Anyone else having major issues with NS14.1 66.59.nc? upgraded last night and under load this morning, user's can't login

What type of Auth are you using? Anything in the /tmp/aaad.debug log?

SAML/Entra ID. i'm waiting in the queue on citrix support so they can look at the bundle. still looking at logs too

what is the experience? do they get an error, redirected to Entra?

Did you try this? The Netscaler firmware 60.x and 66.x enable 'Secure Private Access' in gateway global settings. You have to disable it to resolve the issue. Netscaler Gateway -> Global Settings -> Change Global Settings -> Security -> Secure Private Access -> Disabled

is there a doc you're referencing?

Found it here, with some people getting intermittent cannot complete request. https://community.citrix.com/forums/topic/258860-cannot-complete-your-request-after-netscaler-141-6659/

image.png

Darn, was hoping that fixed it for you.

ughhh.. there's no aaa debug log in the support bundle?

Users can’t login into a normal icaproxy gateway? Dit you check the STA binding “issue”?

Maybe I missed this somewhere? STA doesn't come into play at login?

for STA: at session launch/reconnect, not at 'login' per se