Citrix Linux Client 64bit (AMD64) for Ubuntu Jaunty 9.04

This post is record to help myself if I ever decide to do a fresh install again, so it might be a bit messy.  (Posting helps me keep these untitled files off my hard-drive hehe)

Download the Citrix Linux client (v11) from :-
http://www.citrix.com/English/ss/downloads/index.asp
URL mileage may vary, go back to the home page if its not right.

Unpack the tarball and install… e.g.

tar -xvzf linuxx86-11.0.140395.tar.gz
sudo ./setupwfc

Might be missing a ‘cd’ step here obviously…
If run using sudo, default installs to /usr/lib/ICAClient

Confirm it doesn’t run because of libmotif

/usr/lib/ICAClient/wfcmgr
/usr/lib/ICAClient/wfcmgr: error while loading shared libraries: libXm.so.4: cannot open shared object file: No such file or directory

Download a 32bit (i386) Open Motif package from :-
http://ftp.ubuntu.com/ubuntu/pool/multiverse/o/openmotif/

Rip out libXm from it…

$ dpkg -x libmotif3_2.2.3-4_i386.deb ./tmp
$ cd ./tmp
~/tmp$ cd usr/lib
~/tmp/usr/lib$ ls
libMrm.so.3      libUil.so.3      libXm.so.3      X11
libMrm.so.3.0.2  libUil.so.3.0.2  libXm.so.3.0.2
~/tmp/usr/lib$ sudo cp libXm.so.3 /usr/lib32/
~/tmp/usr/lib$ cd /usr/lib32
/usr/lib32$ sudo ln -s libXm.so.3 libXm.so.4

Then this stupid error…
You have not chosen to trust “Equifax Secure Global eBusiness CA-1”, the issuer of the servers security certificate (SSL error 61).

Download the root 1 (Base64) Cert from :-
http://www.geotrust.com/resources/root-certificates/index.html
Change the extension to .crt
Copy it to Citrix Installation Path/ICAClient/keystore/cacerts

$ mv Equifax_Secure_Global_eBusiness_CA-1.cer Equifax_Secure_Global_eBusiness_CA-1.crt
$ sudo cp Equifax_Secure_Global_eBusiness_CA-1.crt /usr/lib/ICAClient/keystore/cacerts/

Set firefox to open the ICA with /usr/lib/ICAClient/wfica

Voila…

Need to tidy this post up in the future

36 thoughts on “Citrix Linux Client 64bit (AMD64) for Ubuntu Jaunty 9.04”

  1. I double that, thank you, one of the simpler instructions to install citrix on ubuntu x64.

  2. I feel like a fool because seems to have worked for everyone. I’ve used various version of Linux on and off but it has been awhile. I probably doing somethings really stupid but I can’t seem to get this to work.

    I’ve downloaded the tar.gz to ./tmp
    Unpacked per your instruction but when I run the setup script I get the following errors.

    I feel like a fool because seems to have worked for everyone. I’ve used various version of Linux on and off but it has been awhile

    /tmp/./linuxx86/hinst: 179: /tmp/./linuxx86/echo_cmd: not found

    /tmp/./linuxx86/hinst: 180: /tmp/./linuxx86/echo_cmd: not found

    /tmp/./linuxx86/hinst: 181: /tmp/./linuxx86/echo_cmd: not found

    /tmp/./linuxx86/hinst: 182: /tmp/./linuxx86/echo_cmd: not found

    /tmp/./linuxx86/hinst: 2467: /tmp/./linuxx86/echo_cmd: not found

    /tmp/./linuxx86/hinst: 2484: /tmp/./linuxx86/echo_cmd: not found

    /tmp/./linuxx86/hinst: 2484: /tmp/./linuxx86/echo_cmd: not found

    what I’m I doing wrong?

    1. So which version of Linux are you using? While it shouldn’t be the problem, any reason you’re unpacking into /tmp instead of in your home directory (Are you doing it to /tmp or “./tmp”)? Where do the errors come from? From the setupwfc script?

    2. I think this means you need to cd back one level. When you extract the tarball, it drops the install script (setupwfc) in the same directory in which you extracted it. Don’t cd into the linuxx86 dir.

    3. I just ran into this same problem on a new install

      Edited the setupwfc script and made the following change (Comment out the ECHO_CMD line and add the second)…
      #ECHO_CMD=”${PLATFORM_PACKAGE_DIR}/$TR_FILE” export ECHO_CMD
      ECHO_CMD=echo

      1. OMFG. It took me an hour to fix this when installing Citrix on Oneiric x64, and your post was the trick that finally worked. Thank you, thank you, thank you.

