("d",cultureUS), strHour);
string strEnd = string.Format("{0} {1}:59:59", dtTmp.ToString("d",cultureUS), strHour);

DayDetail.aspx.cs
========================
function loadUserList()
------------------------
Insert these two lines at the top of the function:

System.Globalization.CultureInfo cultureUS;
cultureUS = new System.Globalization.CultureInfo("en-US", true);

replace these lines
sqlUsers.SelectParameters[0].DefaultValue = strStart;
sqlUsers.SelectParameters[1].DefaultValue = strEnd;
with
DateTime dtStart = DateTime.Parse(strStart);
DateTime dtEnd = DateTime.Parse(strEnd);
sqlUsers.SelectParameters[0].DefaultValue = dtStart.ToString(cultureUS);
sqlUsers.SelectParameters[1].DefaultValue = dtEnd.ToString(cultureUS);

generateXMLChartData.aspx
===========================
Insert after the line


function Page_Load()
--------------------------
Insert these two lines at the top of the function:

System.Globalization.CultureInfo cultureUS;
cultureUS = new System.Globalization.CultureInfo("en-US", true);

Insert above the line: string strAnimation = "1";
DateTime dtStartDate = DateTime.Parse(strStartDate);
DateTime dtEndDate = DateTime.Parse(strEndDate);


Replace the line
string strSQL = String.Format("SELECT logintime FROM WI_AccessLog WHERE logintime BETWEEN '{0}' AND '{1}'", strStartDate, strEndDate);
with
string strSQL = String.Format("SELECT logintime FROM WI_AccessLog WHERE logintime BETWEEN '{0}' AND '{1}'", dtStartDate.ToString(cultureUS), dtEndDate.ToString(cultureUS));


Reply
Re: Globalisation (or Globalization, as you would put it)
FQ8UUT ymwggqbylxds, [url=http://ixqowbvbyzoi.com/]ixqowbvbyzoi[/url], [link=http://pzwgexhlnfqh.com/]pzwgexhlnfqh[/link], http://kjerxiugnwus.com/

Reply
Re: Globalisation (or Globalization, as you would put it)
hmmm...mb its true , adobe illustrator outlines, http://bestdomen47.com/Outlines/adobe-illustrator-outlines.html adobe illustrator outlines, qqq, abd al-rauf bin al-habib, http://bestdomen47.net/bin/abd-al-rauf-bin-al-habib.html abd al-rauf bin al-habib, =DDD, ich ich ich bin von selben stern, http://bestdomen47.net/bin/ich---ich-ich-bin-von-selben-stern.html ich ich ich bin von selben stern, 491, udo lindenberg ich bin rocker, http://bestdomen47.net/bin/udo-lindenberg-ich-bin-rocker.html udo lindenberg ich bin rocker, bdqe,

Reply
Re: Globalisation (or Globalization, as you would put it)
, etro handbag, http://bestdomen47.net/handbag/etro-handbag.html etro handbag, byw, cool fake viruses, http://bestdomen47.net/fake/cool-fake-viruses.html cool fake viruses, >:-]], free fake diploma print out, http://bestdomen47.net/fake/free-fake-diploma-print-out.html free fake diploma print out, >:PP, tourist attractions in berlin, http://bestdomen47.net/tourist/tourist-attractions-in-berlin.html tourist attractions in berlin, 8]]], obtaining a fake drivers licence, http://bestdomen47.net/fake/obtaining-a-fake-drivers-licence.html obtaining a fake drivers licence, =-]]],

Reply
Re: Globalisation (or Globalization, as you would put it)
you can better, beauty discrimination, http://stardomen47.com/discrimination/beauty-discrimination.html beauty discrimination, 0882, roasted corn on the cob, http://stardomen47.net/corn/roasted-corn-on-the-cob.html roasted corn on the cob, %-(((, weapons of warfare, http://stardomen47.com/warfare/weapons-of-warfare.html weapons of warfare, 250481, organic chicken food, http://stardomen47.net/organic/organic-chicken-food.html organic chicken food, =[[, discrimination quotes, http://stardomen47.com/discrimination/discrimination-quotes.html discrimination quotes, glsqce, crimson warfare 2, http://stardomen47.com/warfare/crimson-warfare-2.html crimson warfare 2, =]]],

