Wisp

Web Interface for Microsoft SharePoint 2007
Administrators Guide
Citrix Web Interface for Microsoft SharePoint 2007
Use of the product documented in this guide is subject to your prior acceptance of the End User License Agreement. Note that
copies of the End User License Agreement are included in the root directory of the installation media.
Copyright and Trademark Notice
Information in this document is subject to change without notice. Companies, names, and data used in examples herein are
fictitious unless otherwise noted. Other than printing one copy for personal use, no part of this document may be reproduced or
transmitted in any form or by any means, electronic or mechanical, for any purpose, without the express written permission of
Citrix Systems, Inc.
Copyright 2007 Citrix Systems, Inc. All rights reserved.
Citrix, ICA (Independent Computing Architecture), and Program Neighborhood are registered trademarks and Citrix
Presentation Server, Citrix Access Suite, and SpeedScreen are trademarks of Citrix Systems, Inc. in the United States and other
countries.
Trademark Acknowledgements
Java, Sun, and SunOS are trademarks or registered trademarks of Sun Microsystems, Inc. in the U.S. and other countries.
Microsoft, MS-DOS, Windows, Windows NT, Win32, Outlook, Office, Internet Information Services, SharePoint, SQL Server,
ActiveX, and Active Directory are either registered trademarks or trademarks of Microsoft Corp. in the United States and/or
other countries.
Novell Directory Services, NDS, and NetWare are registered trademarks of Novell, Inc. in the United States and other
countries. Novell Client is a trademark of Novell, Inc.
UNIX is a registered trademark of The Open Group.
All other trademarks and registered trademarks are the property of their owners.
Last Updated: September 18, 2007 (GR)
C ONTENTS
Contents
Chapter 1
Introduction
How to Use this Guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .5
Accessing Documentation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .5
Introducing the Web Interface for Microsoft SharePoint . . . . . . . . . . . . . . . . . . . . .6
The Web Interface for Microsoft SharePoint Features . . . . . . . . . . . . . . . . . . . . . . .7
Citrix Application Delivery Web Part . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .7
Application Streaming Support. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .7
Content Redirection. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .7
Citrix HTTP Request Redirection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .8
Citrix Context Menu Integration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .8
Citrix New Menu Integration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .8
Client Detection and Deployment Process . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .8
Integration with SharePoint Administration . . . . . . . . . . . . . . . . . . . . . . . . . . . . .9
Integration with SharePoint Navigation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .9
Other Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .9
File Locations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .10
Chapter 2
Planning Your Deployment

SharePoint Deployments . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .11
Points to Note . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .12
Secure Gateway Deployment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .12
Secure Gateway and Proxy Servers. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .13
Chapter 3
Installing the Web Interface for Microsoft SharePoint

System Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .15
Operating System Requirements. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .15
Other Requirements. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .16
SQL Server Requirements. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .16
Installing the Web Interface for Microsoft SharePoint . . . . . . . . . . . . . . . . . . . . . .16
Post-Installation Tasks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .20

Allowing Users to Access Presentation Server Resources from a
SharePoint Site . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .20
Customizing the Appearance of the Web Part . . . . . . . . . . . . . . . . . . . . . . . . . .20
Advanced Customization of the Web Part User Interface . . . . . . . . . . . . . .22
Troubleshooting the Web Interface for Microsoft SharePoint Installation . . . . . . .22
Using the Site Deployment Tool. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .22
Using Log Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .23
Uninstalling the Web Interface for Microsoft SharePoint . . . . . . . . . . . . . . . . . . . .23
Before Uninstalling the Web Interface for Microsoft SharePoint . . . . . . . . . . .23
Uninstalling the Software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .24
After Uninstalling the Web Interface for Microsoft SharePoint . . . . . . . . . . . .27
Chapter 4
Configuring the Web Interface for Microsoft SharePoint

Using the Citrix Administration Pages. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .29
Managing Global Farm Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .29
Managing Farms . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .30
Managing Sessions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .31
Managing Clients. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .32
Managing Single Sign-On. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .33
Managing Delivery Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .35
Managing Content Redirection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .36
Advanced Administration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .37
Configuring Security Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .37
Configuring the Web Interface for SharePoint with Secure Gateway . . . . . . . .37
Configuring the Web Interface for SharePoint with Access Gateway. . . . . . . .39
Configuring the Web Interface for SharePoint with HTTP or
SOCKS Proxies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .40
Appendix A
Web Interface Configuration File Settings
Appendix B
Troubleshooting Application Definitions

Index. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .55
C HAPTER 1
Introduction
The Citrix Web Interface for Microsoft SharePoint 2007 allows you to deliver
Presentation Server published applications and resources in a SharePoint 2007
environment. You embed the Citrix Application Delivery Web Part in the relevant
pages within your SharePoint site, allowing users to access their published
applications and content.
Use this document to find information about:
The features that are included in this release of the Web Interface for
Microsoft SharePoint
How to install and configure the Web Interface for Microsoft SharePoint
How to use this documentation
How to Use this Guide

The Web Interface for Microsoft SharePoint 2007 Administrators Guide is for
Citrix administrators and Web masters responsible for installing, configuring, and
maintaining Citrix Presentation Server and the Web Interface for Microsoft
SharePoint. This is a task-based guide to help you set up the Web Interface for
Microsoft SharePoint quickly and easily.
This chapter introduces the documentation and the Web Interface for Microsoft
SharePoint 2007 features. Subsequent chapters explain how to deploy and
configure the Web Interface for Microsoft SharePoint.
This guide assumes knowledge of Citrix Presentation Server, Microsoft
SharePoint, and Internet Information Services (IIS) Manager.
Accessing Documentation
To view, search, and print the PDF documentation, you need to have Adobe
Reader 5.0.5 with Search or Adobe Reader 6.0 through 7.0. You can download
Adobe Reader for free from Adobe Systems Web site at http://www.adobe.com/.
Introducing the Web Interface for Microsoft SharePoint

The Web Interface for Microsoft SharePoint 2007 provides SharePoint users with
access to Citrix Presentation Server resources using a Web browser. SharePoint
offers two levels of browser support, with level one supported browsers
recommended for administrative tasks. Level one browsers rely on ActiveX
controls and are supported only on Windows operating systems. Level one
supported browsers are:
Internet Explorer 6.x (32-bit)
Internet Explorer 7.x (32-bit)
Note Application streaming functionality is available only for users of level

one browsers.
Level two browsers support basic SharePoint functionality, allowing users to read
and write in SharePoint sites and perform site administration. These browsers do
not support ActiveX controls, and users may find that not all of SharePoints
features are fully supported. Browsers in this category are:
Netscape Navigator 7.2
Netscape Navigator 8.1
Mozilla 1.7
Firefox 1.5
Browsers not listed above are not supported. You can get more information about
SharePoint browser support and browser compatibility with particular SharePoint
features from the Microsoft Web site, www.microsoft.com/.
You can deploy the Web Interface for Microsoft SharePoint 2007 on Microsoft
Windows SharePoint Services 3.0 and Microsoft Office SharePoint Server 2007.
Chapter 1
Introduction
The Web Interface for Microsoft SharePoint Features

The Web Interface for Microsoft SharePoint 2007 includes the following
functionality.
Citrix Application Delivery Web Part

The Citrix Application Delivery Web Part displays resources to users that they
can access in a Citrix server farm. It also allows them to launch these resources.
Packaging this as a Web Part allows a SharePoint Web Designer to add the ability
to access these resources from any page in the SharePoint site.
Application Streaming Support

Application streaming allows the delivery of streamed applications, if
applications are configured for streaming on the server. The Streaming Client
must be downloaded for users to access streamed applications. For more
information about configuring your deployment to support application streaming,
see Managing Delivery Options on page 35.
Note Application streaming is available only when connecting to servers

running Citrix Presentation Server 4.5 or later.
Content Redirection
Content redirection allows users to access content stored in the SharePoint site
using published applications. This is important if users cannot install applications
locally.
Content redirection includes three features: Citrix HTTP Request Redirection,
Citrix Context Menu Integration, and Citrix New Menu Integration. These
features provide more control over how users access their resources. Content
redirection works over the whole SharePoint site, and integrates with HTML
links.
Content redirection requires the remote application to be able to open a document
from a URL, and to accept a URL as its first parameter. You can test this on a
computer running Citrix Presentation Server by running the application from a
command prompt, passing a URL as a parameter.
Citrix HTTP Request Redirection

