This post is record to help myself if I ever decide to do a fresh install again, so it might be a bit messy. (Posting helps me keep these untitled files off my hard-drive hehe)
Download the Citrix Linux client (v11) from :-
http://www.citrix.com/English/ss/downloads/index.asp
URL mileage may vary, go back to the home page if its not right.
Unpack the tarball and install… e.g.
tar -xvzf linuxx86-11.0.140395.tar.gz sudo ./setupwfc
Might be missing a ‘cd’ step here obviously…
If run using sudo, default installs to /usr/lib/ICAClient
Confirm it doesn’t run because of libmotif
/usr/lib/ICAClient/wfcmgr
/usr/lib/ICAClient/wfcmgr: error while loading shared libraries: libXm.so.4: cannot open shared object file: No such file or directory
Download a 32bit (i386) Open Motif package from :-
http://ftp.ubuntu.com/ubuntu/pool/multiverse/o/openmotif/
Rip out libXm from it…
$ dpkg -x libmotif3_2.2.3-4_i386.deb ./tmp $ cd ./tmp ~/tmp$ cd usr/lib ~/tmp/usr/lib$ ls libMrm.so.3 libUil.so.3 libXm.so.3 X11 libMrm.so.3.0.2 libUil.so.3.0.2 libXm.so.3.0.2 ~/tmp/usr/lib$ sudo cp libXm.so.3 /usr/lib32/ ~/tmp/usr/lib$ cd /usr/lib32 /usr/lib32$ sudo ln -s libXm.so.3 libXm.so.4
Then this stupid error…
You have not chosen to trust “Equifax Secure Global eBusiness CA-1”, the issuer of the servers security certificate (SSL error 61).
Download the root 1 (Base64) Cert from :-
http://www.geotrust.com/resources/root-certificates/index.html
Change the extension to .crt
Copy it to Citrix Installation Path/ICAClient/keystore/cacerts
$ mv Equifax_Secure_Global_eBusiness_CA-1.cer Equifax_Secure_Global_eBusiness_CA-1.crt
$ sudo cp Equifax_Secure_Global_eBusiness_CA-1.crt /usr/lib/ICAClient/keystore/cacerts/
Set firefox to open the ICA with /usr/lib/ICAClient/wfica
Voila…
Need to tidy this post up in the future
Thanks for this guide! It was very helpful.
I double that, thank you, one of the simpler instructions to install citrix on ubuntu x64.
Fantastic, I needed this. Now it works for me.
I feel like a fool because seems to have worked for everyone. I’ve used various version of Linux on and off but it has been awhile. I probably doing somethings really stupid but I can’t seem to get this to work.
I’ve downloaded the tar.gz to ./tmp
Unpacked per your instruction but when I run the setup script I get the following errors.
I feel like a fool because seems to have worked for everyone. I’ve used various version of Linux on and off but it has been awhile
/tmp/./linuxx86/hinst: 179: /tmp/./linuxx86/echo_cmd: not found
/tmp/./linuxx86/hinst: 180: /tmp/./linuxx86/echo_cmd: not found
/tmp/./linuxx86/hinst: 181: /tmp/./linuxx86/echo_cmd: not found
/tmp/./linuxx86/hinst: 182: /tmp/./linuxx86/echo_cmd: not found
/tmp/./linuxx86/hinst: 2467: /tmp/./linuxx86/echo_cmd: not found
/tmp/./linuxx86/hinst: 2484: /tmp/./linuxx86/echo_cmd: not found
/tmp/./linuxx86/hinst: 2484: /tmp/./linuxx86/echo_cmd: not found
what I’m I doing wrong?
So which version of Linux are you using? While it shouldn’t be the problem, any reason you’re unpacking into /tmp instead of in your home directory (Are you doing it to /tmp or “./tmp”)? Where do the errors come from? From the setupwfc script?
I think this means you need to cd back one level. When you extract the tarball, it drops the install script (setupwfc) in the same directory in which you extracted it. Don’t cd into the linuxx86 dir.
I just ran into this same problem on a new install
Edited the setupwfc script and made the following change (Comment out the ECHO_CMD line and add the second)…
#ECHO_CMD=”${PLATFORM_PACKAGE_DIR}/$TR_FILE” export ECHO_CMD
ECHO_CMD=echo
OMFG. It took me an hour to fix this when installing Citrix on Oneiric x64, and your post was the trick that finally worked. Thank you, thank you, thank you.
