Citrix Receiver: Authentication token are not matching
This happened only when using Citrix Receiver, using the Receiver for Web was fine without any issues, so my current setup has:
- 2 Delivery Controllers @ 7.5
- 2 StoreFront Servers @ 2.5
- 1 Access Gateway @ 10.5
- Receiver @ 4.1
I was reconfiguring the environment and I noticed that I didn’t fill out the SNIP address in the Access Gateway configuration pane (figure hereunder):
When I added the SNIP or MIP address I started getting this error:
Gateway data from the request and the authentication token are not matching. Request was made to store Store Service.
Also I noticed these in the event viewer:
Gateway data from the request and the authentication token are not matching. Request was made to store Store Service.
Request data:
Remote Address: <Here shows the IP address of the SNIP/MIP>
X-Citrix-Via:
X-Citrix-Gateway:
X-Forwarded-For:Token data:
Remote Address:
X-Citrix-Via:
X-Citrix-Gateway:
X-Forwarded-For:Gateway configuration:
System.String[]
When I removed the SNIP/MIP address and left it blank, then propagated the changes to my second StoreFront server all went well and I was able to get my desktop via Receiver.
This resolved my problem. Exact same symptoms as you.
Just to add, if anyone else still has problems, also make sure that the storefront base URL and NS LB FQDN is different to the NetScaler Gateway FQDN. So, I have the storefront base url as storefront.company.com with a matching certificate installed onto both storefront servers. Then the same certificate is also installed onto the NS LB. Then my gateway is xenapp.company.com with a matching certificate.
Glad I could help, and thank you for sharing with us your experience.
Just to add that you can have the same FQDN for internal and external access. You will need to follow these instructions. Also, in this attached setup removing the SNIP as above resolved the same issues for me.
http://support.citrix.com/proddocs/topic/dws-storefront-26/dws-configure-single-fqdn.html
Thank you for the tip.