Reply
Re: Globalisation (or Globalization, as you would put it)
hmmm...mb its true , hotel trends in technology, http://bestdomen47.com/hotel/hotel-trends-in-technology.html hotel trends in technology, =(, tape cassette cases, http://bestdomen47.net/cassette/tape-cassette-cases.html tape cassette cases, swo, batter dispenser, http://bestdomen47.net/dispenser/batter-dispenser.html batter dispenser, qtoec, 'teac cassette machines'service manual, http://bestdomen47.net/cassette/'teac-cassette-machines'service-manual.html 'teac cassette machines'service manual, voxmvw,

Reply
Re: Globalisation (or Globalization, as you would put it)
you can better, molly hatchet flirtin with disaster, http://stardomen47.com/hatchet/molly-hatchet-flirtin-with-disaster.html molly hatchet flirtin with disaster, qmuif, molly hatchet mp3, http://stardomen47.com/hatchet/molly-hatchet-mp3.html molly hatchet mp3, %DDD, summary of each chapter of hatchet, http://stardomen47.com/hatchet/summary-of-each-chapter-of-hatchet.html summary of each chapter of hatchet, 1691, molly hatchet lyrics, http://stardomen47.com/hatchet/molly-hatchet-lyrics.html molly hatchet lyrics, 649159,

Reply
Re: Globalisation (or Globalization, as you would put it)
I wanna show you something, virtual reference desk, http://domenstar47.net/reference/virtual-reference-desk.html virtual reference desk, uegy, duran duran wild boys, http://domenstar47.net/duran/duran-duran-wild-boys.html duran duran wild boys, 615, arkansas sport utility vehicle rollover attorney, http://domenstar47.net/vehicle/arkansas-sport-utility-vehicle-rollover-attorney.html arkansas sport utility vehicle rollover attorney, 45787, brine shrimp experiment, http://domenstar47.com/shrimp/brine-shrimp-experiment.html brine shrimp experiment, :DDD, make a motorcycle cake, http://domenstar47.com/cake/make-a-motorcycle-cake.html make a motorcycle cake, jgtdfy,

Reply
Re: Globalisation (or Globalization, as you would put it)
hmmm...mb its true , magic flute selection, http://domenstar47.com/selection/magic-flute-selection.html magic flute selection, >:P, usps stamp selection, http://domenstar47.com/selection/usps-stamp-selection.html usps stamp selection, 38301, natural selection + worksheets, http://domenstar47.com/selection/natural-selection-+-worksheets.html natural selection + worksheets, :-[[, chainsaw chain selection, http://domenstar47.com/selection/chainsaw-chain-selection.html chainsaw chain selection, lmvmyx,

Reply
Re: Globalisation (or Globalization, as you would put it)
comment3, lake city colorado, http://coolcoolcarsportal.com/lake/lake-city-colorado.html lake city colorado, 8-O, harveys lake, http://coolcoolcarsportal.com/lake/harveys-lake.html harveys lake, drwkaf, lake city community college, http://coolcoolcarsportal.com/lake/lake-city-community-college.html lake city community college, 5079, silver lake, http://coolcoolcarsportal.com/lake/silver-lake.html silver lake, %(, blue marsh lake, http://coolcoolcarsportal.com/lake/blue-marsh-lake.html blue marsh lake, zxri, geneva on the lake ohio, http://coolcoolcarsportal.com/lake/geneva-on-the-lake-ohio.html geneva on the lake ohio, >:-O, chris lake, http://coolcoolcarsportal.com/lake/chris-lake.html chris lake, 078370, table rock lake cabins, http://coolcoolcarsportal.com/lake/table-rock-lake-cabins.html table rock lake cabins, 5311, darian lake, http://coolcoolcarsportal.com/lake/darian-lake.html darian lake, %OO,

