After the 14.1 66.59 upgrade in our test environme...
# citrix-netscalerj
Joseph Jackson
03/23/2026, 11:38 PMAfter the 14.1 66.59 upgrade in our test environment, I'm getting this error in the web client after a successful SAML login:
Http/1.1 Internal Server Error 43531The non-standard capitalized HTTP is a good fingerprint for this coming from the NetScaler. In the ns.log, the SAML process proceeds normally but then I get this error when the error pops up:
default SSLVPN Message 248 0 : "[SPA] [err=0x02060012] [GET_SPAPROFILE_SERVER] SPA server info is NULL"Reverting to our previous version, 14.1 56.47, makes it work again. I'm not having any luck finding these errors in KBs or other internet resources. Has anyone seen this or have tips to offer?
Joseph Jackson
03/23/2026, 11:49 PMI should have mentioned that I checked the STA URL and it only has https://<fqdn>, as required. Also, I upgraded both nodes of the HA pair initially and that's when I first ran into the problem, so it's not something that only happen mid-upgrade cycle. I reverted to VM snapshots to get back to the old version and everything was happy again. I reapplied the upgrade to just one node and can reintroduce or resolve the problem by flipping primary back and forth.
n
nsvegman
03/24/2026, 6:22 AMI was reminded by this (found at very random looking up SAML issues a month ago, didn't help us) but your error message of SPA server being null.. it's a guess, but check this out.
https://www.linkedin.com/pulse/netscaler-141-upgrade-causing-http-500-43531-saml-5a1we/
j
Joseph Jackson
03/24/2026, 2:04 PMYep, that did the trick! Thanks so much for pointing out that article. I just needed to run "set vpn parameter -securePrivateAccess DISABLED" to fix the issue. I'll file a Citrix Support report to request a KB be created.
n
nsvegman
03/24/2026, 2:06 PMNo problem! =) Happy that a fluke memory was useful this time, haha. Thank you for the update!
5 Views