  3. Hi,

    Still have the stupid error…
    You have not chosen to trust “Equifax Secure Global eBusiness CA-1″, the issuer of the servers security certificate (SSL error 61).

    after doing this:
    Download the root 1 (Base64) Cert from :-
    http://www.geotrust.com/resources/root-certificates/index.html
    Change the extension to .crt
    Copy it to Citrix Installation Path/ICAClient/keystore/cacerts

    $ mv Equifax_Secure_Global_eBusiness_CA-1.cer Equifax_Secure_Global_eBusiness_CA-1.crt
    $ sudo cp Equifax_Secure_Global_eBusiness_CA-1.crt /usr/lib/ICAClient/keystore/cacerts/

    -r–r–r– 1 root sys 964 2009-06-17 23:39 Equifax_Secure_Global_eBusiness_CA-1.crt
    -r–r–r– 1 root sys 606 2009-06-17 20:11 GTECTGlobalRoot.crt
    -r–r–r– 1 root sys 576 2009-06-17 20:11 Pcs3ss_v4.crt
    -r–r–r– 1 root sys 568 2009-06-17 20:11 SecureServer.crt
    anibal@pingu01:/usr/lib/ICAClient/keystore/cacerts$ cat Equifax_Secure_Global_eBusiness_CA-1.crt
    —–BEGIN CERTIFICATE—–
    MIICkDCCAfmgAwIBAgIBATANBgkqhkiG9w0BAQQFADBaMQswCQYDVQQGEwJVUzEc
    MBoGA1UEChMTRXF1aWZheCBTZWN1cmUgSW5jLjEtMCsGA1UEAxMkRXF1aWZheCBT
    ZWN1cmUgR2xvYmFsIGVCdXNpbmVzcyBDQS0xMB4XDTk5MDYyMTA0MDAwMFoXDTIw
    MDYyMTA0MDAwMFowWjELMAkGA1UEBhMCVVMxHDAaBgNVBAoTE0VxdWlmYXggU2Vj
    dXJlIEluYy4xLTArBgNVBAMTJEVxdWlmYXggU2VjdXJlIEdsb2JhbCBlQnVzaW5l
    c3MgQ0EtMTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAuucXkAJlsTRVPEnC
    UdXfp9E3j9HngXNBUmCbnaEXJnitx7HoJpQytd4zjTov2/KaelpzmKNc6fuKcxtc
    58O/gGzNqfTWK8D3+ZmqY6KxRwIP1ORROhI8bIpaVIRw28HFkM9yRcuoWcDNM50/
    o5brhTMhHD4ePmBudpxnhcXIw2ECAwEAAaNmMGQwEQYJYIZIAYb4QgEBBAQDAgAH
    MA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAUvqigdHJQa0S3ySPY+6j/s1dr
    aGwwHQYDVR0OBBYEFL6ooHRyUGtEt8kj2Puo/7NXa2hsMA0GCSqGSIb3DQEBBAUA
    A4GBADDiAVGqx+pf2rnQZQ8w1j7aDRRJbpGTJxQx78T3LUX47Me/okENI7SS+RkA
    Z70Br83gcfxaz2TE4JaY0KNA4gGK7ycH8WUBikQtBmV1UsCGECAhX2xrD2yuCRyv
    8qIYNMR1pHMc8Y3c7635s3a0kr/clRAevsvIO1qEYBlWlKlV
    —–END CERTIFICATE—–
    anibal@pingu01:/usr/lib/ICAClient/keystore/cacerts$

  4. Something odd happened overnight. I had to add the Root 1 certificate from Equifax following the above procedure.

    i.e. Download http://www.geotrust.com/resources/root_certificates/certificates/Equifax_Secure_Certificate_Authority.cer

    madox@madox-laptop:~$ mv Equifax_Secure_Certificate_Authority.cer Equifax_Secure_Certificate_Authority.crt
    madox@madox-laptop:~$ sudo mv Equifax_Secure_Certificate_Authority.crt /usr/lib/ICAClient/keystore/cacerts/

    All is fine again…

    Hi Anibal – the only difference between mine and yours looks like my root user has rw access.
    madox@madox-laptop:/usr/lib/ICAClient/keystore/cacerts$ ls -l
    total 32
    -r–r–r– 1 root sys 891 2009-04-29 11:34 BTCTRoot.crt
    -r–r–r– 1 root sys 774 2009-04-29 11:34 Class3PCA_G2_v2.crt
    -r–r–r– 1 root sys 774 2009-04-29 11:34 Class4PCA_G2_v2.crt
    -rw-r–r– 1 madox madox 1162 2009-06-23 22:23 Equifax_Secure_Certificate_Authority.crt
    -rw-r–r– 1 root root 964 2009-04-29 11:57 Equifax_Secure_Global_eBusiness_CA-1.crt
    -r–r–r– 1 root sys 606 2009-04-29 11:34 GTECTGlobalRoot.crt
    -r–r–r– 1 root sys 576 2009-04-29 11:34 Pcs3ss_v4.crt
    -r–r–r– 1 root sys 568 2009-04-29 11:34 SecureServer.crt

    1. Actually, it turns out (at least on my Jaunty 64 bit install) that the certs are all already there installed with Firefox.

      ls /usr/share/ca-certificates/mozilla and you see a few Equifax certificates.