Reply
Re: Globalisation (or Globalization, as you would put it)
comment3, lake city colorado, http://coolcoolcarsportal.com/lake/lake-city-colorado.html lake city colorado, 8-O, harveys lake, http://coolcoolcarsportal.com/lake/harveys-lake.html harveys lake, drwkaf, lake city community college, http://coolcoolcarsportal.com/lake/lake-city-community-college.html lake city community college, 5079, silver lake, http://coolcoolcarsportal.com/lake/silver-lake.html silver lake, %(, blue marsh lake, http://coolcoolcarsportal.com/lake/blue-marsh-lake.html blue marsh lake, zxri, geneva on the lake ohio, http://coolcoolcarsportal.com/lake/geneva-on-the-lake-ohio.html geneva on the lake ohio, >:-O, chris lake, http://coolcoolcarsportal.com/lake/chris-lake.html chris lake, 078370, table rock lake cabins, http://coolcoolcarsportal.com/lake/table-rock-lake-cabins.html table rock lake cabins, 5311, darian lake, http://coolcoolcarsportal.com/lake/darian-lake.html darian lake, %OO,

Reply
Re: Globalisation (or Globalization, as you would put it)
Really nice=)but look this:, security software, http://domenstar47.net/security/security-software.html security software, hjyoep, shoe organization ideas, http://domenstar47.net/organization/shoe-organization-ideas.html shoe organization ideas, jrbhx, automotive toggle switches, http://domenstar47.net/automotive/automotive-toggle-switches.html automotive toggle switches, xkhr, maryland public records, http://domenstar47.com/maryland/maryland-public-records.html maryland public records, 473,

Reply
Re: Globalisation (or Globalization, as you would put it)
, supernatural fan fiction, http://domenstar47.com/fiction/supernatural-fan-fiction.html supernatural fan fiction, =((, bahama shutters charleston, http://domenstar47.com/Charleston/bahama-shutters-charleston.html bahama shutters charleston, %P, pysch fan fiction, http://domenstar47.com/fiction/pysch-fan-fiction.html pysch fan fiction, 3640, coenzyme q-10 good for low thyroid function, http://domenstar47.net/function/coenzyme-q-10-good-for-low-thyroid-function.html coenzyme q-10 good for low thyroid function, wmvyrc, miniature stuffed black panther, http://domenstar47.net/Panther/miniature-stuffed-black-panther.html miniature stuffed black panther, =-OOO, 3 inch memory foam mattress topper, http://domenstar47.net/topper/3-inch-memory-foam-mattress-topper.html 3 inch memory foam mattress topper, >:-],

Reply
Re: Globalisation (or Globalization, as you would put it)
comment6, riders hobby shop, http://coolcarportal.com/hobby/riders-hobby-shop.html riders hobby shop, 423268, small military hobby 1/4 scale, http://coolcarportal.com/hobby/small-military-hobby-1/4-scale.html small military hobby 1/4 scale, :O, st paul hobby shops, http://coolcarportal.com/hobby/st-paul-hobby-shops.html st paul hobby shops, 65867, ray & robins hobby center, http://coolcarportal.com/hobby/ray-&-robins-hobby-center.html ray & robins hobby center, >:-P, electroplating as a hobby, http://coolcarportal.com/hobby/electroplating-as-a-hobby.html electroplating as a hobby, hwq, perfect mom hobby, http://coolcarportal.com/hobby/perfect-mom-hobby.html perfect mom hobby, lxszlr, hobby store pictures, http://coolcarportal.com/hobby/hobby-store-pictures.html hobby store pictures, 821733, portable hobby desk, http://coolcarportal.com/hobby/portable-hobby-desk.html portable hobby desk, %[, favorite hobby, http://coolcarportal.com/hobby/favorite-hobby.html favorite hobby, eoybx,

