Running Netscaler with an access gateway. User is ...
# citrix-storefront
j
Running Netscaler with an access gateway. User is authenticated with OAuth on an external IdP. Citrix FAS is in place. Intermittently users have no resources in Storefront but the username is displayed. After waiting some time / refreshing the browser resources become visible. We troubleshooted every part of the Citrix chain but all looks just fine. No errors or warnings or whatsoever. It’s unknown when this behavior started. • Netscaler 14.1 (latest) • CVAD 2402 LTSR CU1 Have you got any clues?
j
Nothing in the Citrix Delivery Services log on Storefront?
s
Would go for a network issue to talk to Delivery Controllers, or Delivery Controllers to talk to Domain Controllers. FAS are not yet in the loop. Would go for: • firewall • routing • dns
j
@Jeff Riechers nothing what rings a bell for me.
@Steven Lemonier I don’t expect a network issue myself. Then the problem would be consequent and not intermittent. I’d love to hear your thoughts about this.
j
As mentioned, assuming you're running more than one Storefront server behind a LBVIP, make sure to check the Citrix Delivery Services log on each StoreFront server (the one you provided a screenshot of). Filter the log for Warning, Error, and Critical entries. It almost seems like one of your brokers is not reliably returning results on the XML services, which could explain the intermittent behavior. Here's a short script that will prompt you for the names of your Storefront servers...then check the aforementioned logs for errors, assuming Invoke-Command is not blocked by security.
Copy code
# Prompt the user to enter a comma-separated list of server names
Write-Host "Please enter a comma-separated list of server names (e.g., Server1, Server2):"
$serverList = Read-Host "Enter server names"

# Split the input into an array of server names
$servers = $serverList -split ',' | ForEach-Object { $_.Trim() }

# Confirm the server list with the user
Write-Host "You entered the following servers:"
$servers | ForEach-Object { Write-Host "- $_" }

# Run the Invoke-Command with the provided server list
Invoke-Command -ComputerName $servers -ScriptBlock {
    Get-WinEvent -LogName 'Citrix Delivery Services' -FilterXPath "*[System[(Level=1 or Level=2 or Level=3)]]" |
    Select-Object -Property TimeCreated, LevelDisplayName, Message
} | Out-GridView
j
@Jon Bucud Each screenshot is of one of two Storefront servers. I’ll definitely look into ‘It almost seems like one of your brokers is not reliably returning results on the XML services, which could explain the intermittent behavior.’
Thanks guys. I’ll keep you posted.
Ultimately, it turned out to be a user-related issue. After updating the configuration for the affected users at the IdP, the problem was resolved.
j
Thanks for circling back and providing your resolution