Citrix gateway plugin linux

Saved searches

Use saved searches to filter your results more quickly

You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session.

A Nagios Plugin that emulates a full login process into Citrix Gateway (formerly Citrix NetScaler Gateway) and Storefront.

slauger/check_netscaler_gateway

This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.

Name already in use

A tag already exists with the provided branch name. Many Git commands accept both tag and branch names, so creating this branch may cause unexpected behavior. Are you sure you want to create this branch?

Sign In Required

Please sign in to use Codespaces.

Launching GitHub Desktop

If nothing happens, download GitHub Desktop and try again.

Launching GitHub Desktop

If nothing happens, download GitHub Desktop and try again.

Launching Xcode

If nothing happens, download Xcode and try again.

Launching Visual Studio Code

Your codespace will open once ready.

There was a problem preparing your codespace, please try again.

Latest commit

Git stats

Files

Failed to load latest commit information.

README.md

check_netscaler_gateway Nagios Plugin

This is a Nagios monitoring plugin for the Citrix NetScaler Gateway. The plugin emulates a full login proccess on a NetScaler Gateway vServer and checks if there are any resources available.

-bash# ./check_netscaler_gateway.pl -H citrix.example.com -u monitoring -p password -S Lab -v ** POST https://citrix.example.com/cgi/login ==> 302 Object Moved ** POST https://citrix.example.com/cgi/setclient?wica ==> 200 OK ** POST https://citrix.example.com/Citrix/LabWeb/Home/Configuration ==> 200 OK ** POST https://citrix.example.com/Citrix/LabWeb/Authentication/GetAuthMethods ==> 200 OK ** POST https://citrix.example.com/Citrix/LabWeb/GatewayAuth/Login ==> 200 OK ** POST https://citrix.example.com/Citrix/LabWeb/Resources/List ==> 200 OK ** GET https://citrix.example.com/cgi/logout ==> 200 OK NetScaler Gateway OK - Admin Desktop; CAD Desktop; Calculator; HDX Desktop; HDX TS Desktop; Server 2016 Desktop; Windows 8 Desktop; XA 2012 Desktop; 

Run the following commands to install all Perl dependencies (Monitoring::Plugin, LWP, JSON, HTTP::Cookies, Data::Dumper).

Enterprise Linux (CentOS, RedHat)

yum install perl-libwww-perl perl-JSON perl-LWP-Protocol-https perl-Monitoring-Plugin perl-HTTP-Cookies perl-Data-Dumper 

apt-get install libwww-perl liblwp-protocol-https-perl libjson-perl libmonitoring-plugin-perl 

The preinstalled Perl distribution is missing the JSON and Monitoring::Plugin libaries. The best way is to install them is trough the cpanminus tool. The cpanminus tool can be installed trough brew.

Use the following commands to install the missing perl libaries.

sudo cpanm JSON sudo cpanm Monitoring::Plugin 

Usage: check_netscaler_gateway -H [ -u ] [ -p ] -S [-w ] [-c ] [ -v|--verbose ] [ -d|--debug ] [ -t ] -?, --usage Print usage information -h, --help Print detailed help screen -V, --version Print version information --extra-opts=[section][@file] Read options from an ini file. See https://www.monitoring-plugins.org/doc/extra-opts.html for usage and examples. -H, --hostname=STRING Hostname of the NetScaler appliance to connect to -u, --username=STRING Username to log into box as -p, --password=STRING Password for login username -S, --store=STRING Name of the Store in Storefront (default: Store) -w, --warning=INTEGER Warning threshold for the numbers of found applications -c, --critical=INTEGER Critical threshold for the numbers of found applications -d, --debug Debug mode, print out every single HTTP request -t, --timeout=INTEGER Seconds before plugin times out (default: 15) -v, --verbose Show details for command-line debugging (can repeat up to 3 times) 

The plugin uses the Monitoring::Plugin Libary, so you can use —extra-opts and seperate the login crendetials from your nagios configuration.

[netscaler] username=nagios password=password 

Источник

Установка VPN клиента Citrix Netscaler Gateway Client на Debian GNU/Linux 11 (Bullseye)

На компьютере с ОС Debian GNU/Linux Bullseye 11.2 c графической средой Gnome 3.38 и оконным интерфейсом Wayland потребовалось установить VPN-клиента — Citrix Netscaler Gateway Client. Задача оказалась не совсем тривиальной, поэтому решил написать небольшую шпаргалку.