      You can then do something like this to set it up, assuming you installed into /usr/lib/ICAClient

      cd /usr/lib/ICAClient/keystore/cacerts
      for f in /usr/share/ca-certificates/mozilla/Equifax*.crt; do
      sudo ln -s $f .
      done

      1. Looks like you can take this excellent idea one step further and just link the whole of /usr/share/ca-certificates/mozilla to BE /usr/lib/ICAClient/keystore/cacert

        So instead of Jeremy’s script above, just do this :
        sudo mv /usr/lib/ICAClient/keystore/cacerts /usr/lib/ICAClient/keystore/cacerts-old
        (just to be on the safe side)

        Then:
        sudo ln -s /usr/share/ca-certificates/mozilla /usr/lib/ICAClient/keystore/cacerts

        This is only a good idea if you access your Citrix through a web page, since it means that as long as you’ve connected to the web interface, you’ve most likely already just downloaded the required certificate to connect to the presentation server thereafter.

        I suppose that if you use the program neighbourhood (or whatever it’s called now), you’d be better sticking to a straight copy…

  5. Hmmm…….after downloading/extracting libmotif-dev_2.2.3-4.deb to ./tmp

    I get a different list of files:
    /tmp/usr/lib$ ls
    libMrm.a libMrm.so libUil.a libUil.so libXm.a libXm.so

    What did I do wrong?

  6. At this step:
    /usr/lib/ICAClient/wfcmgr

    my result is:
    /usr/lib/ICAClient/wfcmgr: error while loading shared libraries: libXm.so.6: cannot open shared object file: No such file or directory

    [Note the so.6, not so.4]

    The client is v11 3/2/09. ????
    Any help appreciated.

  7. Ummmm…..

    On second look, my error states that libXp.so.6 can’t be found (not libXm). When I create a link for that, the error then states:
    error while loading shared libraries: libXpm.so.4: cannot open shared object file: No such file or directory

    Maybe I’ll just start from scratch again.

  8. Somebody tried with Ubuntu 9.10 ? I get: The Citrix SSL Server that you selected is not accepting connections.

    Any clue ?

    Thanks

  9. Awesome. Works great, thanks.

    I did have to do the Jeremy’s hack of ln-ing the certs from mozilla. Other than that, everything worked great.

    Thanks again.

  10. This just worked a treat for me in 64 bit Karmic. THANK YOU SIR! After 2 hours of banging on this last night, your post got me a working citrix connection in 30 minutes this morning.

    Thanks again.

  11. Ubuntu 9.04 AMD64 – Connect to the Citrix Access Gateway, am able to log in, but when trying to connect to the list of published apps Firefox displays the following:
    Redirect Loop
    Firefox has detected that the server is redirecting the request for this address in a way that will never complete.
    The browser has stopped trying to retrieve the requested item. The site is redirecting the request in a way that will never complete.
    * Have you disabled or blocked cookies required by this site?
    * NOTE: If accepting the site’s cookies does not resolve the problem, it is likely a server configuration issue and not your computer.

    I’ve verified that cookies are enabled and followed the steps in this post to no avail. When I run /usr/lib/ICAClient/wfcmgr I get the following error:
    Citrix XenApp – Cannot Contact the Citrix Server
    Citrix XenApp cannot update the configuration information. The server running the Web Interface may not be available or its URL may be incorrect. Also, the configuration file may contain errors or its location may be incorrect.

    The URL i am attempting to connect to is https://citrix.hanqual.com. The URL is available and correct (I’m connected to it on a thin client on the other side of my KVM).

  12. with the help of this post, and then the guy that posted at gelbar, the client now works for me in 9.10 64bit. the getlib solved my issue. the latest 11 client from CTX was asking for a libXm.so.6 or something and was just being fussy.

  13. Hi ,

    I have installed Citrix ICA client 9 on Ubuntu 9.04, I am not getting ant library or cert errors, but when I connect to My citrix Sevrer it failes with error “Network or dial up connection error preventing communications with the Citrix Server”

    Please help

  14. Hi,

    Thanks for the guide, I got my client working..!

    However, I need to implement this install in an unattended (preseeded) linux install. I have a bootscript that runs at login wich now puts libmotif links in place, extracts the citrix package and starts the install, but how to deal with the installer’s questions unattended?

    My noob head says something like “echo ‘answers’ | ./setupwfc”…?

    Thanks,

    J

  15. check the electrical wiring, thats the only reason for ssl 29 and 38 errors in citrix/linux ubuntu…….thats what my IT is telling me

  16. Still solid advice a year and a half after you published this blog… got Citrix working in 64bit Ubuntu 10.04 with this guide. Thanks a lot Madox!!!

  17. Hi,
    when the line “./linuxx86/echo_cmd: not found” appears, just install ia32-libs (apt-get install ia32-libs).
    Maybe you can had this to your guide.

  18. Just wanted to post to say thank you for this guide! Steps worked flawlessly and was immediately able to open the Citrix apps I needed to thanks to this quick and easy guide. I appreciate it!

Leave a Reply to Pentest Cancel reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.