为啥我的Linux VDA1.3 桌面服务无法和XenDesktop7.9 DDC通信

cqm

照着http://docs.citrix.com/en-us/xenapp-and-xendesktop/7-9/install-configure/red-hat-linux-vda.html的安装文档，我在Redhat 6.8上装了一个Linux VDA1.3的环境，可是运行/opt/Citrix/VDA/sbin/ctxsetup.sh后， 在/var/log/xdl/vda.log里面总是能看到这些错误消息。 我也无法通过网页或者Receiver打开桌面。

---------------------开始---------------------

[root@DC-RN68 xdl]# tail -f vda.log

2016-09-02 17:24:38.055 [INFO ] - ******************** Citrix Broker Agent - Start ********************

2016-09-02 17:24:38.069 [INFO ] - Java version "1.7.0_79". OpenJDK Runtime Environment. OpenJDK 64-Bit Server VM (build 24.79-b02, mixed mode)

2016-09-02 17:24:38.069 [INFO ] - The Citrix Desktop Service specification version is '7.5' and implementation version is '1.3.0.312'.

2016-09-02 17:24:38.078 [INFO ] - The Citrix Desktop Service is starting.

2016-09-02 17:24:41.413 [INFO ] - The Citrix Desktop Service successfully initialized communication services required for interaction between this machine and delivery controllers.

2016-09-02 17:24:41.777 [INFO ] - The Citrix Desktop Service successfully obtained the following list of 1 delivery controller(s) with which to register: 'dc-citrix.crt.fvt (10.117.43.210)'.

2016-09-02 17:25:00.998 [ERROR] - AgentKerberosServiceAction.Run: GSSException occurred. Error: Failure unspecified at GSS-API level (Mechanism level: Specified version of key is not available (44))

2016-09-02 17:25:01.149 [INFO ] - The Citrix Desktop Service has detected that the delivery controller 'dc-citrix.crt.fvt' (IP Address '10.117.43.210') cannot connect to this service.

This may be caused by errors in the configuration of this machine or the Delivery Controller to which this service is trying to connect. Detailed configuration instructions can be found in the Installation Guide.  Items to pay particular attention to are:

- All Delivery Controllers have been configured with the WCF endpoints required by the Linux Citrix Desktop Service.

- The Firewall on this machine is configured to allow incoming connections to the Citrix Desktop Service (ctxvda).

- A Computer object exists for this machine within Active Directory.

- Kerberos services on this machine are running and correctly configured.

2016-09-02 17:25:01.149 [ERROR] - RegistrationManager.AttemptRegistrationWithSingleDdc: Failed to register with http://dc-citrix.crt.fvt:80/Citrix/CdsController/IRegistrar. CXF Fault with detail CallbackCommunicationError, message 'Fail worker callback using SPN HOST/dc-rn68.crt.fvt and IP address 10.117.40.14'

2016-09-02 17:25:01.150 [INFO ] - The Citrix Desktop Service cannot connect to the delivery controller 'http://dc-citrix.crt.fvt:80/Citrix/CdsController/IRegistrar' (IP Address '10.117.43.210')

Check that the system clock is in sync between this machine and the delivery controller. If this does not resolve the problem, please refer to Citrix Knowledge Base article CTX117248 for further information.

Error Details:

Exception 'Fail worker callback using SPN HOST/dc-rn68.crt.fvt and IP address 10.117.40.14' of type 'class com.citrix.cds.protocol.controller.registrar.IRegistrarRegisterFaultFaultFaultMessage'.

2016-09-02 17:25:01.156 [ERROR] - Could not register with any controllers. Waiting to try again in 19204 ms. Multi-forest - false

2016-09-02 17:25:01.157 [INFO ] - The Citrix Desktop Service failed to register with any delivery controller.

The service will retry registering with controllers in approximately 19 seconds.

Please ensure that at least one delivery controller is available for Virtual Desktop Agents to register with. Refer to Citrix Knowledge Base article CTX117248 for further information.

---------------------结束---------------------

我照着http://support.citrix.com/article/CTX126992的步骤检查了一遍，问题照旧。

- All Delivery Controllers have been configured with the WCF endpoints required by the Linux Citrix Desktop Service.

>>不知道怎么检查WCF endpoints服务, 但我还在同样的DDC上配置了一个Windows2008R2 的桌面，能够正常登陆，我想WCF endpoints服务应该是好的。

- The Firewall on this machine is configured to allow incoming connections to the Citrix Desktop Service (ctxvda).

>>在DDC和VDA上都关闭了防火墙，而且关闭了iptables。

- A Computer object exists for this machine within Active Directory.

>>用的是Winbind模式。Domain membership, Kerberos and user authentication都验证过，可以顺利通过.

- Kerberos services on this machine are running and correctly configured.

>>通过验证Kerberos configuration.

这是执行 /opt/Citrix/VDA/sbin/ctxsetup.sh时用到的环境变量以及值

CTX_XDL_REGISTER_SERVICE=Y

CTX_XDL_HDX_3D_PRO=Y

CTX_XDL_AD_INTEGRATION=1

CTX_XDL_ADD_FIREWALL_RULES=Y

CTX_XDL_START_SERVICE=Y

CTX_XDL_LDAP_LIST=dc-crt.crt.fvt:389

CTX_XDL_VDI_MODE=Y

CTX_XDL_SUPPORT_DDC_AS_CNAME=N

CTX_XDL_SITE_NAME=10.117.45.1

CTX_XDL_DDC_LIST=dc-citrix.crt.fvt

CTX_XDL_VDA_PORT=80

CTX_XDL_SEARCH_BASE=CN=Computers,DC=CRT,DC=FVT

cqm

问题解决了。因为VDA1.3不支持RHEL6.8，换成6.7，这个问题解决了。谢谢

q466265670

学习学习