This message was deleted.
# citrix-netscalers
Slackbot
08/21/2020, 12:54 PMThis message was deleted.
e
Eirik Vesterhus / Intility AS
08/21/2020, 2:38 PMThis is OWA with AAA-TM, by the way. Worked perfect for years but now Chrome users get stuck in a loop after logon. Other browsers work fine. I assume it has something to do with SameSite:None requiring secure.
https://www.chromestatus.com/feature/5633521622188032
If I invalidate the SSO by replacing cadata in the form sso profile with a dummy value, the loop is gone (but sso fails of course).
HTTP.RES.SET_COOKIE.COOKIE("cadata").VALUE("cadata").LENGTH.GT(50)
I do not believe we are doing anything custom here. This is a setup that should be supported by Citrix. I also assume others will get hit by this.
To add - our exchange guys apparently upgraded their environment to the latest CU's "not long ago".
Yes - I work with @Sebastian Parelius 🙂
Eirik Vesterhus / Intility AS
08/21/2020, 3:31 PMRight - so changing the backend servicegroup from http to https solved it. Makes sense.
I guess the rewrite from this article also will fix it. Will test it later.
https://support.citrix.com/article/CTX138055
j
Julian Jakob
08/21/2020, 4:15 PMFollowing, as switching from https to http is no option for me here.
e
Eirik Vesterhus / Intility AS
08/22/2020, 5:53 AMI have read through the Citrix ADC documentation and articles regarding SameSite and I do not feel this scenario is covered (app cookies with https frontend and http backend).
Please tell me I am wrong.
This article should be updated in regards to the latest Chrome enforcements.
https://support.citrix.com/article/CTX269469
Eirik Vesterhus / Intility AS
08/24/2020, 9:34 AMI can confirm the rewrite works with OWA + HTTP backend. Probably for other SSL Offloaded applications aswell.
✔️ 1
3 Views