######################################################################## # # Citrix ICA Client for Unix Version 6.30 # # Copyright 1996-2002 Citrix Systems, Inc. All rights reserved. # ######################################################################## This file contains the latest information relating to the Citrix ICA Client for Unix. Please read this file fully before using the Citrix ICA Client for Unix. It contains important information that may be more up to date than other documentation you have available. For the latest information on this, and other Citrix Systems, Inc. products, please visit our World Wide Web site at: http://www.citrix.com/ 1. Contents ============ New Features Miscellaneous Your Comments Please 2. New Features ================ 2.1 Smart Card Support ----------------------- The ICA Client supports a number of smart card devices, facilitating smart card logon authentication and smart card application support. 2.2 Auto Client Reconnect -------------------------- The Auto Client Reconnect feature is triggered when the ICA Client detects that the connection to the server is broken. When this feature is enabled on a MetaFrame XP server, users do not have to reconnect manually or reenter logon credentials to continue working. 2.3 Server-client Content Redirection -------------------------------------- Server-client content redirection allows you to specify that URLs in a published application are opened using a local application. 2.4 Roaming User Reconnect --------------------------- This feature adds roaming capabilities to ICA sessions. Previously, ICA sessions were identified by the name of the client device from which they were initiated, and they were limited to that device. Feature Release 2 of MetaFrame XP identifies sessions by username, and allows users to resume their ICA sessions from any ICA-enabled device. 2.5 TLS Encryption ------------------ As an alternative to SSL 3.0, the ICA Client for Unix also supports TLS 1.0. TLS (Transport Layer Security) is the standardized form of SSL (Secure Sockets Layer). Both are cryptographic security protocols designed to ensure the integrity and privacy of data transfers across public networks. 2.6 Citrix Secure Gateway Support --------------------------------- The ICA Client for Unix provides full support for Citrix Secure Gateway Version 1.1. Citrix Secure Gateway acts as a secure Internet gateway between SSL/TLS-enabled ICA Clients and MetaFrame XP servers. 2.7 Enhanced Proxy Support -------------------------- As an alternative to SOCKS proxy, the ICA Client for Unix also supports Secure Proxy (also known as Security Proxy, HTTPS Proxy, and SSL-tunnelling). The ICA Client can also auto-detect proxy servers by obtaining the details of proxy servers on the network from the Web browser. 2.8 CDE integration ------------------- When installed, the Solaris client will optionally add menu entries and icons to the configuration for CDE (Common Desktop Environment). Support for several Microsoft Office file formats is included. 2.9 Composed Character Support ------------------------------ The ICA client supports input of additional characters using a Compose key (or other key bound to the Multi-key keysym), when this is supported by the local O.S. 3. Miscellaneous ================= 3.1 Changing Server List ------------------------- If you find that the list of available servers in the Server field of the Properties dialog appears to change, this is because you have access to more than one network with a number of servers on each. Normally the list reflects the network that the ICA Client is on. However, depending on network load and the load on the Citrix servers, sometimes the other network browser responds first and another list is displayed. To produce a consistent list you should specify one of the servers on the required list as the server browser in the Settings/Server Location dialog. 3.2 Zooming in Adobe Photoshop ------------------------------- It should be noted that the Adobe Photoshop zoom out utility using shift+left-mouse button is not supported by the ICA Client for Unix. To use this feature you should select the appropriate menu option instead of using the mouse. 3.3 Resolving names for Internet Servers ----------------------------------------- To allow you to resolve names of Internet Servers that you wish to connect to, it is recommended that you have DNS (Domain Name System) configured on your machine. 3.4 Attributes cannot be set for files on floppies --------------------------------------------------- Attempting to set file attributes (e.g. using the DOS ATTRIB command or Windows File Manager) on a locally mounted floppy drive silently fails. The file attributes are left unchanged. 3.5 Problems moving files on DOS floppies mounted on Sun machines ----------------------------------------------------------------- On DOS floppies mounted on Sun machines, the client has to move files to subdirectories by making a copy on the floppy then deleting the original. This means that it will fail if there is insufficient space on the floppy for a copy. The Unix mv(1) suffers from the same limitation. 3.6 Problem copying large files to DOS floppies on SunOS --------------------------------------------------------- On SunOS (Solaris 1.x), copying large files to a DOS floppy may fail with a Disk Full error even when there is sufficient space. This is because the MetaFrame server issues a FileChangeSize request before writing the data and SunOS cannot respond rapidly enough to this request. The following entry may be set in the [WFClient] section of the wfclient.ini file: IgnoreFileChangeSize=True This stops the timeout occurring, allowing large files to be copied. This solution however may have other side-effects and it should only be used if this problem is encountered. 