Посмотрев на сайте Citrix, обнаружил, что с точки зрения поддержки клиентов на базе Linux, имеется deb-пакет, ориентированный на старые версии Ubuntu Linux. Скачать актуальную версию пакета можно со страницы загрузки: Citrix Gateway Plug-Ins/Clients.

Найти там можно два пакета — nsginstaller64.deb и nsgclient18_64.deb. Как я понял, пакет nsginstaller64.deb это просто более старая версия пакета, которая заменяется пакетом nsgclient18_64.deb при установке второго поверх первого на системе Debian Bullseye.

Прямая установка пакета nsgclient18_64.deb на Debian Bullseye положительного результата не даст, так как мы получим ошибки неразрешённых зависимостей. В Интернете можно найти обсуждения того, как люди безуспешно пытались провести установку на более новых версиях Debian/Ubuntu.

Посмотрим информацию о скачанном пакете:

# dpkg -I nsgclient18_64.deb new Debian package, version 2.0. . Package: nsgclient Version: 1.0.0.143 LastSupportedVersion: 1.0.0.143 Architecture: amd64 Essential: no Priority: optional Maintainer: Citrix Inc Section: non-free/net Description: NetScaler Gateway Client for Linux Citrix NSGClient is the Linux VPN Client for connecting to Enterprise Network via NetScaler Gateway. Users can connect to corporate network and access remote resources securely. Please access the NetScaler Gateway User's guide for more information. Installed-Size: 3072 Depends: libappindicator1, libnotify4, libcurl3-gnutls|libcurl4-gnutls-dev, libproxy1-plugin-webkit, libnm-glib4, libnm-util2, libglib2.0-0, libnl-cli-3-200, libnl-route-3-200, libnl-3-200, libnl-genl-3-200

Зависимости, которые нам придётся разрешить «в рукопашную» связаны с пакетами:

Проблема заключается в том, что первые три пакета отсутствуют в официальных репозиториях Debian Bullseye и могут быть найдены лишь в репозиториях предыдущих версий Debian. Кроме того, часть этих пакетов потребуют наличия в системе других пакетов, зависимости которых, также придётся разрешать.

После некоторых экспериментов, стал понятен порядок действий, которые нужно предпринять для возможности установки Citrix Netscaler Gateway Client в Debian 11.

В первую очередь, установим из репозиториев Debian Bullseye три следующих пакета:

# apt-get install libdbusmenu-gtk4 libnl-cli-3-200 libnl-nf-3-200

Затем скачаем по прямым ссылкам пакеты, относящиеся к другим версиям Debian:

http://ftp.us.debian.org/debian/pool/main/liba/libappindicator/libappindicator1_0.4.92-7_amd64.deb http://ftp.us.debian.org/debian/pool/main/libi/libindicator/libindicator7_0.5.0-4_amd64.deb http://ftp.us.debian.org/debian/pool/main/n/network-manager/libnm-glib4_1.6.2-3+deb9u2_amd64.deb http://ftp.us.debian.org/debian/pool/main/n/network-manager/libnm-util2_1.6.2-3+deb9u2_amd64.deb

Разместим четыре выше обозначенных пакета в одном каталоге с пакетом nsgclient18_64.deb и, перейдя в этот каталог, выполним команду установки всех пяти пакетов из текущего каталога:

# dpkg -i *.deb

После завышения успешной установки пакетов в главном меню графической оболочки появится ссылка на приложение nsgclient.

При запуске ПО у нас будет запрошен URL VPN-сервера Citrix Netscaler Gateway и данные для аутентификации пользователя. При успешном подключении получим соответствующую «всплывашку».

На панели задач появится значок с пунктами управления VPN-клиентом.

Если в ходе подключения Gateway Client возникают какие-то проблемы, то можно воспользоваться механизмом включения расширенного логирования в графическом интерфейсе клиента на вкладке «Configuration» > «Logging«.

Сами лог-файлы можно найти в подкаталоге .citrix домашнего каталога пользователя.

Источник

Citrix Secure Access for Linux release notes

The Citrix Secure Access client and Citrix End Point Analysis (EPA) client for Linux are now released on a standalone basis and are compatible with all NetScaler versions. The Citrix Secure Access client version follows the format YY.MM Release.Build.

The release notes describe the new features, enhancements to the existing features, fixed issues, and known issues.

What’s new: The new features and enhancements available in the current release.

Fixed issues: The issues that are fixed in the current release.

