citrix ica client 11.0 on linux (fedora 9)

| 2 Comments

back in may of 2008 i set up a fedora 9 desktop, then installed the citrix 10.6 client on it. (see: citrix ica client 10.6 on fedora 9 blog entry)

although i'm still running the fedora 9 desktop (i'll update it one of these days...really), i just recently decided to update my citrix ica client to the 11.0 version. the instructions are somewhat similar to the 10.6 install, but not quite...

[1] unlike the 10.6 version that needed libXm.so.3, with the 11.0 citrix ica client you need libXm.so.4; however, as with libXm.so.3, libXm.so.4 is a part of openmotif. which isn't on modern versions of fedora. you can get libXm.so.4 from the last time fedora included openmotif, which is fedora core 5:

wget http://archive.fedoraproject.org/pub/archive/fedora/\
linux/core/updates/5/i386/openmotif-2.3.0-0.1.9.3.i386.rpm

the openmotif-2.3.0 rpm doesn't appear to have the dependency problems that the openmotif-2.2.3 rpm had, so you can just do a normal rpm install on it:

rpm -ivh openmotif-2.3.0-0.1.9.3.i386.rpm

[2] now get the citrix 11 client...

http://www.citrix.com/English/ss/downloads/details.asp?downloadId=3323&productId=186&c1=sot2755

download the x86 rpm (as compared to the tar.gz or the arm client)

now install it:

rpm -ivh ICAClient-11.0-1.i386.rpm

(since i didn't do a from-scratch install, i don't know if libXp.so.6 is still required for the 11.0 citrix ica client, but if your install attempt complains about libXp.so.6, just run "yum install libXp" as root.)

the ica client is installed in /usr/lib/ICAClient
(that means wfcmgr, wfica, and so on are in that dir)

once done, it'll show up in your menu in Applications -> Internet -> Citrix Receiver

some other stuff you might want to do:

[3] as root:
ln -s /usr/lib/ICAClient/npica.so /usr/lib/mozilla/plugins/
(or put it in your own personal mozilla plugins area if you don't want to do it as root. that would be ~/.mozilla/plugins if you didn't know. create it if it doesn't exist.)
[3a] if you kept selinux active, it will end up complaining later on. if so, do this:
chcon -t textrel_shlib_t /usr/lib/ICAClient/npica.so
[4] restart firefox.
in the address bar, type "about:plugins" and look for the citrix client in the list.

[5] to get the citrix apps to show up as icons in your applications menu...
Applications -> Internet -> Citrix Receiver
Tools -> Settings
Preferences drop menu, choose Citrix XenApp
in Server, Server URL, click [Change...]
in the "Server URL" box, put: http://your.citrix.server.url
[OK]

(it should figure out the rest of the url path if you just get the citrix server fully qualified domain name right.)

you might have to close and re-open citrix receiver, but you will get a citrix (xenapp) logon box...
username:
password:
domain:
[OK]

once you're done with that, a "Citrix" folder will be added to your Applications menu.
in that are the icons for your available citrix apps. (note that the web-based citrix stuff runs differently than the desktop/icon stuff, as far as paths/protocols. or at least that's what i was led to believe. i'm just a citrix end user, okay?)

if you get an error:
You have not chosen to trust the "Thawte Premium Server CA", the issuer of the server's security certificate (SSL error 61).

then your citrix ica client needs a new thawte root cert. to resolve this, do this (as root):
# cd /usr/lib/ICAClient/keystore/cacerts
# wget http://www2.slac.stanford.edu/computing/windows/\
services/citrix/downloads/ThawteRoot.crt

enjoy.

as before, i claim no responsibility for any accidental citrixide that may occur by following these steps, or if your fedora install gets borked, or if your cat gets feline diabetes from this, or whatever else may result. you're a big boy or girl and you chose to run linux. figure it out yourself, you lazy good-for-nothing freeloader!

2 Comments

Are you sure that's in English? Looks a little foreign to me!!!!!!!!!!!

You can download the ca-certificates package that comes with Ubuntu. The one in Fedora you get is quite limited.

Here is what I did:
1. goto http://mirrors.kernel.org/ubuntu/pool/main/c/ca-certificates/
2. download ca-certificates_20090701.tar.gz
3. Unpack it, copy to /usr/share/ca-certificates
4. run make at the top level
5. cd /usr/lib/ICAClient/keystore/cacerts
6. ln -s /usr/share/ca-certificates/mozilla/*.crt

my twitter feed

stuff about me