3.7 Client licensing and multi-homed hosts ------------------------------------------- Client licensing relies on being able to determine a unique host id. On Digital Unix and HP-UX the host id is obtained from the address of a running network controller. On multi-homed hosts the default is to use the first running network controller provided it is up. This may be overridden by setting the IdentificationController parameter in the [WFClient] section of the wfclient.ini file to the name of a network device to use. For example "ln0", "tra1", "lan2", etc. 3.8 Correct operation of Client Drive Mapping with filenames containing accented European characters ------------------------------------------------------------------------ Correct operation of Client Drive Mapping with filenames containing accented characters (e.g. Ä) may only be obtained by setting the Citrix Server DOS codepage to 1252. This may be accomplished by setting the server registry entry HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Nls\CodePage\OEMCP to 1252. Within a console window however you may then need to set the codepage back to 850 using the CHCP command in order for DOS applications to display correct characters and accept alt-numeric entries from the keypad. Note that in order for the registry change to take effect, your Citrix server must be rebooted. 3.9 NumLock operation on Linux ------------------------------- The NumLock key operates incorrectly on some installations of Linux. To configure Linux so that NumLock works, edit the XFree86 configuration file (usually named XF86Config and located under the /etc or /etc/X11 directories). In the "keyboard" section make sure that the following lines are either not present or are commented-out (as shown below): # ServerNumLock # XkbDisable 3.10 Rapid color changes with TrueColor displays ------------------------------------------------- When connecting to a Citrix server users are given the option of using 256 colors. The 256 color option assumes video hardware with palette support which allows applications to rapidly change the palette colors producing animated displays. On a TrueColor display there is no facility to emulate the ability to produce animations by rapidly changing the palette. Emulating it in software is relatively expensive in time and network traffic. In order to reduce this, the Unix Client is configured to buffer up rapid palette changes and only update the real palette every few seconds. 3.11 SCO Unixware 2.1.3 - Unable to display in 16 color mode ------------------------------------------------------------- In some cases the client session is unable to display graphics and text properly. To compensate for these cases, the following line should be added to the [WFClient] section of the wfclient.ini file: ForcePlaneMask=True 3.12 Color approximation limitations ------------------------------------- Color approximation will fall back to using a private color map if other applications have allocated all 256 colors. 3.13 Redhat Package Manager (RPM) issues (Linux) ------------------------------------------------- Client packages distributed in RPM format have a few differences from the normal tar file installations. The setupwfc script is not needed and has been removed, as has the install.txt file. Uninstalling the client should be performed using "rpm -e ICAClient". Note that this may not delete the cache directory (/usr/lib/ICAClient/cache) which will then require manual removal. 3.14 Seamless mode with various window managers ------------------------------------------------ The default Seamless mode removes the local window manager decorations (title bar and borders) and uses the decorations sent from the server. Window managers differ in their mechanism to remove window decorations. The Client provides two hints to the window manager to remove the decorations. It sets the Motif hint _MOTIF_DECORATIONS or the KWM hint KWM_DECORATIONS as required to remove the decorations. Also, it sets the class of all seamless windows to "Wfica_Seamless", so that a window manager that does not recognize the hints can be told to remove the decorations via resource files entries. 3.15 Opaque movement of Seamless windows ----------------------------------------- Some window managers will continuously report the new window position while moving a window. This may cause excessive redrawing as the new positions are reported to the Citrix server. Switching to a mode where the window manager draws only the window outline when moving a window will solve this problem. 3.16 Auto-raise of Seamless windows ------------------------------------ If the window manager focus policy is focus-follows-mouse then Seamless windows may be automatically raised when the pointer enters them. To prevent this happening, in the [Thinwire 3.0] section of the wfclient.ini file, add the following line: SetTWIFocus=Off 3.17 AIX Graphics corruption in 16 color mode with MetaFrame for Unix ---------------------------------------------------------------------- When connecting to a MetaFrame for Unix (MFU) server in 16 color mode graphics may be corrupted. If this occurs then it is necessary to install the latest AIX Maintenace Level fix. This is available from IBM's website http://techsupport.services.ibm.com/rs6k/ml.fixes.html. At the time of writing the latest Maintenance Level fix was ML6 (4.3.3 -> 4.3.3.0.06 upgrade). 