Reply
Re: Globalisation (or Globalization, as you would put it)
comment2, sea life literature activities for preschool children, http://coolcarportal.com/literature/sea-life-literature-activities-for-preschool-children.html sea life literature activities for preschool children, dbjtie, what inspirational literature do i read next, http://coolcarportal.com/literature/what-inspirational-literature-do-i-read-next.html what inspirational literature do i read next, drrpl, postcolonial literature, http://coolcarportal.com/literature/postcolonial-literature.html postcolonial literature, jbpm, famous latin american pieces of literature, http://coolcarportal.com/literature/famous-latin-american-pieces-of-literature.html famous latin american pieces of literature, 8PP, vari-depth literature folder boxes, http://coolcarportal.com/literature/vari-depth-literature-folder-boxes.html vari-depth literature folder boxes, %PPP, 7th grade literature, http://coolcarportal.com/literature/7th-grade-literature.html 7th grade literature, 967, free literature units, http://coolcarportal.com/literature/free-literature-units.html free literature units, nyl, gothic literature elements, http://coolcarportal.com/literature/gothic-literature-elements.html gothic literature elements, ajr, classical literature, http://coolcarportal.com/literature/classical-literature.html classical literature, :((,

Reply
Re: Globalisation (or Globalization, as you would put it)
hmmm...mb its true , mad tv cast, http://domenmoney.net/cast/mad-tv-cast.html mad tv cast, 532108, legally blonde cast, http://domenmoney.net/cast/legally-blonde-cast.html legally blonde cast, mdraa, whole nine yards cast, http://domenmoney.net/cast/whole-nine-yards-cast.html whole nine yards cast, mcxm, paper bag supplier, http://moneydomen.com/paper/paper-bag-supplier.html paper bag supplier, 461,

Reply
Re: Globalisation (or Globalization, as you would put it)
best of the best it is, free kmart gift cards, http://stardomen.net/gift/free-kmart-gift-cards.html free kmart gift cards, 187612, free 75 gift cards, http://stardomen.net/gift/free-75-gift-cards.html free 75 gift cards, =[, wedding gift baskets, http://stardomen.net/gift/wedding-gift-baskets.html wedding gift baskets, %((, food gift baskets corporate gifts, http://stardomen.net/gift/food-gift-baskets-corporate-gifts.html food gift baskets corporate gifts, %)),

Reply
Re: Globalisation (or Globalization, as you would put it)
best of the best it is, nonprofit supplies, http://domenmoney.com/nonprofit/nonprofit-supplies.html nonprofit supplies, 99268, usa nonprofit grantwriter, http://domenmoney.com/nonprofit/usa-nonprofit-grantwriter.html usa nonprofit grantwriter, 77908, nonprofit accounting, http://domenmoney.com/nonprofit/nonprofit-accounting.html nonprofit accounting, %]]], grace + new york + nonprofit, http://domenmoney.com/nonprofit/grace-+-new-york-+-nonprofit.html grace + new york + nonprofit, idvly,

Reply
Re: Globalisation (or Globalization, as you would put it)
, gambling addiction casino vs lottery, http://moneydomen.net/addiction/gambling-addiction-casino-vs-lottery.html gambling addiction casino vs lottery, bamrws, alcohol addiction counselors, huntsville, alabama, http://moneydomen.net/addiction/alcohol-addiction-counselors,-huntsville,-alabama.html alcohol addiction counselors, huntsville, alabama, pbzkd, internet addiction disorder, http://moneydomen.net/addiction/internet-addiction-disorder.html internet addiction disorder, =-]], crystal meth addiction, http://moneydomen.net/addiction/crystal-meth-addiction.html crystal meth addiction, >:]],

Reply
Re: Globalisation (or Globalization, as you would put it)
neploxo tak, i`m glad, bienville steel inc. utility, http://moneydomen.net/utility/bienville-steel-inc.-utility.html bienville steel inc. utility, 22411, 4x4 utility reviews, http://moneydomen.net/utility/4x4-utility-reviews.html 4x4 utility reviews, 8-PPP, make utility trailer, http://moneydomen.net/utility/make-utility-trailer.html make utility trailer, ookqbz, utility copper theft pictures, http://moneydomen.net/utility/utility-copper-theft-pictures.html utility copper theft pictures, 019,

Reply
Re: Globalisation (or Globalization, as you would put it)
Smotri i y4is, ministry of sound ibiza annual, http://domenmoney.com/ministry/ministry-of-sound-ibiza-annual.html ministry of sound ibiza annual, 339580, ministry letters, http://domenmoney.com/ministry/ministry-letters.html ministry letters, qjc, ministry positions, http://domenmoney.com/ministry/ministry-positions.html ministry positions, >:-O, lisa whelchel ministry conference, http://domenmoney.com/ministry/lisa-whelchel-ministry-conference.html lisa whelchel ministry conference, tzet,

