NFUSE 1.6 IIS, and XML service

[dflanagan]

Hello!
specs: Nt 4.0 TSE/ Metaframe 1.8 SP 2 FR 1

`
I am having an issue with NFUSE 1.6 IIS 4.0, and the XML service.

I downloaded Nfuse 1.6, and installed everything. I then try to access it through a browser. That works fine also, until I am outside my firewall. Now, I know how to operate my firewall (Cisco PIX), but my question is this:

I read in the Nfuse documentation(nfuse_guide.pdf page 26):

"Internet Information Server can be used to perform some tasks associated with the Citrix XML Service. This procedure is not a required step in Web server configuration and is intended for those administrators who want to integrate the functionality of the Citrix XML Service with a Web server’s HTTP service. Plugging the XML Service into IIS lets you use a single TCP/IP port for both Web server and NFuse traffic and eliminates the need for opening additional ports for NFuse in network firewalls."

So, If I am reading this right, I can take my ISS box, and route traffic THROUGH it to the Citrix server. This way, only my web server (separate box) needs NAT translation, and then it will in turn talk to the Citrix server for me, and respond back to me for the Citrix server.

It then says:
"Locate the following files on a MetaFrame server that has Service Pack 2 or MetaFrame XP installed: Wpnbr.dll, Ctxxmlss.txt, and Clm.dll. The default installation location is %SystemRoot%\System32\."

Well, I DO NOT HAVE "clm.dll" it is NOT on my citrix server ANYWHERE!!!

So, as I read on, it tells me to:
"Edit the SessionField.NFuse_CitrixServer parameter in NFuse.conf file to specify the address of the NFuse Web server and the SessionField.NFuse_CitrixServerPort parameter to specify the IIS port (80 by default)".

IS this the webserver, and the Citrix server's XML service port number?


ANYWAY, I only have a few REAL ip addresses from my ISP, and if this is true that I can make Nfuse happen with the ip of my webserver, then that is great!! I will then run this with encryption (Verisign), and have a nice solution for my users! At this point, I am stuck.... where can I get this "clm.dll" file (if that is what is wrong), and how do I set up this nfuse.conf file to point to the correct boxes (Web or Citrix server)????

Any help would be GREATLY appreciated!!

Dave

 

[dflanagan]

IS ANYONE accessing their Citrix server using NFUSE, and ONLY one REAL ip address? (separate web server and Citrix boxes)

 

[mbarlam]

there are many notes on the firewall issue. Such as entering in the alternate address for the machine (if you are doing it this way). See if you can connect just using the Program Neighborhood. If you can't, try looking in those setting first.

 

[dflanagan]

I found out alot more about it since I posted last. I actually have it working the normal way. My problem is that once the authentication happens through the webpage (mine is SSL 128 bit encrypted), the Web client then talks directly to the Metaframe server via port 1492 (I did use the Altaddr command, and edited the nfuse.conf to tell it to use the altaddr- now it works through the firewall). This is NOT a secure link..... I was assuming if there was a way to get it to talk THROUGH the web server, then I could secure the entire communication with SSL. I was assuming that that is what they mean in the quote I included in my post above.....

Thx for replying... was beginning to think no one knew!