3.18 Icon Windows ------------------ The ICA Client creates icons for its windows that are X pixmaps with the depth of the default visual. These work with most window managers but are not compatible with the X Inter-Client Communication Convention. For full compatability set the following line in the [WFClient] section of the wfclient.ini file: UseIconWindow=True 3.19 Cursor visibility ----------------------- If you experience cursor visibility problems due to the background and the cursor being the same or similar colors on X Windows system, you can choose to modify cursor rendering by forcing areas of the cursor to be black or white. To do this, add the following line in the [WFClient] section of the wfclient.ini file: CursorStipple=ffff,ffff The above line renders black, substitute "ffff,ffff" with "0,0" for white. 3.20 Hotkey definitions using "-" and "+" ------------------------------------------ The default hotkey definitions that use these characters do not function with the main keypad. They are intended to be used with the numeric keypad. 3.21 Entering characters by code-page value with Solaris 2.7 and 2.8 --------------------------------------------------------------------- Microsoft Windows includes a feature that allows the entry of characters by typing their encoding value on the numeric keypad while holding down the left ALT key. This does not work on sessions originating from Solaris 2.7 or 2.8 systems because ALT+0 (on numeric keypad) is used for a local function by the CDE window manager, dtwm. To enable this feature, the active drwmrc file must be edited by commenting out the line beginning "AltKP_Insert". On Solaris 2.8, the file can be edited from the CDE control panel by selecting Desktop Controls > Extras > Edit dtwmrc, followed by Reload Actions. On Solaris 2.7, locate the active dtwmrc file in a subdirectory of $HOME/.dt, logout after editing and restart the session. 3.22 Use of /dev/random by the Solaris client --------------------------------------------- The Solaris client can now make use of /dev/random, if present, to initialize Secure ICA and SSL. /dev/random can be created by installing the SUNWski part of the patch 105710-01 from sunsolve.sun.com, or by installing the ANDIrand package from www.cosy.sbg.ac.at/~andi or vannevar.encypher.net/pub/utils. 3.23 Entering Polish characters on US English keyboards --------------------------------------------------------- Appropriately configured Microsoft Windows servers allow the entry of accented characters used in Polish with a US English keyboard by setting the input locale to "Polish (Programmers)". To enable this, set the keyboard layout to "Polish (Programmers)" in the client manager settings and set the following line in the [WFClient] section of the wfclient.ini file: UnicodeKeyboard=Off Note, this setting is not recommended for use with any other keyboard layout. 3.24 Using Network address translation and SSL/TLS through a firewall ----------------------------------------------------------------- In order for SSL/TLS to work correctly with the client firewall setting "Use alternate address for firewall connection", a valid SSL/TLS relay host must be specified by adding the following line to the appsrv.ini file: SSLProxyHost=fully.qualified.server.name:port number For example: SSLProxyHost=relay.mycorp.com:443 3.25 Case-sensitivity and client drive mapping. ---------------------------------------------- The Unix file system is case-sensitive, but the Windows file system is not. For example, files named "Data.txt" and "data.txt" are different files on Unix, but a single file on Windows. There may be problems when two files in a Unix directory have the same name, except for differences in case. Problems can occur with the Latin, Greek and Cyrillic letters of the JIS X 0208 character set as well as with Eurpoean character sets. When moving files whose names contain such characters from your local machine to Windows NT/2000 machine, be sure to avoid unexpected overwriting of files. 3.26 Using Japanese characters in file names and contents. --------------------------------------------------------- If you name a file using Japanese characters, then save it to your local machine using client drive mapping, when you view the file on your local machine the file name does not appear correctly. Conversely, if you create a file named with Japanese characters on your local machine, then save it on the Citrix server using client drive mapping, the file name does not appear correctly on the server. This is caused by the different character encodings, EUC-JP and SJIS that are used on client and server. The client does not translate between the character sets in filenames, or in file contents. Note: The issue also affects Japanese characters in parameters used in Extended Parameter Passing. 3.27 Netscape configuration and NFuse. -------------------------------------- The installation of the client usually adds configuration information for Netscape Navigator. This allows Navigator to start an ICA session using an ICA file returned by a web site, usually one from Citrix NFuse. Occasionally the Unix version of Navigator fails to process the information correctly, and will display a dialogue box requesting a file name for saving the ICA file. To correct this, use the "Edit" menu in Navigator, choose "Preferences", then "Navigator" and "Applications" in the left-hand panel, select "Citrix ICA" from the list, press "Edit" and set the "Handled By" option to Plugin. The Citrix plug-in should already be configured as shown in Navigator's "About Plugins" Help page. 3.28 Increased field lengths ----------------------------- The maximum length of the fields for username, password and NT domains have been increased to support authentication to Netware Directory Services. 4. Your comments please ======================== If you have any comments about the Citrix ICA Client for Unix software or documentation, please send them by email to documentation@citrix.com or by letter or fax to: Citrix Systems, Inc. 6400 NW 6th Way Fort Lauderdale, FL 33309 1-800-437-7503 http://www.citrix.com/ ########################################################################