Reply
Re: Globalisation (or Globalization, as you would put it)
best of the best it is, handy hints, http://moneydomen.com/hints/handy-hints.html handy hints, >:PP,

Reply
Re: Globalisation (or Globalization, as you would put it)
best of the best it is, harm none layout, http://besthappy.net/none/harm-none-layout.html harm none layout, qxu, link, legend of zelda, twilight princess, http://besthappy.net/twilight/link,-legend-of-zelda,-twilight-princess.html link, legend of zelda, twilight princess, 110796, tree doesn't bloom, http://besthappy.net/bloom/tree-doesn't-bloom.html tree doesn't bloom, %-O, augmentative and alternative communication careers, http://stimultowork.com/careers/augmentative-and-alternative-communication-careers.html augmentative and alternative communication careers, >:-[[,

Reply
Re: Globalisation (or Globalization, as you would put it)
hmmm...mb its true , the afternoon of a fawn, http://besthappy.net/afternoon/the-afternoon-of-a-fawn.html the afternoon of a fawn, 213694, anchorman, afternoon delight, http://besthappy.net/afternoon/anchorman,-afternoon-delight.html anchorman, afternoon delight, wrqk, panic at the disco in the afternoon, http://besthappy.net/afternoon/panic-at-the-disco-in-the-afternoon.html panic at the disco in the afternoon, utuast, nine in the afternoon stylist, http://besthappy.net/afternoon/nine-in-the-afternoon-stylist.html nine in the afternoon stylist, 8]]],

Reply
Re: Globalisation (or Globalization, as you would put it)
you can better, stage decorations, http://domenmoney.com/stage/stage-decorations.html stage decorations, >:(((, walgreens photo coupon, http://moneydomen.com/photo/walgreens-photo-coupon.html walgreens photo coupon, rjq, how do i get a photo on a coffee mug, http://moneydomen.com/photo/how-do-i-get-a-photo-on-a-coffee-mug.html how do i get a photo on a coffee mug, 486836, silicone love dolls, http://moneydomen.com/love/silicone-love-dolls.html silicone love dolls, lnjez,

Reply
Re: Globalisation (or Globalization, as you would put it)
neploxo tak, i`m glad, michigan search engine optimization, http://stimultowork.com/michigan/michigan-search-engine-optimization.html michigan search engine optimization, >:-[[, michigan multimedia presentations, http://stimultowork.com/michigan/michigan-multimedia-presentations.html michigan multimedia presentations, upakb, michigan technology, http://stimultowork.com/michigan/michigan-technology.html michigan technology, %[[, michigan web site design, http://stimultowork.com/michigan/michigan-web-site-design.html michigan web site design, >:P,

Reply
Re: Globalisation (or Globalization, as you would put it)
hmmm...mb its true , sponge cake recipes, http://stimultowork.com/recipes/sponge-cake-recipes.html sponge cake recipes, iqhz, blueberry syrup recipes, http://stimultowork.com/recipes/blueberry-syrup-recipes.html blueberry syrup recipes, xzf, coconut cake recipes, http://stimultowork.com/recipes/coconut-cake-recipes.html coconut cake recipes, 111, baby back ribs recipes, http://stimultowork.com/recipes/baby-back-ribs-recipes.html baby back ribs recipes, 373,

Reply
Re: Globalisation (or Globalization, as you would put it)
, dog treat recipie, http://worktomoney.net/treat/dog-treat-recipie.html dog treat recipie, %-[[, how do you treat ringworm, http://worktomoney.net/treat/how-do-you-treat-ringworm.html how do you treat ringworm, 33238, how do you treat rabbit bites, http://worktomoney.net/treat/how-do-you-treat-rabbit-bites.html how do you treat rabbit bites, =-]], how do you treat a child you know is abused, http://worktomoney.net/treat/how-do-you-treat-a-child-you-know-is-abused.html how do you treat a child you know is abused, 36377,

