List Archives

This forum is an archive of all posts to our mailing list over the past few years. The forum is set read only therefore to contribute you will need to join our list community. See more info about this here.

When subscribed to the list you should use your standard email client to send your posts to ActiveDir@mail.activedir.org.

List Archives

Unanswered Active Topics

Forums Search

Forums >ActiveDir Mail List Archive >List Archives

Subject: [ActiveDir] Active Directory and Citrix authentication

Prev Next

You are not authorized to post a reply.

Author

Messages

Johnchristie11 User is Offline

Posts:44

06/25/2010 1:01 PM
Hey folks.... I have two Active Directory Forests in which I want users from Forest A to authenticate to a Citrix farm in Forest B via a Web Interface using their Forest A credentials. Am I right in thinking I'll need to do the following: * create a one way forest trust (or two way depending on other requirements) * create domain local groups in Forest B and configure them for access to a published resource. * add a global group containing users in Forest A to the domain local group in Forest B to allow them access to the published resource? Both are Windows 2003 Active Directory Forests. thanks

pbbergs

Posts:281

06/25/2010 1:18 PM
It all depends. I would recommend you do so your users can use a single set of user credentials and then yes you should be able to do as you have described. Just make sure you are at 2003 FFL/DFL http://technet.microsoft.com/en-us/library/cc755692(WS.10).aspx Otherwise w/o the trust all Citrix users would have to maintain two sets of credentials. Thanks Paul From: activedir-owner@mail.activedir.org [mailto:activedir-owner@mail.activedir.org] On Behalf Of John Christie Sent: Friday, June 25, 2010 7:00 AM To: activedir Subject: [ActiveDir] Active Directory and Citrix authentication Hey folks.... I have two Active Directory Forests in which I want users from Forest A to authenticate to a Citrix farm in Forest B via a Web Interface using their Forest A credentials. Am I right in thinking I'll need to do the following: * create a one way forest trust (or two way depending on other requirements) * create domain local groups in Forest B and configure them for access to a published resource. * add a global group containing users in Forest A to the domain local group in Forest B to allow them access to the published resource? Both are Windows 2003 Active Directory Forests. thanks

You are not authorized to post a reply.

Forums >ActiveDir Mail List Archive >List Archives > [ActiveDir] Active Directory and Citrix authentication

ActiveForums 3.7

Syndicate

Friends

List Archives

List Archives

Friends

Members

Articles

Related Links

Ads