Known issues: The issues that exist in the current release and their workarounds, wherever applicable.

For detailed information on the supported features, see NetScaler Gateway Product Documentation.

23.6.2 (20-Jun-2023)

What’s new

• Ubuntu 22.04 support for Citrix Secure Access client and Citrix EPA client Ubuntu 22.04 is the latest long term support release of Ubuntu. The Citrix Secure Access and Citrix EPA clients are compatible with Ubuntu 22.04. For more information, see Client software requirements. [CGOP-24312]
• GSLB support for Citrix Secure Access and Citrix EPA clients The Citrix Secure Access client and Citrix EPA client for Ubuntu support the Global Server Load Balancing (GSLB) feature on NetScaler Gateway. By configuring GSLB for NetScaler Gateway, admins can ensure that the enterprise network (intranet resources) is always available to end-users from any geographic location. GSLB also addresses disaster situations or network outages wherein users of one datacenter can be redirected to another datacenter. For more information, see Support for active-active GSLB deployments on NetScaler Gateway. [CGOP-23506]
• HTTPOnly support for Citrix Secure Access and Citrix EPA clients The Citrix Secure Access and Citrix EPA clients support the HTTPOnly flag on the authentication cookies. NetScaler Gateway admins configure the HTTPOnly feature on the authentication cookies that are generated by web applications. This feature helps in preventing cookie theft due to cross-site scripting. For more information, see Enforce the HttpOnly flag on authentication cookies. [CGOP-23517]

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

DIESER DIENST KANN ÜBERSETZUNGEN ENTHALTEN, DIE VON GOOGLE BEREITGESTELLT WERDEN. GOOGLE LEHNT JEDE AUSDRÜCKLICHE ODER STILLSCHWEIGENDE GEWÄHRLEISTUNG IN BEZUG AUF DIE ÜBERSETZUNGEN AB, EINSCHLIESSLICH JEGLICHER GEWÄHRLEISTUNG DER GENAUIGKEIT, ZUVERLÄSSIGKEIT UND JEGLICHER STILLSCHWEIGENDEN GEWÄHRLEISTUNG DER MARKTGÄNGIGKEIT, DER EIGNUNG FÜR EINEN BESTIMMTEN ZWECK UND DER NICHTVERLETZUNG VON RECHTEN DRITTER.

CE SERVICE PEUT CONTENIR DES TRADUCTIONS FOURNIES PAR GOOGLE. GOOGLE EXCLUT TOUTE GARANTIE RELATIVE AUX TRADUCTIONS, EXPRESSE OU IMPLICITE, Y COMPRIS TOUTE GARANTIE D’EXACTITUDE, DE FIABILITÉ ET TOUTE GARANTIE IMPLICITE DE QUALITÉ MARCHANDE, D’ADÉQUATION À UN USAGE PARTICULIER ET D’ABSENCE DE CONTREFAÇON.

ESTE SERVICIO PUEDE CONTENER TRADUCCIONES CON TECNOLOGÍA DE GOOGLE. GOOGLE RENUNCIA A TODAS LAS GARANTÍAS RELACIONADAS CON LAS TRADUCCIONES, TANTO IMPLÍCITAS COMO EXPLÍCITAS, INCLUIDAS LAS GARANTÍAS DE EXACTITUD, FIABILIDAD Y OTRAS GARANTÍAS IMPLÍCITAS DE COMERCIABILIDAD, IDONEIDAD PARA UN FIN EN PARTICULAR Y AUSENCIA DE INFRACCIÓN DE DERECHOS.

このサービスには、Google が提供する翻訳が含まれている可能性があります。Google は翻訳について、明示的か黙示的かを問わず、精度と信頼性に関するあらゆる保証、および商品性、特定目的への適合性、第三者の権利を侵害しないことに関するあらゆる黙示的保証を含め、一切保証しません。

ESTE SERVIÇO PODE CONTER TRADUÇÕES FORNECIDAS PELO GOOGLE. O GOOGLE SE EXIME DE TODAS AS GARANTIAS RELACIONADAS COM AS TRADUÇÕES, EXPRESSAS OU IMPLÍCITAS, INCLUINDO QUALQUER GARANTIA DE PRECISÃO, CONFIABILIDADE E QUALQUER GARANTIA IMPLÍCITA DE COMERCIALIZAÇÃO, ADEQUAÇÃO A UM PROPÓSITO ESPECÍFICO E NÃO INFRAÇÃO.

Источник