Reply
Re: Globalisation (or Globalization, as you would put it)
you can better, beginners spells, http://selltocash.net/spells/beginners-spells.html beginners spells, >:DDD, you tube monster jams crash madness 4 hall of carnage, http://stimultowork.com/madness/you-tube-monster-jams-crash-madness-4-hall-of-carnage.html you tube monster jams crash madness 4 hall of carnage, vkki, fish tales restaurant, deland, florida, http://selltocash.net/tales/fish-tales-restaurant,-deland,-florida.html fish tales restaurant, deland, florida, 826863, champaign and caviar by adrianne arpel, http://worktomoney.net/champaign/champaign-and-caviar-by-adrianne-arpel.html champaign and caviar by adrianne arpel, =-],

Reply
Re: Globalisation (or Globalization, as you would put it)
best of the best it is, free nautical charts, http://stimultowork.net/charts/free-nautical-charts.html free nautical charts, 595, lincoln memorial facts, http://worktomoney.net/facts/lincoln-memorial-facts.html lincoln memorial facts, =-((, 10 day forecast for winsted mn, http://stimultowork.net/forecast/10-day-forecast-for-winsted-mn.html 10 day forecast for winsted mn, ahf, pheasant feeding, http://worktomoney.com/feeding/pheasant-feeding.html pheasant feeding, lbekq, social studies units, http://worktomoney.com/Studies/social-studies-units.html social studies units, 138, stand up paddle surfing, http://stimultowork.net/surfing/stand-up-paddle-surfing.html stand up paddle surfing, 350,

Reply
Re: Globalisation (or Globalization, as you would put it)
hmmm...mb its true , everything by mary j blige download, http://iwillhappy.com/everything/everything-by-mary-j-blige-download.html everything by mary j blige download, 8P, when everything falls, http://iwillhappy.com/everything/when-everything-falls.html when everything falls, 02841, everything will be alright, http://iwillhappy.com/everything/everything-will-be-alright.html everything will be alright, >:]]], everything lighthouse, http://iwillhappy.com/everything/everything-lighthouse.html everything lighthouse, pat,

Reply
Re: Globalisation (or Globalization, as you would put it)
hmmm...mb its true , west point stevens, http://iwillhappy.com/point/west-point-stevens.html west point stevens, %[, melting point of iron, http://iwillhappy.com/point/melting-point-of-iron.html melting point of iron, :-DD, best time to visit cedar point, http://iwillhappy.com/point/best-time-to-visit-cedar-point.html best time to visit cedar point, ndnqvf, fal 3 point tactical sling, http://iwillhappy.com/point/fal-3-point-tactical-sling.html fal 3 point tactical sling, >:P,

Reply
Re: Globalisation (or Globalization, as you would put it)
hmmm...mb its true , length converter, http://iwillhappy.net/length/length-converter.html length converter, hkqh, length of esophagus, http://iwillhappy.net/length/length-of-esophagus.html length of esophagus, 504, mid length hairstyles, http://iwillhappy.net/length/mid-length-hairstyles.html mid length hairstyles, ftqhpq, length contraction, http://iwillhappy.net/length/length-contraction.html length contraction, 30252,

Reply
Re: Globalisation (or Globalization, as you would put it)
you can better, price chopper, http://iwillhappy.com/price/price-chopper.html price chopper, =-PP, price line, http://iwillhappy.com/price/price-line.html price line, qur, consumer price index, http://iwillhappy.com/price/consumer-price-index.html consumer price index, =-DDD, megyn price, http://iwillhappy.com/price/megyn-price.html megyn price, 612238,

Reply
Re: Globalisation (or Globalization, as you would put it)
best of the best it is, learning time management skills, http://iwillhappy.net/learning/learning-time-management-skills.html learning time management skills, soxm, learning to draw cartoons, http://iwillhappy.net/learning/learning-to-draw-cartoons.html learning to draw cartoons, aiyeb, trial and error learning, http://iwillhappy.net/learning/trial-and-error-learning.html trial and error learning, 15026, social learning by bandura, http://iwillhappy.net/learning/social-learning-by-bandura.html social learning by bandura, zvmn,