This feature allows users to open SharePoint resources automatically using
applications delivered by Citrix. You can specify which file types open which
published applications. If a published application cannot be launched, you can
configure local fallback to open the document locally instead.
Note Depending on the Internet Explorer security settings in your deployment,

users may be prompted for credentials when opening SharePoint content using
applications delivered by Citrix.
Citrix Context Menu Integration

The Document Center (for SharePoint Server 2007) and Shared Documents (for
SharePoint Services) provide context menus that let users edit files using
applications installed locally. The Web Interface for Microsoft SharePoint 2007
modifies the existing document context menu, allowing users to open and edit
documents using applications delivered by Citrix. This gives users explicit
control over how they access their documents. You can configure which types of
files open which published applications.
Note Depending on the Internet Explorer security settings in your deployment,

users may be prompted for credentials when editing SharePoint content using
applications delivered by Citrix.
Citrix New Menu Integration

Users can choose the Document Delivered by Citrix option from the New menu
in the Document Center (for SharePoint Server 2007) or Shared Documents (for
SharePoint Services) to create a new document using an application delivered by
Citrix. You can configure which document types can be created using which
published applications.
Client Detection and Deployment Process

The client detection and deployment process detects which clients can be
deployed within a users environment and then guides the user through the
deployment procedure, including, where appropriate, configuring the users Web
browser. This ensures that users get an optimal launch experience when accessing
their applications and content.
Chapter 1
Introduction
Integration with SharePoint Administration

You configure and manage the Web Interface for Microsoft SharePoint 2007
using administration pages integrated into SharePoint itself.
Integration with SharePoint Navigation

You can navigate around the Web Interface for Microsoft SharePoint 2007 in the
same way you navigate around SharePoint itself; for example, using the Quick
Launch area and the top navigation bar.
Other Features
The Web Interface for Microsoft SharePoint also includes the following
functionality currently available in the Web Interface and Citrix Presentation
Server:
Display of published resources available for the user organized into

Program Neighborhood folders
Access to published resources using seamless connections
Integrated Windows authentication
Workspace control functionality, as follows:
Reconnect
Disconnect
Logout
Zone preference and failover
Secure Gateway support for accessing published resources
Session reliability
Access Gateway support
Farm aggregation, assuming a single set of credentials for all farms
Secure SSL communication with Citrix Presentation Server and the Secure
Ticket Authority
Network address translation (NAT) firewall support
Client-side proxy support
PDA synchronization
Microsoft Forefront support
10
Microsoft SharePoint Designer support
32-bit color icon support
Note 32-bit color icon support is available only when connecting to

servers running Citrix Presentation Server 4.5, with Feature Pack 1.
File Locations
Throughout this document, the following file locations are used:
common files, usually C:\Program Files\Common Files\
webroot, usually C:\inetpub\wwwroot\wss\VirtualDirectories\80\
sharepoint, usually common files\Microsoft Shared\web server

extensions\12\
C HAPTER 2
This chapter contains information about planning your SharePoint deployment,

including the Secure Gateway in your deployment, and other considerations and
requirements specific to the Web Interface for Microsoft SharePoint 2007.
SharePoint Deployments
Microsoft Windows SharePoint Services 3.0 is a collection of services for
Microsoft Windows Server 2003 used to share information and foster
collaboration with other users. Microsoft Office SharePoint Server 2007 is a
scalable, enterprise portal server built upon SharePoint Services that allows
aggregation of services and content.
SharePoint supports many different deployment scenarios, or topologies,
including deployments on a single server or in a server farm.
Different physical servers within a SharePoint server farm have different server
roles. A SharePoint server farm includes one or more database servers and one or
more servers filling the Web server and Application server roles. The Web and
Application servers can be configured for load balancing.
These roles are as follows:
Web server. Web servers are front-end servers that provide access to
SharePoint from Internet browsers. A single physical server can function as
both a Web server and an Application server.
Application server. Application servers are front-end servers that provide

SharePoint functionality such as searching and indexing. A single physical
server can function as both an Application server and a Web server.
Database server. Database servers are back-end servers running Microsoft

SQL Server 2000 Service Pack 3a or Microsoft SQL Server 2005.
12
Points to Note
SharePoint can be installed on Microsoft Windows Server 2003 Standard

Edition, Enterprise Edition, Datacenter Edition, or Web Edition
For server farm deployments, you must be running Microsoft SQL Server
2000 Service Pack 3a or Microsoft SQL Server 2005
The single server scenario is not recommended for any SharePoint Server
2007 deployment that utilizes the Microsoft Single Sign-On Service
For more information about deploying SharePoint Services or SharePoint Server,

see your SharePoint documentation.
Secure Gateway Deployment

This section describes how to deploy the Web Interface for Microsoft SharePoint
with the Secure Gateway.
Diagram showing a Web Interface for SharePoint deployment using Secure Gateway
Chapter 2
13
Deployments including Secure Gateway are supported where the Secure Gateway
is used in parallel with the Web Interface for SharePoint 2007 in a single-hop
environment. In this scenario, users connect directly to the Web Interface for
SharePoint 2007 and the Secure Gateway then handles the connection to allow
secure access to applications and content stored in SharePoint from remote
devices.
For more information about configuring the Web Interface for Microsoft
SharePoint 2007 to work with the Secure Gateway, see Configuring the Web
Interface for SharePoint with Secure Gateway on page 37.
Secure Gateway and Proxy Servers

The Web Interface for Microsoft SharePoint supports the use of Secure Gateway
in single-hop mode. It also supports the use of client-side HTTP or SOCKS
proxies in much the same manner as the Web Interface.
For more information about configuring proxy server support, see Configuring
the Web Interface for SharePoint with HTTP or SOCKS Proxies on page 40.
14
C HAPTER 3
Installing the Web Interface for

This chapter explains how to install and configure the Web Interface for
Microsoft SharePoint.
Topics in this chapter include:
System Requirements
Post-Installation Tasks
Troubleshooting the Web Interface for Microsoft SharePoint Installation
Uninstalling the Web Interface for Microsoft SharePoint
System Requirements
Before installing the Web Interface for Microsoft SharePoint, you must ensure
your servers meet all the system requirements.
Operating System Requirements

You can run the Web Interface for Microsoft SharePoint 2007 on Windows Server
2003 (Standard, Enterprise, Datacenter, or Web Edition).
Note If you are running Windows Server 2003, Web Edition, you must ensure
Microsoft SQL Server 2000 with Service Pack 3a or Microsoft SQL Server 2005
is deployed on a separate computer.
16
Other Requirements
The following software must be installed prior to installing the Web Interface for
Microsoft SharePoint 2007:
Visual J# 2.0 Second Edition
Microsoft Windows SharePoint Services Version 3.0

Or
Microsoft Office SharePoint Server 2007
You must also ensure that the server on which you want to run the Web Interface
for Microsoft SharePoint 2007 is configured as an Application server with
Internet Information Services 6.0 and ASP.NET, but without FrontPage
extensions.
SQL Server Requirements

If your environment uses Microsoft SQL Server 2000 Service Pack 3a or
Microsoft SQL Server 2005 for the SharePoint database, you must ensure that the
local administrator account you intend to use to run the installation has system
administrator rights to the SharePoint configuration database running on SQL
Server.