Hi,
Still have the stupid error…
You have not chosen to trust “Equifax Secure Global eBusiness CA-1″, the issuer of the servers security certificate (SSL error 61).
after doing this:
Download the root 1 (Base64) Cert from :-
http://www.geotrust.com/resources/root-certificates/index.html
Change the extension to .crt
Copy it to Citrix Installation Path/ICAClient/keystore/cacerts
$ mv Equifax_Secure_Global_eBusiness_CA-1.cer Equifax_Secure_Global_eBusiness_CA-1.crt
$ sudo cp Equifax_Secure_Global_eBusiness_CA-1.crt /usr/lib/ICAClient/keystore/cacerts/
-r–r–r– 1 root sys 964 2009-06-17 23:39 Equifax_Secure_Global_eBusiness_CA-1.crt
-r–r–r– 1 root sys 606 2009-06-17 20:11 GTECTGlobalRoot.crt
-r–r–r– 1 root sys 576 2009-06-17 20:11 Pcs3ss_v4.crt
-r–r–r– 1 root sys 568 2009-06-17 20:11 SecureServer.crt
anibal@pingu01:/usr/lib/ICAClient/keystore/cacerts$ cat Equifax_Secure_Global_eBusiness_CA-1.crt
—–BEGIN CERTIFICATE—–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—–END CERTIFICATE—–
anibal@pingu01:/usr/lib/ICAClient/keystore/cacerts$
Something odd happened overnight. I had to add the Root 1 certificate from Equifax following the above procedure.
i.e. Download http://www.geotrust.com/resources/root_certificates/certificates/Equifax_Secure_Certificate_Authority.cer
madox@madox-laptop:~$ mv Equifax_Secure_Certificate_Authority.cer Equifax_Secure_Certificate_Authority.crt
madox@madox-laptop:~$ sudo mv Equifax_Secure_Certificate_Authority.crt /usr/lib/ICAClient/keystore/cacerts/
All is fine again…
Hi Anibal – the only difference between mine and yours looks like my root user has rw access.
madox@madox-laptop:/usr/lib/ICAClient/keystore/cacerts$ ls -l
total 32
-r–r–r– 1 root sys 891 2009-04-29 11:34 BTCTRoot.crt
-r–r–r– 1 root sys 774 2009-04-29 11:34 Class3PCA_G2_v2.crt
-r–r–r– 1 root sys 774 2009-04-29 11:34 Class4PCA_G2_v2.crt
-rw-r–r– 1 madox madox 1162 2009-06-23 22:23 Equifax_Secure_Certificate_Authority.crt
-rw-r–r– 1 root root 964 2009-04-29 11:57 Equifax_Secure_Global_eBusiness_CA-1.crt
-r–r–r– 1 root sys 606 2009-04-29 11:34 GTECTGlobalRoot.crt
-r–r–r– 1 root sys 576 2009-04-29 11:34 Pcs3ss_v4.crt
-r–r–r– 1 root sys 568 2009-04-29 11:34 SecureServer.crt
Actually, it turns out (at least on my Jaunty 64 bit install) that the certs are all already there installed with Firefox.
ls /usr/share/ca-certificates/mozilla and you see a few Equifax certificates.
You can then do something like this to set it up, assuming you installed into /usr/lib/ICAClient
cd /usr/lib/ICAClient/keystore/cacerts
for f in /usr/share/ca-certificates/mozilla/Equifax*.crt; do
sudo ln -s $f .
done
Looks like you can take this excellent idea one step further and just link the whole of /usr/share/ca-certificates/mozilla to BE /usr/lib/ICAClient/keystore/cacert
So instead of Jeremy’s script above, just do this :
sudo mv /usr/lib/ICAClient/keystore/cacerts /usr/lib/ICAClient/keystore/cacerts-old
(just to be on the safe side)
Then:
sudo ln -s /usr/share/ca-certificates/mozilla /usr/lib/ICAClient/keystore/cacerts
This is only a good idea if you access your Citrix through a web page, since it means that as long as you’ve connected to the web interface, you’ve most likely already just downloaded the required certificate to connect to the presentation server thereafter.