Reply
Re: Globalisation (or Globalization, as you would put it)
, read the bill of rights, http://iwillhappy.com/read/read-the-bill-of-rights.html read the bill of rights, 376, where can i read my fortune, http://iwillhappy.com/read/where-can-i-read-my-fortune.html where can i read my fortune, 7366, read bible email, http://iwillhappy.com/read/read-bible-email.html read bible email, adpkqi, read full books online, http://iwillhappy.com/read/read-full-books-online.html read full books online, isrlp,

Reply
Re: Globalisation (or Globalization, as you would put it)
Hmm - two lines got filtered out here, presumably because they're native HTML. Not sure of the syntax I should use, so see if you can make sense of this:

generateXMLChartData.aspx
===========================
Insert at the second line in the file (below >%@ Page Language="C#" %< ):
>%@ Import Namespace="System" %<





Reply
Access denied on /admin/manageaccess.aspx
Everything is working exept for admin page. If I try to browse the /admin/manageaccess.aspx page directly I get the "access denied" message.

- My server is not member of the domain.
- LDAP require authentification
- The web server is on DMZ
- WI 4.2, Win2k3, CSG 2.0
- I can add users manually for testing but...

1) How LDAP query can work if the LDAP server is not specified ?
2) I'm not a programmer, but is it possible to include LDAP parameters like it's included in the Victor Viudez restrict access code (LDAP Server, Username, password) ?
http://www.thomaskoetzing.de/index.php?option=com_content&task=view&id=57&Itemid=97

3) Otherwise, how can I restrict access to the Citrix Web Interface with the Access Control Center ?

Tks

Reply
Re: Access denied on /admin/manageaccess.aspx
Turn on integrated authentication for /admin

Reply
Access Denied for Manager
I've attempted every combination I can think of to get the Admin Access to work. I'm not sure what could be going wrong. I went through all the other posts and tried any fixed I found. Here is a copy of my web.config:































I have several domain in my forest as well, so that may add to the issue.

PreWin2k should be PHOTO\Domain Admins
AD is photo.com.

The web server is joined to the root domain.

Thanks for any help you can provide.



Reply
Re: Access Denied for Manager
I think the permissions thing is a common thread. Could anyone show what they have put in for the LDAP values?

key="LDAPDomain" value="????"

key="ManagementGroup" value="???\???"

Reply
Re: Access Denied for Manager
Didn't like my pasting of code.


#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#

Reply
Re: Re: Access Denied for Manager
Dang.






Reply
Re: Re: Re: Access Denied for Manager
Dang again. Sorry.


key="LDAPDomain" value="us.photomask.com"

key="ManagementGroup" value="USDPI\Domain Admins"

Reply
Hide Applications based on user name
I want to hide a applications based on a username. I am using a WI4.5 and Metaframe 1.0 Fr2

Reply
Access Denied for Manager
If you are having problems accessing the "Manage Access" portion of the program make sure "Enable Anonymous Access" is UNCHECKED and "Integrated Windows authentication" is CHECKED in the IIS settings for this specific Virtual Directory under Directory Security tab/Authentication and access control.

Reply
Updated URL for text based version
I have a relatively small install where the text based version would work just fine. However, the URL at the top of this listing is no longer valid. Does anyone know a current url for that version of this solution?

Reply
ASP error message when loading admin page
I have set up the WIACC and and trying to access the administration page to add users. However as soon as I log into the admin page i get the following message: Server Error in '/' Application. -------------------------------------------------------------------------------- Runtime Error Description: An application error occurred on the server. The current custom error settings for this application prevent the details of the application error from being viewed. Details: To enable the details of this specific error message to be viewable on the local server machine, please create a tag within a "web.config" configuration file located in the root directory of the current web application. This tag should then have its "mode" attribute set to "RemoteOnly". To enable the details to be viewable on remote machines, please set "mode" to "Off". Can anyone lead me in the right direction here

Reply
Will this app still work with Web Interface 4.6
I am trying to configure this with WI 4.6, but some of the site folder structure has changed. Is is possible to to modify the install to work with 4.6?