This section explains how to install the Web Interface for Microsoft SharePoint.
This involves adding solutions to the solution store, deploying the solution files
from the configuration database to a Web server, and then activating the features
on the SharePoint site.
The Web Interface for Microsoft SharePoint consists of four SharePoint
solutions: CitrixWssCore.wsp, CitrixAppDeliveryWebPart.wsp,
CitrixContentRedirection.wsp, and CitrixMossCore.wsp. You must install
CitrixWssCore.wsp in any Web Interface for Microsoft SharePoint deployment;
however, the other solutions are optional.
Note CitrixMossCore.wsp can be activated only if you are running SharePoint

Server 2007. This solution does not apply to SharePoint Services deployments.
The install process uses the SharePoint command-line administration tool,
stsadm.exe. For more information about this tool and its parameters, see the
Microsoft Developer Network Web site, http://msdn.microsoft.com/.
Chapter 3
17
To install the Web Interface for Microsoft SharePoint
1.
Log on. To complete the installation you must have server farm
administrator permissions, meaning you must be a member of the
administrators group on each of your Web and Application servers, and
SQL security administrator with database creator rights on each of your
SQL servers.
2.
Enter the following at a command prompt to add the Web Interface for
SharePoint solutions to the solution store. If you choose not to install all the
solutions, omit the lines you do not require.
stsadm -o addsolution -filename CitrixWssCore.wsp
stsadm -o addsolution -filename CitrixAppDeliveryWebPart.wsp
stsadm -o addsolution -filename CitrixContentRedirection.wsp
stsadm -o addsolution -filename CitrixMossCore.wsp
Note In a SharePoint server farm, you need to add the solutions only to
one of the farms servers.
3.
Next, deploy the Web Interface for SharePoint solution files to your Web
server.
Important Deploying the Citrix Application Delivery Web Part modifies

your permissions. CitrixAppDeliveryWebPart.wsp is a zipped file that
contains a file called manifest.xml. The CodeAccessSecurity section in this
file details the permissions added when you deploy the Web Part. For more
information about how this file modifies security, see the Microsoft Web
site, www.microsoft.com/.
Either:
Use the stsadm command-line tool. To deploy solutions from the

command prompt, you must be a member of the SharePoint Farm
Administrators group.
The allowgacdeployment parameter indicates the solution contains
assemblies that need to be put into a global assembly cache, while the
immediate parameter deploys the files immediately after the
command is run.
If you choose not to install all the solutions, omit the lines you do not
require.
18
stsadm -o deploysolution -name CitrixWssCore.wsp

-immediate -allowgacdeployment
stsadm -o deploysolution -name CitrixAppDeliveryWebPart.wsp
-immediate -allowgacdeployment -allowcaspolicies
-url http://myserver
stsadm -o deploysolution -name CitrixContentRedirection.wsp
stsadm -o deploysolution -name CitrixMossCore.wsp
Note You must deploy the CitrixWssCore.wsp solution first and

allow the deployment to finish before deploying the other solutions.
The status of the deployments can be found in either the SharePoint
Central Administration site or by running the following stsadm
command: stsadm -o enumsolutions.
Or
4.
Use SharePoints Central Administration site. On the Operations tab,

select Solution management under Global Configuration to see the
solutions in the farm. Click the solution you want to deploy, choose
Deploy Solution, and click OK to deploy it.
Finally, activate the features in each solution. Each solution contains at

least one feature, as listed below. This table also indicates the scope of each
feature, either site collection level or Web level.
Solution
Feature(s)
Scope
CitrixWssCore.wsp
CitrixAccessCore
CitrixTopNavigation
CitrixQuickLaunchNavigation
CitrixAdministrationTool
Site collection
Web
Web
Site collection
CitrixAppDeliveryWebPart.wsp CitrixAppDeliveryWebPart
Site collection
CitrixContentRedirection.wsp
CitrixContentRedirectionModule
Site collection
CitrixContentRedirectionMenu
Site collection
CitrixContentRedirectionNewMenu Site collection
CitrixMossCore.wsp
CitrixSSO
Site collection
Either:
Use the stsadm command-line tool. To activate features using stsadm

from a command prompt you must be a member of both the
SharePoint Farm Administrators and Local Administrators groups.
Chapter 3
19
The url parameter allows you to specify the URL for your site.
You must activate the CitrixAccessCore feature; however, if you
choose not to activate some of the other features, omit the lines you
do not require.
stsadm -o activatefeature -name CitrixAccessCore
stsadm -o activatefeature -name CitrixTopNavigation
stsadm -o activatefeature -name CitrixQuickLaunchNavigation
stsadm -o activatefeature -name CitrixAdministrationTool
stsadm -o activatefeature -name CitrixAppDeliveryWebPart
stsadm -o activatefeature -name
CitrixContentRedirectionModule -url http://myserver
stsadm -o activatefeature -name CitrixContentRedirectionMenu
stsadm -o activatefeature -name
CitrixContentRedirectionNewMenu -url http://myserver
stsadm -o activatefeature -name CitrixSSO -url http://myserver
Note Most features can be activated only after the

CitrixAccessCore feature is activated on the same site collection.
Or
Site collection administrators can use SharePoints site administration

pages to activate the features. To activate the features from the user
interface in a single server deployment, you must be a member of
both the SharePoint Farm Administrators and Local Administrators
groups. In other types of deployments, the identity of the application
pool of the associated Web application must be a member of the
SharePoint Farm Administrators group. Also, the identity of the
SharePoint Timer service must be a member of both the SharePoint
Farm Administrators group and Local Administrators group of each
server in the farm associated with the specified Web application.
Navigate to the Site Settings page and click Site collection features
under Site Collection Administration to activate features scoped at
site collection level. To activate features scoped at Web level,
navigate to the Site Settings page and click Site features under Site
Administration.
20
Post-Installation Tasks
After installing the Web Interface for Microsoft SharePoint 2007, you can
optionally complete one or both of the following post-installation tasks:
Allow users to access Presentation Server resources from a SharePoint site
Customize the appearance of the Web Part
Allowing Users to Access Presentation Server

Resources from a SharePoint Site
To allow users to access Citrix Presentation Server resources from a SharePoint
site, you must add the Citrix Application Delivery Web Part to a Web Part Page.
To add the Citrix Application Delivery Web Part to a Web Part Page
1.
Ensure you are logged on to the SharePoint site as either an administrator or

Web Designer.
2.
Select the page you want to edit.
3.
On the Site Actions menu, choose Edit Page.
4.
In the Web Part zone that you want to add the Citrix Application Delivery
Web Part to, click Add a Web Part.
5.
In the Add Web Parts dialog box, select the check box for Applications
Delivered by Citrix in the Web Part list.
6.
Click Add.
Customizing the Appearance of the Web Part

You can customize the appearance of the Citrix Application Delivery Web Part
after installation.
The standard Web Part tool pane consists of Appearance, Layout, and Advanced
options. These allow you to modify the size of a Web Part, where it appears on the
screen, and whether it can be minimized or closed by a user. For more
information, see your SharePoint documentation.
If you are using the Web Interface for Microsoft SharePoint, the Web Part tool
pane also includes Preferences and Application Display Preferences options.
These allow you to show or hide Citrix Presentation Server resources, and
customize how these resources appear in the Web Part.
Chapter 3
21
To modify the appearance of the Web Part
1.

Web Designer.
2.
3.
From the Site Actions menu, choose Edit Page.
4.
Click the arrow for the Web Part you want to modify.
5.
Click Modify Shared Web Part.
6.
Choose from the following:

To...
Do this...
Display the Citrix Presentation Server

resources available to users
Expand Preferences and select Show

Citrix Presentation Server Resources.
Display the last folder opened by a user
Expand Preferences and select

Remember Folder.
Display the current folder opened by a

user
Expand Preferences and select Show

Program Neighborhood Folder.
Specify the default folder displayed to

users
Expand Preferences and enter the name

of the folder in the Default Folder box.
The default for this option is the root
folder.
Change the height of the application

window area
Expand Application Display

Preferences and enter the height (in
pixels) in the Height of Applications
Area box.
The default height for the Applications
area is 320 pixels. The minimum value is
75 pixels.
Change the number of applications

displayed in a row

Preferences and enter the number of
applications to display in the Number of
Applications in Each Row box.
The default number of applications per
row is three.
Display application icons

Preferences and select Show Application
Icons.
22
To...
Do this...
Display large application icons

Preferences and select Use Large Icons.
Display the names of applications

on-screen

Preferences and select Show
Application Names.
Display descriptions for applications

Preferences and select Show
Application Descriptions.
Note: You can enable this option only if
Use Large Icons is enabled.
Advanced Customization of the Web Part User Interface

You can also modify the appearance of the Web Part by making changes to the
XML style sheet. This style sheet is in the following location:
webroot\wpresources\WISP.AppDeliveryWebPart\wisp.xslt
Note You must restart Internet Information Services after modifying the style
sheet for the changes to take effect.
Troubleshooting the Web Interface for Microsoft

SharePoint Installation
Using the Site Deployment Tool
If you have permissions problems when deploying solutions or activating the
Web Interface for Microsoft SharePoint features, you can use the site deployment
tool to deploy or retract the core solution, CitrixWssCore.wsp. This tool runs with
the correct permissions to successfully deploy or retract this solution.
You can find the site deployment tool, sitedeployment.exe, in
sharepoint\CitrixAccessPlatform\tools.
To deploy the core solution
Enter the following at a command prompt, where URL is the site to which you
want to deploy the solution:
sitedeployment URL -deploy
Chapter 3
23
To retract the core solution
Enter the following at a command prompt, where URL is the site from which you
want to retract the solution:
sitedeployment URL -retract
To list the servers hosting a specific site
Enter the following at a command prompt, where URL is the site for which you
want to see the hosting servers:
sitedeployment URL -list
Using Log Files

Caution Using Registry Editor incorrectly can cause serious problems that may
require you to reinstall your operating system. Citrix cannot guarantee that
problems resulting from the incorrect use of Registry Editor can be solved. Use
Registry Editor at your own risk.
You can also find useful troubleshooting information in the log files stored in
sharepoint\LOGS\LogFolder, where LogFolder is a location you can specify by
setting a string value for LogFolder in the following registry key:
HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\WISP. These files record time
stamped messages about the progress of deploying and retracting solutions,
activating and deactivating features, and also messages from timer jobs.
Web Interface for Microsoft SharePoint 2007 messages may also appear in the
Citrix area of the event log. Entries in the Citrix area of the event log are retained
after uninstalling the Web Interface for SharePoint to allow archiving of logs and
troubleshooting of the uninstall process.
Uninstalling the Web Interface for Microsoft SharePoint

This section explains how to uninstall the Web Interface for Microsoft
SharePoint. You may have to perform some extra tasks after uninstalling the
software to complete the uninstall.
Before Uninstalling the Web Interface for

Citrix recommends you remove the Citrix Application Delivery Web Part from
your Web Part Pages and the Web Part Gallery before uninstalling the software.
24
To remove a Web Part from a Web Part Page
1.

Web Designer.
2.
3.
From the Site Actions menu, choose Edit Page.
4.
From the menu of the Web Part you want to remove, choose Delete.
5.
At the dialog box prompting you to confirm the permanent removal of the
Web Part, click OK.
Uninstalling the Software

To uninstall the Web Interface for Microsoft SharePoint you need to deactivate
the features, retract the solutions, and remove the solutions from the server.
To uninstall the Web Interface for Microsoft SharePoint
1.
First, deactivate the features in each solution.

Either:
Use the stsadm command-line tool. To deactivate features using

stsadm from a command prompt, you must be a member of both the
SharePoint Farm Administrators and Local Administrators groups.
The url parameter allows you to specify the URL for your site.
If you did not previously activate all the features, omit the lines you
do not require.
stsadm -o deactivatefeature -name CitrixTopNavigation
stsadm -o deactivatefeature -name
CitrixQuickLaunchNavigation -url http://myserver
stsadm -o deactivatefeature -name CitrixAdministrationTool
stsadm -o deactivatefeature -name CitrixAppDeliveryWebPart
CitrixContentRedirectionModule -url http://myserver
CitrixContentRedirectionMenu -url http://myserver
CitrixContentRedirectionNewMenu -url http://myserver
stsadm -o deactivatefeature -name CitrixSSO -url http://myserver
Chapter 3
25
stsadm -o deactivatefeature -name CitrixAccessCore

Note Because most features have an activation dependency on the

CitrixAccessCore feature, you must deactivate the CitrixAccessCore
feature last.
Or
Site collection administrators can use SharePoints site administration

pages to deactivate the features. To deactivate the features from the
user interface in a single server deployment, you must be a member
of both the SharePoint Farm Administrators and Local
Administrators groups. In other types of deployments, the identity of
the application pool of the associated Web application must be a
member of the SharePoint Farm Administrators group. Also, the
identity of the SharePoint Timer service must be a member of both
the SharePoint Farm Administrators group and Local Administrators
group of each server in the farm associated with the specified Web
application.
Navigate to the Site Settings page and click Site collection features
under Site Collection Administration to deactivate features scoped
at site collection level. After clicking Deactivate, click Deactivate
this feature to confirm your choice. To deactivate features scoped at
Web level, navigate to the Site Settings page and click Site features
under Site Administration. After clicking Deactivate, click
Deactivate this feature to confirm your choice.
2.
If you are using Microsoft Office SharePoint Server 2007 and you created
an application definition for Presentation Server, you must remove the
definition:
A.
From the Site Actions menu, choose Site Settings > Modify All Site
Settings.
B.
Under Citrix Administration, click Single Sign-On.
C.
In the Server Single Sign-On section, ensure that Microsoft Single

Sign-On is selected and click Click here to configure Microsoft
Single Sign-On.
26
D.
Click Delete to delete the application definition.
Note If you do not remove the Single Sign-On application definition

before retracting the solution, the definition must be removed manually
afterwards. For more information, see To remove the application
definition manually on page 28.
You can use the Single Sign-On manager tool to troubleshoot issues with
application definitions. See Troubleshooting Application Definitions on
page 53 for more information.
3.
Next, retract the Web Interface for SharePoint solution files.

Either:
Use the stsadm command-line tool. The immediate parameter

retracts the files immediately after the command is run, and the url
parameter allows you to specify the URL for your site.
If you chose not to install all the solutions, omit the lines you do not
require.
stsadm -o retractsolution -name CitrixAppDeliveryWebPart.wsp
-immediate - url http://myserver
stsadm -o retractsolution -name CitrixContentRedirection.wsp
-immediate
stsadm -o retractsolution -name CitrixMossCore.wsp-immediate
stsadm -o retractsolution -name CitrixWssCore.wsp -immediate
Note You must retract the CitrixWssCore.wsp solution last. Allow

the retraction of the other solutions to finish before beginning to
retract CitrixWssCore.wsp. You can check the status of the retraction
jobs either in the SharePoint Central Administration site or by
running the following stsadm command: stsadm -o enumsolutions.
Or
4.
Use SharePoints Central Administration site. On the Operations tab,

select Solution management under Global Configuration to see the
solutions in the farm. Click the solution you want to retract, choose
Retract Solution, and click OK to retract it.
Finally, delete the Web Interface for SharePoint solutions from the solution
store. To complete the uninstallation, you must have server farm
administrator permissions. You must be a member of the administrators
Chapter 3
27
group on each of your Web and Application servers, and SQL security
administrator with database creator rights on each of your SQL servers.
Either:
Use the stsadm command-line tool and enter the following at a

command prompt. If you chose not to install all the solutions, omit
the lines you do not require.
stsadm -o deletesolution -name CitrixWssCore.wsp
stsadm -o deletesolution
-name CitrixAppDeliveryWebPart.wsp
stsadm -o deletesolution -name CitrixContentRedirection.wsp
stsadm -o deletesolution -name CitrixMossCore.wsp
Or
Use SharePoints Central Administration site. After retracting a

solution as described in Step 3, you are offered the option to delete it.
Note In a SharePoint server farm, delete the solutions from any one of
the farms servers.
After Uninstalling the Web Interface for Microsoft

SharePoint
After you uninstall the Web Interface for Microsoft SharePoint 2007, you might
find that some files remain on your server in the sharepoint\CitrixAccessPlatform
directory. These files were added after the solution was deployed and so were not
removed along with the solution, for example, any Citrix Presentation Server
Clients that were downloaded. You can safely delete the
sharepoint\CitrixAccessPlatform directory and any subdirectories that still
remain after uninstalling the software.
If you are using Microsoft Office SharePoint Server 2007 and you created a
Single Sign-On application definition, but did not remove the definition prior to
completing the uninstall, you must remove it manually. This will remove all the
credentials stored for this application definition.
Note You can use the Single Sign-On manager tool to troubleshoot issues with
application definitions. See Troubleshooting Application Definitions on page
53 for more information.
28
To remove the application definition manually
1.
From the Start menu, choose All Programs > Microsoft Office Server >
SharePoint 3.0 Central Administration. The Central Administration
page opens.
2.
Select the Operations tab.
3.
Select Manage settings for single sign-on from the Security

Configuration area.
4.
Select Manage settings for enterprise application definitions.
5.
Rest the pointer on the display name created for the application definition,
and click the arrow that appears.
6.
From the drop-down menu, choose Delete.
C HAPTER 4
Configuring the Web Interface for

This chapter describes how to administer and configure the Web Interface for
Microsoft SharePoint.
Topics in the chapter include:
Using the Citrix Administration Pages
Configuring Security Settings
Using the Citrix Administration Pages

Administration pages allow you to control Citrix-specific SharePoint settings.
You can access these administration pages from the Site Settings SharePoint
page.
Changes made using these pages are pushed out to the other front-end servers in
your farm by a SharePoint timer job that runs every 10 minutes. When a
configuration update occurs, an entry appears in the Citrix area of the event log.
If your changes do not take effect across your farm, check that your Citrix
configuration jobs are running correctly. On SharePoints Central Administration
site, click the Operations tab and select Timer job definition under Global
Configuration to review their configuration, and select Timer job status under
Global Configuration to see their status and progress.
You can force configuration updates to occur immediately on a particular server
by updating the time stamps on the Reload.txt and ContentRedirectionReload.txt
files in the sharepoint\CitrixAccessPlatform\GUID\conf directory on that server,
where GUID is the identifier of the associated site. This reloads the Service
Provider configuration and the content redirection configuration.
Managing Global Farm Settings

The Global Farm Settings administration page allows you to manage settings
that apply across all your server farms.
30
To access the Global Farm Settings administration page
1.
Ensure you are logged on to the SharePoint site as an administrator.
2.
From the Site Actions menu, choose Site Settings. If you are using
SharePoint Services, go to Step 4.
3.
Choose Modify All Site Settings.
4.
Under Citrix Administration, click Global farm settings.
This page allows you to enable or disable socket pooling, set a limit to the number
of connection attempts made to contact an XML service, and specify a time-out
period after which an XML service can be considered unavailable.
Managing Farms
The Farms administration page allows you to manage various aspects of your
server farms, including adding, removing, and renaming farms and rearranging
the contact order in which those farms are accessed.
To access the Farms administration page
1.
2.
3.
4.
Under Citrix Administration, click Farms.
The Farms page lists all the farms used by the SharePoint site, in contact priority
order. You can adjust this contact order by clicking the down arrow next to a farm
and choosing to move it either up or down the list. Using the Edit menu, you can
either add a new farm and set its properties, or remove all the server farms. Any
farm you add must already be deployed and administered using the Access
Management Console.
You can select a farm from the list to view and edit its properties. These
properties include the farm name, load balancing settings, the length of time for
which a failed server is bypassed, the lifetime of ICA authentication tickets,
transport type settings, port settings, and a list of the servers in the farm in
failover priority order. You can adjust this failover order by clicking the down
arrow next to a server and choosing to move it either up or down the list. You can
also use this page to add or remove servers from your server farm. Any server you
add must already be deployed and administered using the Access Management
Console.
Chapter 4
31
Managing Sessions
The Sessions administration page allows you to modify the properties of users
Web Interface for Microsoft SharePoint sessions.
To access the Sessions administration page
1.
2.
3.
4.
Under Citrix Administration, click Sessions.
The Bandwidth Control settings determine whether or not users can specify the
speed of the connection between their Web browser and servers running Citrix
Presentation Server, the color depth of their sessions, their printer mapping, and
the audio quality of their sessions. When enabled by an administrator on the
Sessions administration page, users can view and change these settings for their
own sessions on the Preferences page.
The Virtual Port Mapping settings determine whether or not users can use
virtual port mapping during their sessions; for example to synchronize a PDA
through a USB port. These settings also determine whether or not users can view
and change these settings for their own sessions on the Preferences page.
The Workspace Control settings determine whether or not users can disconnect
from their applications and reconnect later or from a different location. These
settings also determine whether or not users can customize the behavior of the
Reconnect button for their own sessions on the Preferences page.
32
The Windows Key Combinations settings determine how Windows key

combinations are handled, and whether or not users can view and change this
setting for their own sessions on the Preferences page. By default, Windows key
combinations are enabled on the local desktop. The options are:
On the local desktop. If you want the Windows key behavior to take effect
on the local desktop running the published application.
On the remote desktop. If you want the Windows key behavior to take
effect on the remote desktop running Citrix Presentation Server.
In full screen desktop only. If you want the Windows key behavior to take
effect on the remote server running Citrix Presentation Server when the
local client device is running in full screen desktop mode.
Note These settings are relevant only for nonseamless Windows

applications. Applications are set to be either seamless or nonseamless
when they are published. See the Citrix Presentation Server
Administrators Guide for more information.
The Window Size setting determines whether or not users can view and change
the window size for their own sessions on the Preferences page.
Managing Clients
The client detection and deployment process helps the user to choose the most
appropriate client for their situation, taking into account factors such as operating
system and browser version. Supported client types include the Native Client, the
Client for Java, and the Streaming Client.
The Clients administration page allows you to specify which Citrix Presentation
Server Clients are available for users to download using the client detection and
deployment process. If all clients are available, the Native Client is the default
client choice. This page also specifies class IDs for the clients automatically
downloaded to users who want to access remote or streamed applications but who
do not have an appropriate client.
To allow your users to successfully download clients, you need to make the
clients available on your SharePoint server. Deploying the Citrix core solution
creates a directory called sharepoint\CitrixAccessPlatform\GUID\Clients, where
GUID is an identifier representing your deployment. Copy the installation
packages for the Native Client, Streaming Client, and Client for Java to this
directory. You can do this easily by copying the contents of the Clients directory
from your Citrix Presentation Server Components CD.
Chapter 4
33
To access the Clients administration page
1.
2.
3.
4.
Under Citrix Administration, click Clients.
Managing Single Sign-On

The Single Sign-On administration page allows you to modify the permitted
authentication methods used by the Web Interface for Microsoft SharePoint on
both the client and the server. Single Sign-On allows users to access applications
published using Citrix Presentation Server without having to reenter their
credentials.
Note The Web Interface for Microsoft SharePoint supports only Windows
authentication. Ensure you select Windows as the Authentication Type when you
configure the authentication provider settings for your Web application in the
SharePoint Central Administration site.
To access the Single Sign-On administration page
1.
2.
3.
4.
Under Citrix Administration, click Single Sign-On.
In situations where you are using the pass-through authentication feature with
Citrix Presentation Server, choose the Pass-Through option for Client Single
Sign-On. Note that this sends the password from the client to the computer
running Citrix Presentation Server in clear text.
34
In situations where Kerberos authentication is configured within your

environment, choose the Kerberos option for Client Single Sign-On or Server
Single Sign-On. If Kerberos is enabled on the client and content redirection is
enabled, ensure that Kerberos is also enabled on the computer running Citrix
Presentation Server. See the Citrix Presentation Server Administrators Guide for
more information.
Note If you are using SharePoint Services, enable pass-through authentication

or Kerberos authentication. If neither of these is enabled, the user is prompted for
credentials when a Citrix Presentation Server session is started.
In situations where Single Sign-On is configured in your SharePoint Server
environment, select Microsoft Single Sign-On for Server Single Sign-On. Note
that this sends the password from the SharePoint server to the computer running
Citrix Presentation Server in clear text.
Note Windows SharePoint Services does not support Single Sign-On through
the Server Single Sign-On option. The Server Single Sign-On option can be
used only with SharePoint Server 2007.
Selecting this option displays a link, Click here to configure Microsoft Single
Sign-On. Clicking this link opens a page that allows you to create an application
definition for Citrix Presentation Server. Enter suitable text to display to users
when they are prompted for their credentials, enter a contact email address, and
click Create. After users store their credentials, they can access applications
published using Citrix Presentation Server without having to reenter those
credentials.
Note To access the application definition pages, ensure that the Microsoft
Single Sign-On Service is correctly configured in SharePoint Server 2007.
You can use the Single Sign-On manager tool to troubleshoot issues with
application definitions. See Troubleshooting Application Definitions on page
53 for more information.
You can also choose Use HTTP Basic as a Server Single Sign-On option. In this
situation, users are prompted to log on when they first browse to your site, but
then will not be asked for further logon details when they access their resources.
Note that choosing this option sends the password in clear text.
Chapter 4
35
Managing Delivery Options

The Delivery Options administration page allows you to determine how Citrix
applications are delivered to users. You can choose to have both remote and
streamed applications available, or only remote applications.
Note Application streaming is available only when connecting to servers

running Citrix Presentation Server 4.5 or later.
To access the Delivery Options administration page
1.
2.
3.
4.
Under Citrix Administration, click Delivery options.
If you select Offer both streaming applications and remote applications for
your Delivery Type, you need to perform some further configuration within your
deployment.
A running streamed application periodically communicates with the computer
running Citrix Presentation Server for licensing and session purposes. These
communications are referred to as heartbeats. To allow the computer running
Citrix Presentation Server to receive the heartbeats, you need a separate Web
Interface site because the Web Interface for Microsoft SharePoint does not
support heartbeat traffic. Therefore, to enable streamed applications to run
successfully, you must create a Web Interface site and configure it to support
streamed applications.
Citrix recommends that the Web Interface site be on a server separate from your
SharePoint server. The farm definitions in the Web Interface site must match
those configured in your Web Interface for Microsoft SharePoint site exactly. You
must also update the server hostname of the Streamed Application Heartbeat
URL to that of the Web Interface server.
Note For more information about configuring a Web Interface site, see the Web
Interface Administrators Guide.
36
Managing Content Redirection

Content redirection allows you to open content published in SharePoint using
applications published by Citrix Presentation Server. You may want to make use
of this functionality if users cannot access applications locally or if bandwidth is
an issue. The HTTP Request Redirection Administration, Context Menu
Integration Administration, and New Menu Integration Administration
pages allow you to manage, add, and remove the file extensions that support
content redirection.
Note Content redirection relies on file name extensions being associated with
published applications. Therefore, you must ensure that published applications
support any of the filename extensions that you plan to create. For more
information, see the Citrix Presentation Server Administrators Guide.
To access the content redirection administration pages
1.
2.
3.
4.
Under Citrix Administration, click HTTP request redirection, Context

menu integration, or New menu integration.
The HTTP Request Redirection Administration page allows you to specify

which types of files are opened using published applications when a suitable
published application is available. This page also allows you to enable local
fallback, where local applications are used if a published application cannot be
launched.
The Context Menu Integration Administration page allows you to specify
which file types users can edit with published applications. Users who select Edit
with Application Delivered by Citrix from a documents context menu in the
Document Center (for SharePoint Server 2007) or Shared Documents (for
SharePoint Services) are presented with a list of suitable published applications to
open the selected document.
The New Menu Integration Administration page allows you to specify which
file types users can create using published applications. Users who select
Document Delivered by Citrix from the New menu in the Document Center (for
SharePoint Server 2007) or Shared Documents (for SharePoint Services) are
presented with a list of suitable published applications to create the selected
document.
Chapter 4
37
On all three pages, Microsoft Word, Microsoft PowerPoint, and Microsoft Excel
file extensions are included by default when the Web Interface for Microsoft
SharePoint 2007 is installed. File extensions are not case-sensitive.
Caution
Do not include the dot (.) with the file extension.
Advanced Administration
The Advanced Administration page allows you to configure more advanced
settings for the Web Interface for SharePoint 2007. For a full list of the
parameters supported by the Web Interface for SharePoint 2007, see Web
Interface Configuration File Settings on page 41.
Note Not all parameters will appear on this page by default. You may need to
add the necessary parameters as required.
To access the Advanced Administration page
1.
2.
3.
4.
Under Citrix Administration, click Advanced administration.
Configuring Security Settings

This section describes how you can improve security in your deployment by
configuring the Web Interface for Microsoft SharePoint 2007 to work with Secure
Gateway, the Access Gateway, and HTTP or SOCKS proxies.
Configuring the Web Interface for SharePoint with

Secure Gateway
You can configure the Web Interface for Microsoft SharePoint to work with
Secure Gateway using the Advanced Administration page.
To configure Web Interface for Microsoft SharePoint with Secure Gateway
1.
38
2.
3.
4.
5.
Add the parameter CSG_Server and set it to the FQDN of the Secure
Gateway.
6.
Add the parameter CSG_ServerPort and set it to the port number of the
Secure Gateways inbound client connections port. The port number
(usually 443) must match the inbound client connections port number that
is configured on the Secure Gateway.
7.
Add the parameter CSG_STA_URLn and set it to the same value for the
Secure Ticket Authority URL that is set within the Secure Gateway.
Note You can have multiple Secure Ticket Authorities configured. In this
case you need to define a CSG_STA_URL parameter for each one, using the
format CSG_STA_URLn, where n is an integer identifying each STA
configured. For example:
CSG_STA_URL1=http://firststabox.citrix.com:4567/scripts/ctxsta.dll
CSG_STA_URL2=http://secondstabox.citrix.com:4567/scripts/ctxsta.dll
CSG_STA_URL3=http://thirdstabox.citrix.com:4567/scripts/ctxsta.dll
8.
Add the parameter ClientAddressMap=*, SG.
9.
Add the parameter AlternateAddress=Mapped. This ensures that the Web

Interface for Microsoft SharePoint picks up the new addresses.
10.
Click OK.
For example, if you have Secure Gateway with an FQDN of mycsgbox.citrix.com

listening on standard port 443 with an unsecured Secure Ticket Authority on a
separate server listening on port 4567, your entries would be:
CSG_Server=mycsgbox.citrix.com
CSG_ServerPort=443
CSG_STA_URL1=http://mystabox.citrix.com:4567/scripts/ctxsta.dll
ClientAddressMap=*, SG
AlternateAddress=Mapped
For another example, if you have Secure Gateway with an FQDN of

mycsgbox.citrix.com listening on non-standard port 449 with a secured STA on a
separate server listening on standard port 80, your entries would be:
CSG_Server=mycsgbox.citrix.com
CSG_ServerPort=449
CSG_STA_URL1=https://mystabox.citrix.com/scripts/ctxsta.dll
Chapter 4
39
ClientAddressMap=*, SG
AlternateAddress=Mapped

Access Gateway
Access Gateway for application launch using the Advanced Administration
page. Before doing this, you must ensure that the Access Gateway is configured
and running in Secure Gateway emulation mode (that is, set the Access Gateway
to use the Secure Ticket Authority). For more information, refer to your Access
Gateway documentation.
To configure Web Interface for Microsoft SharePoint with Access Gateway
1.
2.
3.
4.
5.
Add the parameter CSG_Server and set it to the FQDN of the Access
Gateway.
6.
Add the parameter CSG_ServerPort and set it to the port number of the
Access Gateways inbound client connections port. The port number
(usually 443) must match the virtual private network (VPN) port number
that is configured on the Access Gateway.
7.
Add the parameter CSG_STA_URLn and set it to the same value for the
Secure Ticket Authority URL that is set within the Access Gateway.
Note You can have multiple Secure Ticket Authorities configured. In this
case you need to define a CSG_STA_URL parameter for each one, using the
format CSG_STA_URLn, where n is an integer identifying each STA
configured. For example:
CSG_STA_URL1=http://firststabox.citrix.com:4567/scripts/ctxsta.dll
CSG_STA_URL2=http://secondstabox.citrix.com:4567/scripts/ctxsta.dll
CSG_STA_URL3=http://thirdstabox.citrix.com:4567/scripts/ctxsta.dll
8.
Add the parameter ClientAddressMap=*, SG.
9.
Add the parameter AlternateAddress=Mapped. This ensures that the Web

Interface for Microsoft SharePoint picks up the new addresses.
40
10.
Click OK.

HTTP or SOCKS Proxies
HTTP or SOCKS proxies using the Advanced Administration page. HTTP and
SOCKS proxies can be used on their own or in conjunction with the Secure
Gateway or the Access Gateway.
To configure the Web Interface for Microsoft SharePoint with an HTTP or
SOCKS proxy
1.
2.
3.
4.
5.
Change the existing value of the ClientProxy parameter to match your

network configuration. The ClientProxy parameter must be made up of
one or more sets of the following three comma-separated fields:
6.
The value of the first field specifies a list of client subnet addresses
and masks, or address prefixes and associated proxy settings. The
client address in the returned ICA file is determined by these settings.
Using an asterisk (*) in place of a client address or subnet indicates
the default for all otherwise unspecified clients.
The value of the second field defines the proxy type in use (Auto,
Client, None, SOCKS, or Secure). If you are using a client-side
HTTP proxy, set this field to Client. If you are using a SOCKS proxy,
set this field to SOCKS.
The value of the third field defines the proxy address in each set of
the three fields, and is ignored unless the second field (proxy type) is
an explicit proxy type (SOCKS or Secure). It must always be present;
the default value for this field is the minus sign (-).
Click OK.
A PPENDIX
This appendix describes the Web Interface for Microsoft SharePoint 2007 settings
you can configure using the administration pages. It also highlights which
administration page you use to configure each parameter.
The settings below are valid for use by the Web Interface for Microsoft
SharePoint. Not all the parameters listed in the table will appear in your
Advanced Administration page by default. To allow configuration, you may
need to add the necessary parameters to this page as required.
Note If you include settings other than those listed below they will be ignored
by your Web Interface for SharePoint site. Because the Web Interface for
SharePoint is based on the standard Web Interface, including recognized Web
Interface settings is possible; however you must ensure that these settings are set
to valid values or you could experience problems with your configuration.
42
The default value (if any) for a setting is shown in bold. Values not valid for use
by the Web Interface for Microsoft SharePoint are shown in italics.
Setting
Description
Values
AddressResolutionType
Specifies what type of address to use

for the NFuse_AppServerAddress tag
in Template.ica.
This parameter is managed by the
Advanced Administration page. For
more information, see Advanced
Administration on page 37.
Ipv4-port, ipv4, dns, dnsport

Note: Configuring for
Kerberos sets this value to
dns-port.
AllowBandwidthSelection
Specifies whether or not users can

Off, On
provide the Web Interface with the
type of connection between their Web
browser and the computer running
Citrix Presentation Server, to
optimize ICA settings.
Sessions administration page. For
more information, see Managing
Sessions on page 31.
AllowCustomizeAudio

adjust the audio quality for ICA
sessions.
Off, On
AllowCustomizeClientPrinterMapping

enable and disable client printer
mapping.
Off, On
AllowCustomizeReconnectButton
Specifies whether or not Web

Interface users can override the
behavior of workspace control when
the reconnect button is pressed.
On, Off
AllowCustomizeTransparentKeyPassthrough Specifies whether or not users can

adjust how Windows key
combinations are handled.
Off, On
Appendix A
43
Setting
Description
Values
AllowCustomizeVirtualCOMPortEmulation

enable and disable virtual port
mapping, allowing PDA
synchronization through tethered
USB connections.
Off, On
AllowCustomizeWinColor

adjust the color depth for ICA
sessions.
Off, On
AllowCustomizeWinSize

adjust the window size for ICA
sessions.
On, Off
AlternateAddress
Specifies whether or not to return the Off, Mapped, On

alternate server address of the server
running Citrix Presentation Server in
the ICA file.
ApplicationAccessMethods
Defines whether applications can be Remote|Remote,Streaming

accessed with a remote client, the
Streaming Client, or both.
Delivery Options page. For more
information, see Managing Delivery
Options on page 35.
44
Setting
Description
Values
AuthenticationMethods
Defines the permitted logon methods.

This is a comma-separated list that
can contain any of the specified
values in any order. However,
AGEPassThrough, Federated, and
any combination of Explicit,
Anonymous,
CertificateSingleSignOn, Certificate,
and SingleSignOn are mutually
exclusive.
Single Sign-On administration page.
For more information, see Managing
Single Sign-On on page 33.
Explicit, Anonymous,
CertificateSingleSignOn,
Certificate, SingleSignOn|
AGEPassThrough|Federated
BypassFailedSTADuration
Time before a failed Secure Ticket

Time in minutes. The default
Authority server is considered for
is 60.
reuse.
ClientAddressMap
Part of the server-side firewall

configuration. A list of client address,
address type pairings. The first may
be a partial address, or a subnet
address and mask, while the latter can
take the values: Normal, Alternate,
Translated, SG, SGAlternate, and
SGTranslated. Using an asterisk (*) in
place of a client address or subnet
indicates the default for all otherwise
unspecified clients.
<ClientAddress>|<Subnet
Address>/<Subnet Mask>|*,
Normal|Alternate|Translated|
SG|SGTranslated|
SGAlternate,
Appendix A
45
Setting
Description
Values
ClientProxy
Client-side firewall option. Specifies

a list of client subnet addresses and
masks, or address prefixes, and
associated proxy settings. The client
address in the returned ICA file is
determined by these settings. Using
an asterisk (*) in place of a client
address or subnet indicates the default
for all otherwise unspecified clients.
The value of the third field (proxy
address) in each set of three is ignored
unless the second field (proxy type) is
an explicit proxy type (SOCKS or
Secure), but it must always be
present; the default value for this field
is the minus sign (-).
<ClientAddress>|<Subnet
Address>/<Subnet Mask>|*,
Auto|WpadAuto|Client|Non
e|SOCKS|Secure,
-|<ProxyAddress>|
<ProxyAddress>:
<ProxyPort>,
CSG_EnableSessionReliability
Specifies whether or not to use

Off, On
session reliability through the Secure
CSG_Server
Specifies the address of the Secure

None. Server address as a
FQDN.
CSG_ServerPort
Specifies the port of the Secure

None. Server port.
CSG_STA_URL<n>
Server providing the Secure Ticket

None. A URL to a Secure
Authority function.
Ticket Authority.
46
Setting
Description
Values
DuplicateLogInterval
Specifies the time period over which Time in seconds. The default
DuplicateLogLimit log entries will be value is 60.
monitored.
DuplicateLogLimit
Specifies the number of duplicate log Integer greater than 0. The

default is 10.
entries allowed in the
DuplicateLogInterval time period.
EnableKerberosToMPS
Whether or not to enable Kerberos

Off, On
authentication.
EnableLegacyICAClientSupport
Specifies whether or not older Citrix On, Off

Presentation Server Clients that
cannot read UTF-8 ICA files are
supported. If this is set to Off, the
Web Interface produces ICA files in
UTF-8 encoding.
EnableSTALoadBalancing
Permits requests to multiple Secure

On, Off
Ticket Authority servers to be load
balanced in a round-robin manner.
EnableVirtualCOMPortEmulation
Specifies whether or not PDA

Off, On
synchronization through tethered
USB connections is available to users.
EnableWorkspaceControl
Specifies whether or not workspace

control is available to users.
On, Off
Appendix A
47
Setting
Description
Values
ExplicitType
MSSO, HTTPBasic
Used when the
AuthenticationMethods parameter
includes Explicit; this determines
whether the Microsoft Single Sign-On
service or HTTP basic authentication
provides credentials.
Farmn
Specifies all the information for a

farm.
Farms administration page. For more
information, see Managing Farms
on page 30.
XML service address

[,XML service address,...]
[,Name:<name>]
[,XMLPort:<port>]
[,Transport:<HTTP|HTTPS|
SSL>]
[,SSLRelayPort:<port>]
[,BypassDuration:<duration
(60)>]
[,LoadBalance:<on|off>]
[,ECSUrlURL>]
[,AuthenticationTickets:<on|
off>]
[TicketTimeToLive:<second
s (200)>]
[RADETicketTimeToLive:
<seconds (30)>]
IcaWebClientClassID
Class ID of the Client for ActiveX.

Clients administration page. For
Clients on page 32.
238f6f83-b8b4-11cf-877100a024541ee3
ICAClientVersion
Minimum version number of the

None. The latest version of
Presentation Server Client that should the client.
be used on the users computer (from
the Client CD). Used to determine
whether or not there is a newer
version of the client than the one
currently installed.
Note: If the client is deployed from
the Web Interface for SharePoint site,
the available version is determined
automatically from the installation
files. Any values specified here
override the automatically detected
versions.
48
Setting
Description
Values
IgnoreClientProvidedClientAddress
Ignore the client-provided client

Off, On
address when set.
InternalServerAddressMap
A list of normal, translated address

NormalAddress =
pairings. The normal address
TranslatedAddress,
identifies the Secure Gateway server
address and the translated address is
the address that is returned to the
client.
JavaClientPackages
The default set of Client for Java

packages to download. Consists of a
comma-separated list in any order.
JavaClientRootCertificate
The file name of a private root

None. A valid filename.
certificate for the Client for Java. The
certificate must be located in the same
directory as the Client for Java
packages.
LaunchClients
The list of clients from which the user Ica-Local, Ica-Java,

can select.
Ica-Embedded,
Rdp-Embedded
Clients on page 32.
OverlayAutologonCredsWithTicket
Specifies that a logon ticket should be On, Off

duplicated in a logon ticket entry, or
placed in separate ICA launch file
ticket entries only.
ConfigUI,
PrinterMapping,
SecureICA, Audio,
ClientDriveMapping,
ClipBoard, SSL, Thinwire1,
ZeroLatency
Appendix A
49
Setting
Description
Values
OverrideIcaClientname
On, Off
Specifies whether or not a Web
Interface generated ID should be
passed in the clientname entry of the
ICA launch file.
PooledSockets
Specifies whether or not to use socket On, Off

pooling.
Global Farm Settings administration
page. For more information, see
Managing Global Farm Settings on
page 29.
RADEClientClassID
Specifies the ClassID of the ActiveX 4384f3c5-4a9e-4e81-9aaeRCO.

4251c2813861
Clients on page 32.
RADEClientVersion
Minimum version number of the

None. The latest version of
Streaming Client that should be used the client.
on the users computer (from the
Client CD). Used to determine
whether or not there is a newer
version of the client than the one
currently installed.
Note: If the client is deployed from
the Web Interface for SharePoint site,
the available version is determined
automatically from the installation
files. Any values specified here
override the automatically detected
versions.
RADESessionURL
Specifies the URL for the streamed

Example heartbeat
application session heartbeat page.
URL|Auto
Delivery Options page. For more
information, see Managing Delivery
Options on page 35.
50
Setting
Description
Values
ReconnectButton
Specifies whether or not workspace DisconnectedAndActive,

control should reconnect to
Disconnected, None
applications when the user presses the
reconnect button; and if so, whether to
reconnect to disconnected and active
applications, or only disconnected
ones.
RequestICAClientSecureChannel
Controls Transport Layer Security

Detect-AnyCiphers,
(TLS) settings.
TLS-GovCiphers,
SSL-AnyCiphers
RequestedHighColorIcons
Specifies the size of 32-bit-per-pixel 16, 32

icons requested from the Citrix XML
Service.
RetryCount
The number of times a failed request Integer greater than 0. The

to the Citrix XML Service is retried default is 5.
before the service is deemed to have
failed.
page 29.
ServerAddressMap
Part of server-side firewall support. A NormalAddress,

list of normal, translated address
TranslatedAddress,...
pairings. The normal address
identifies the address of the server
running Citrix Presentation Server
and the translated address is the
address that is returned to the client.
Appendix A
Setting
Description
Values
ShowClientWizardNotRunWarning
This parameter determines whether or On

not messages appear warning the user
they have not run the Client Detection
and Download wizard.
If this parameter is present, the
messages are shown if the value is
On. If this parameter is not present,
the default value of On is assumed.
Timeout
Specifies the time-out value to use

Time-out value in seconds.
when communicating with the Citrix The default is 60.
XML Service.
page 29.
TransparentKeyPassthrough
Specifies the mode of the Windows

key combinations behavior passed
through to the server running Citrix
Presentation Server.
FullScreenOnly, Local,
Remote
51
52
A PPENDIX
Troubleshooting Application Definitions
The Single Sign-On manager tool allows you to troubleshoot application

definitions for Citrix Presentation Server for your SharePoint site, including
creating and deleting application definitions, and storing and displaying stored
credentials for your site.
To create an application definition for Citrix Presentation Server
To create an application definition for Citrix Presentation Server, enter the

following at a command prompt:
ssomanager create URL display contact_email user_prompt password_prompt
Replace URL with the location of your SharePoint site, display with the text you
want users to see when they are prompted for their credentials, contact_email
with the relevant email address, user_prompt with text prompting users to enter
their user name, and password_prompt with text prompting users to enter their
password, for example:
ssomanager create http://myserver/mysite Citrix Resources
admin@example.com Enter user name Enter password
To delete an application definition for Citrix Presentation Server
To delete an application definition for Citrix Presentation Server, enter the

following at a command prompt, where URL is the location of your SharePoint
site:
ssomanager delete URL
Note This deletes the application definition for the specified site without any
further warning.
To display stored credentials
To display the credentials stored for a SharePoint site, enter the following at a
command prompt, where URL is the location of your SharePoint site:
ssomanager get URL
54
I NDEX
Index
A
accessing
documentation 5
activating
features 18
adding
solutions 17
Web Interface Web Parts to pages 20
advanced administration 37
application definitions
removing manually 28
authentication
Kerberos 34
C
clients
managing 32
configuring
clients 32
content redirection 36
delivery options 35
farms 30
global farm settings 29
sessions 31
Single Sign-On 33
Web Parts 20
configuring 36
managing 36
customizing
the Web Part appearance 20
D
deactivating
features 24
deleting
solutions 26
delivery options
managing 35
deploying
solutions 17
documentation
accessing 5
F
farms
managing 30
features
activating 18
deactivating 24
file locations 10
G
global farm settings
managing 29
I
installing
L
log files 23
56
managing
advanced administration 37
clients 32
delivery options 35
farms 30
global farm settings 29
sessions 31
Single Sign-On 33
uninstalling
P
post installation tasks 20
R
removing
application definitions manually 28
Web Parts from pages 24
retracting
solutions 26
S
sessions
managing 31
Single Sign-On
managing 33
single sign-on authentication
Kerberos 34
pass-through 33
SharePoint 34
site deployment tool 22
solutions
adding 17
deleting 26
deploying 17
retracting 26
ssomanager 53
system requirements 15
T
tools
site deployment 22
ssomanager 53
troubleshooting
W
Web Interface for Microsoft SharePoint
features 7
installing 17
introduction 6
post installation tasks 20
system requirements 15
troubleshooting 22
uninstalling 23
Web Parts
adding Web Interface Web Parts to pages 20
advanced customization of 22
configuring 20
customizing appearance of 20
removing from pages 24

Wisp

Uploaded by

Document Information

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Wisp

Uploaded by

Copyright:

Available Formats

Web Interface for Microsoft SharePoint 2007

Citrix Web Interface for Microsoft SharePoint 2007

Planning Your Deployment

Installing the Web Interface for Microsoft SharePoint

Post-Installation Tasks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .20

Configuring the Web Interface for Microsoft SharePoint

Web Interface Configuration File Settings

Troubleshooting Application Definitions

How to use this documentation

How to Use this Guide

Introducing the Web Interface for Microsoft SharePoint

Internet Explorer 6.x (32-bit)

Internet Explorer 7.x (32-bit)

Note Application streaming functionality is available only for users of level

Netscape Navigator 7.2

Netscape Navigator 8.1

The Web Interface for Microsoft SharePoint Features

Citrix Application Delivery Web Part

Application Streaming Support

Note Application streaming is available only when connecting to servers

Citrix HTTP Request Redirection

Note Depending on the Internet Explorer security settings in your deployment,

Citrix Context Menu Integration

Note Depending on the Internet Explorer security settings in your deployment,

Citrix New Menu Integration

Client Detection and Deployment Process

Integration with SharePoint Administration

Integration with SharePoint Navigation

Display of published resources available for the user organized into

Access to published resources using seamless connections

Integrated Windows authentication

Workspace control functionality, as follows:

Zone preference and failover

Secure Gateway support for accessing published resources

Access Gateway support

Farm aggregation, assuming a single set of credentials for all farms

Network address translation (NAT) firewall support

Client-side proxy support

Microsoft Forefront support

Microsoft SharePoint Designer support

32-bit color icon support

Note 32-bit color icon support is available only when connecting to

common files, usually C:\Program Files\Common Files\

webroot, usually C:\inetpub\wwwroot\wss\VirtualDirectories\80\

sharepoint, usually common files\Microsoft Shared\web server

Planning Your Deployment

This chapter contains information about planning your SharePoint deployment,

Application server. Application servers are front-end servers that provide

Database server. Database servers are back-end servers running Microsoft

SharePoint can be installed on Microsoft Windows Server 2003 Standard

For more information about deploying SharePoint Services or SharePoint Server,

Secure Gateway Deployment

Planning Your Deployment

Secure Gateway and Proxy Servers

Installing the Web Interface for

Installing the Web Interface for Microsoft SharePoint

Troubleshooting the Web Interface for Microsoft SharePoint Installation

Uninstalling the Web Interface for Microsoft SharePoint

Operating System Requirements

Visual J# 2.0 Second Edition

Microsoft Windows SharePoint Services Version 3.0

SQL Server Requirements

Installing the Web Interface for Microsoft SharePoint

Note CitrixMossCore.wsp can be activated only if you are running SharePoint