I suppose that if you use the program neighbourhood (or whatever it’s called now), you’d be better sticking to a straight copy…
Hmmm…….after downloading/extracting libmotif-dev_2.2.3-4.deb to ./tmp
I get a different list of files:
/tmp/usr/lib$ ls
libMrm.a libMrm.so libUil.a libUil.so libXm.a libXm.so
What did I do wrong?
D’oh!!!!!!! Nevermind, I downloaded the dev library…oops! 🙂
At this step:
/usr/lib/ICAClient/wfcmgr
my result is:
/usr/lib/ICAClient/wfcmgr: error while loading shared libraries: libXm.so.6: cannot open shared object file: No such file or directory
[Note the so.6, not so.4]
The client is v11 3/2/09. ????
Any help appreciated.
Did you try “sudo ln -s libXm.so.3 libXm.so.6” in “/usr/lib32” instead?
Yes. I did that. It had no effect.
Ummmm…..
On second look, my error states that libXp.so.6 can’t be found (not libXm). When I create a link for that, the error then states:
error while loading shared libraries: libXpm.so.4: cannot open shared object file: No such file or directory
Maybe I’ll just start from scratch again.
Great post!
Now I don’t have any excuse to not work from home… 😛
same error. Tried like scaine told. Worked perfectly. Thx a lot!
Somebody tried with Ubuntu 9.10 ? I get: The Citrix SSL Server that you selected is not accepting connections.
Any clue ?
Thanks
I have installed it on 32 bit netbook-remix 9.10 rc and works fine.
Will attempt on 64.
Awesome. Works great, thanks.
I did have to do the Jeremy’s hack of ln-ing the certs from mozilla. Other than that, everything worked great.
Thanks again.
This just worked a treat for me in 64 bit Karmic. THANK YOU SIR! After 2 hours of banging on this last night, your post got me a working citrix connection in 30 minutes this morning.
Thanks again.
Ubuntu 9.04 AMD64 – Connect to the Citrix Access Gateway, am able to log in, but when trying to connect to the list of published apps Firefox displays the following:
Redirect Loop
Firefox has detected that the server is redirecting the request for this address in a way that will never complete.
The browser has stopped trying to retrieve the requested item. The site is redirecting the request in a way that will never complete.
* Have you disabled or blocked cookies required by this site?
* NOTE: If accepting the site’s cookies does not resolve the problem, it is likely a server configuration issue and not your computer.
I’ve verified that cookies are enabled and followed the steps in this post to no avail. When I run /usr/lib/ICAClient/wfcmgr I get the following error:
Citrix XenApp – Cannot Contact the Citrix Server
Citrix XenApp cannot update the configuration information. The server running the Web Interface may not be available or its URL may be incorrect. Also, the configuration file may contain errors or its location may be incorrect.
The URL i am attempting to connect to is https://citrix.hanqual.com. The URL is available and correct (I’m connected to it on a thin client on the other side of my KVM).
with the help of this post, and then the guy that posted at gelbar, the client now works for me in 9.10 64bit. the getlib solved my issue. the latest 11 client from CTX was asking for a libXm.so.6 or something and was just being fussy.
That’s perfect. Works as expected and stable 🙂
Hi ,
I have installed Citrix ICA client 9 on Ubuntu 9.04, I am not getting ant library or cert errors, but when I connect to My citrix Sevrer it failes with error “Network or dial up connection error preventing communications with the Citrix Server”
Please help
Hi,
Thanks for the guide, I got my client working..!
However, I need to implement this install in an unattended (preseeded) linux install. I have a bootscript that runs at login wich now puts libmotif links in place, extracts the citrix package and starts the install, but how to deal with the installer’s questions unattended?
My noob head says something like “echo ‘answers’ | ./setupwfc”…?
Thanks,
J
Thanks, working on ubuntu 10.04, you saved me a lot of time !
check the electrical wiring, thats the only reason for ssl 29 and 38 errors in citrix/linux ubuntu…….thats what my IT is telling me
http://support.citrix.com/article/CTX113309
Still solid advice a year and a half after you published this blog… got Citrix working in 64bit Ubuntu 10.04 with this guide. Thanks a lot Madox!!!
Hi,
when the line “./linuxx86/echo_cmd: not found” appears, just install ia32-libs (apt-get install ia32-libs).
Maybe you can had this to your guide.
Just wanted to post to say thank you for this guide! Steps worked flawlessly and was immediately able to open the Citrix apps I needed to thanks to this quick and easy guide. I appreciate it!