Reply
getting unauthorized access
I've got most everything working at this point, except, when I manually key in usernames into WI_Include table OR do it through the Manage Access UI, I continue to get "Unauthorized Access", even when my username is in the database. Also no data is populating the usage calendar. At this point, I would just like the restricted access to work! any help would be great, thanks

Reply
Re: getting unauthorized access
From the details you provided of your issue, it sounds like there might be a SQL communication issue from your Web Interface server to the SQL server. Ensure that you can telnet from your WI server to your SQL server on port 1433. Also, when using SQL Express, remote access is disabled by default. Make sure remote access is enabled for your SQL instance.

Reply
E-directory
Hey Jason....looks like an awesome product. Can this be configured to work with e-directory?

Thanks,
Jason

Reply
Re: E-directory
Everything would work with the exception of the user interface to add users to the "allowed" list. You would need to manually add them to the SQL table.

Reply
Access Denied - ManageAccess
I have set this up on my web server following the information on this page and in the setup doc. Everything is working except for the manageAccess. When I go there, I get an access denied. My setup is as follows. Web server in the DMZ (not part of the domain) SQL installed on WEB server LDAP port opened on the firewall I have tested LDAP communication with Softerra LDAP Browser, ldp.exe, and also adsiedit. The only way LDP works with no input but Softerra and adsiedit require credentials to access the domain (user name and password). This is in the form of domain/user. I am thinking this is why I am getting a access denied from the ManageAccess page. For another test I changes the ManageAccess.aspx.cs and removed the Response.End() line. This allow the page to display but gave an error under the Non-Members stating "Logon failure: unknmown user name". Is there any way to add this information to the script so that the scripts can access the AD, or have a prompt come up asking for this information

Reply
Re: Access Denied - ManageAccess
Does your IIS website allow anonymous authentication?

Reply
Re: Re: Access Denied - ManageAccess
No it does not.

Reply
Re: Re: Re: Access Denied - ManageAccess
any suggestions?

Reply
Internal error on WI4.6
I installed everything and I am able to add/deny users. However, I do have 2 errors which do not allow me to use the application as of this moment. When entering the Citrix WebInterface (4.6 with CSG in DMZ) I get an internal on the "default.aspx" file where I load the WIACC.cs.
Also, in the management interface, when I click to filter "DeniedLogins" in the userdata I get an error saying the selected index for lbUsers does not exist (perhaps OK since the app doesn't work for me ?)

Can anyone clarify, has anyone installed this on 4.6 yet ?

Reply
Re: Internal error on WI4.6
OK, I no longer get the internal error. But even though I added users, I always get that it is not allowed. I can telnet to the SQL server from my WI/DMZ server. I can setup an ODBC connection as well, AND I can see the users in the DB table. Anyone ?

Reply
Re: Re: Internal error on WI4.6
Ok, finally got everything to work (stupid SQL issue), but now it seems that the AccessLog table remains empty. Do I need to do anything to get it up & running ? Adding/removing users works without problems.

Reply
Thanks Jason
All working after a few tweaks with WI4.5 and CSG 3.0
only thing is i would love to be able to get an email notification when people try and connect.


Reply
Download
Does anyone know whre i can download: http://www.ipm.com/home/freecode/RestrictedUsers.zip? There is no zip file at ipm.com anymore?

Regards,
Paul

Reply
Tweaks for WI4.6 and SG 3.0
What tweaks would be required for WI4.6 and SG 3.0

I get "An internal error has occurred" on the WI login


Reply
Re: Tweaks for WI4.6 and SG 3.0
I received the same error until I did this:

In the default.aspx file, what I did was I edited the line that was to be copied there to and pasted it at the top below the line instead of before

I copied and pasted the errorPage.html in the same directory as WIACC.cs (\AccessPlatform\app_data\site\serverscripts). I edited the line

Server.Transfer("../auth/errorPage.html");
to
Server.Transfer("../app_data/site/serverscripts/errorPage.html");

This worked for me

Reply
Re: Re: Tweaks for WI4.6 and SG 3.0
For some reason, when I posted it omitted a couple of things so I'll
re-write the first sentence:
Copy the line, what is in between the parenthesis
()
and paste it below
()
instead of before ()


Reply

 
Post your comment:
Posting as: Guest. Don't want to post as Guest? Login or Register.
Title:  
Comment:  
Verification Code: