Arch Linux User Repository

@huebi The problem seems to be libunwind.

cd /opt/Citrix/ICAClient
./util/HdxRtcEngine 
./util/HdxRtcEngine: error while loading shared libraries: libunwind.so.1: cannot open shared object file: No such file or directory

I've fixed it by linking libunwind

cd /usr/lib/
ln -s libunwind.so.8.0.1 libunwind.so.1

Found a fix for "authentication service could not be contacted"

Edit the config file under /home/username/.ICAClient\WFClient.ini and add a new line SSLCiphers=ALL save file and run "killall AuthManagerDaemon ServiceRecord selfservice storebrowse"

Relaunch Citrix and you should be fine

I am using latest version (i.e.icaclient 22.5.0.16-1). When I open selfservice and login, a blank white screen appears and I can't see any of my application. I tried resizing windows but nothing works. There are no information in journalctl. I have tried to run it via command line (/opt/Citrix/ICAClient/selfservice) but no error messages. Is there any fix? Please help.

@harunou and @DenysMb Same issue here. Selfservice stuck on spinning logo. It never loads the authentication page.

@harunou I have the same error. Do you (or anyone) found a fix for this? In my case, neither the icaclient-2109 works.

selfservice stuck on a spinner

wfica desktop.ica throws curl_easy_perform() failed: Problem with the SSL CA cert (path? access rights?) and closed by timeout with Please check your network and try again

workspacecheck.sh - is all OK.

One of the required CA certificate exists

icaclient-2109 - works

Any ideas for icaclient 22.5.0.16-1?

Hi Guys,

All is well - it works, but my log is full of this, via sudo journalctl -f ... hundreds of them repeated.

"citrix-wfica[12656]: Error reading data. try again, failure: 11"

Latest version..

icaclient 22.5.0.16-1

For now I have turned off logging which stops the errors.

Any ideas?

thanks

When using an app through citrix on KDE plasma, if I change virtual desktops or activities, the current app freezes. Is there a potential fix for this?

To fix journalctl log flood issue
1. Create a new user called "citrixlog"

useradd -d /var/log/citrix citrixlog
mkdir -p /var/log/citrix
chown -R citrixlog /var/log/citrix

1. create a service file called "ctxlogd.service" in "/usr/lib/systemd/system/"

2. Enable the service.

systemctl enable ctxlogd.service

The content of the service file is as follows:

[Unit] 
    Description=Citrix Log Daemon Service

[Service] 
    Type=forking 
    ExecStart=/opt/Citrix/ICAClient/util/ctxlogd 
    User=citrixlog

[Install] 
    WantedBy=multi-user.target

In KDE environment, I can login successfully, but when I click the virtual desktop in the store, nothing happens and no machine is launched. But in xfce environment, I can launch an virtual desktop directly from the workspace app. How can I fix it in KDE?

It should be a full screen issue, check "https://www.isticktoit.net/?p=2347" fix the isssue

Hello, as mapfeld commented months ago, I have the journalctl log flooded but, in my case, with error messages. When I move the mouse it gets more and, in some cases, bluetooth keyboards stops working and become freezing

Can anyone help me? Thanks in advance

abr 20 13:09:42 archlinux citrix-wfica[10101]: Error reading data. try again, failure: 11 
abr 20 13:09:42 archlinux citrix-wfica[10101]: Error reading data. try again, failure: 11 
abr 20 13:09:42 archlinux citrix-wfica[10101]: Error reading data. try again, failure: 11
abr 20 13:09:42 archlinux citrix-wfica[10101]: Error reading data. try again, failure: 11
abr 20 13:09:42 archlinux citrix-wfica[10101]: Error reading data. try again, failure: 11
abr 20 13:09:42 archlinux citrix-wfica[10101]: Error reading data. try again, failure: 11
abr 20 13:09:42 archlinux citrix-wfica[3672]: Error reading data. try again, failure: 11
abr 20 13:09:42 archlinux citrix-wfica[3672]: Error reading data. try again, failure: 11
abr 20 13:09:42 archlinux citrix-wfica[3672]: doEncryptData inbuffersize: 6
abr 20 13:09:42 archlinux citrix-wfica[3672]: SSLPutDataFn inbuffersize: 85
abr 20 13:09:42 archlinux citrix-wfica[3672]: Error reading data. try again, failure: 11
abr 20 13:09:42 archlinux citrix-wfica[3672]: UpdateHGDC: SRCCGetGlobalDC failed. Shadow DC not available, LVB could be disabled
abr 20 13:09:42 archlinux citrix-wfica[3672]: Error reading data. try again, failure: 11
abr 20 13:09:42 archlinux citrix-wfica[10101]: Error reading data. try again, failure: 11
abr 20 13:09:42 archlinux citrix-wfica[3672]: Error reading data. try again, failure: 11
abr 20 13:09:42 archlinux citrix-wfica[3672]: Error reading data. try again, failure: 11
abr 20 13:09:42 archlinux citrix-wfica[3672]: UpdateHGDC: SRCCGetGlobalDC failed. Shadow DC not available, LVB could be disabled
abr 20 13:09:42 archlinux citrix-wfica[3672]: Error reading data. try again, failure: 11
abr 20 13:09:42 archlinux citrix-wfica[3672]: Error reading data. try again, failure: 11
abr 20 13:09:42 archlinux citrix-wfica[3672]: Error reading data. try again, failure: 11
abr 20 13:09:42 archlinux citrix-wfica[3672]: UpdateHGDC: SRCCGetGlobalDC failed. Shadow DC not available, LVB could be disabled
abr 20 13:09:42 archlinux citrix-wfica[3672]: Error reading data. try again, failure: 11
abr 20 13:09:42 archlinux citrix-wfica[3672]: Error reading data. try again, failure: 11
abr 20 13:09:42 archlinux citrix-wfica[3672]: Error reading data. try again, failure: 11
abr 20 13:09:42 archlinux citrix-wfica[3672]: UpdateHGDC: SRCCGetGlobalDC failed. Shadow DC not available, LVB could be disabled
abr 20 13:09:42 archlinux citrix-wfica[3672]: Error reading data. try again, failure: 11
abr 20 13:09:42 archlinux citrix-wfica[3672]: Error reading data. try again, failure: 11
abr 20 13:09:42 archlinux citrix-wfica[10101]: Error reading data. try again, failure: 11
abr 20 13:09:42 archlinux citrix-wfica[3672]: Error reading data. try again, failure: 11
abr 20 13:09:42 archlinux citrix-wfica[10101]: Error reading data. try again, failure: 11
abr 20 13:09:42 archlinux citrix-wfica[3672]: Error reading data. try again, failure: 11
abr 20 13:09:42 archlinux citrix-wfica[3672]: doEncryptData inbuffersize: 6
abr 20 13:09:42 archlinux citrix-wfica[3672]: SSLPutDataFn inbuffersize: 85
abr 20 13:09:42 archlinux citrix-wfica[3672]: Error reading data. try again, failure: 11
abr 20 13:09:42 archlinux citrix-wfica[3672]: UpdateHGDC: SRCCGetGlobalDC failed. Shadow DC not available, LVB could be disabled
abr 20 13:09:42 archlinux citrix-wfica[3672]: UpdateHGDC: SRCCGetGlobalDC failed. Shadow DC not available, LVB could be disabled
abr 20 13:09:42 archlinux citrix-wfica[3672]: Error reading data. try again, failure: 11
abr 20 13:09:42 archlinux citrix-wfica[3672]: Error reading data. try again, failure: 11

@tdy: to ~/.ICAClient

Are the ini files supposed to go in ~/.ICAClient/cache or just ~/.ICAClient? The post-install message sounds like it means ~/.ICAClient/cache, but the code snippet copies to ~/.ICAClient.

For solving this problem "icaclient-x64-22.3.0.24.tar.gz не найден в каталоге сборки и это не URL" use VPN or put file "icaclient-x64-22.3.0.24.tar.gz" to ".cache/yay/icaclient" if you are using "yay"

icaclient-x64-22.3.0.24.tar.gz не найден в каталоге сборки и это не URL.

@aztec102 what is the problem? The program requires configuration files to be in $HOME and the PKGBUILD cannot put them there so you have to run those two commands.

Problem install

You have to create '$HOME/.ICAClient/cache' for each user who uses this program and then populate it with the appropriate ini files.  Copy paste the below to do this easily:

mkdir -p $HOME/.ICAClient/cache
cp /opt/Citrix/ICAClient/config/{All_Regions,Trusted_Region,Unknown_Region,canonicalization,regions}.ini $HOME/.ICAClient/

Does HDX optimization work in version 22.2 for anyone? I need to turn off WebRTC (which is required for HDX) in module.ini otherwise I get a segfault:

[Feb21 08:55] webrpc-dispatch[4440]: segfault at 8 ip 00007fa6a451603f sp 00007fa687ffdf30 error 4 in libgdk-3.so.0.2404.27[7fa6a44be000+7b000]
[  +0,000010] Code: 15 8e 2a 07 00 49 8b 9c 24 70 01 00 00 48 85 db 74 4f 49 89 c5 eb 09 0f 1f 40 00 48 85 db 74 41 48 8b 2b 48 89 de 48 8b 5b 08 <48> 8b 45 08 48 85 c0 74 e8 4c 39 e8 7f e3 49 8b bc 24 70 01 00 00

i just upgraded to latest version and now I am getting some graphical tearing on the remote login dialog boxes. i can still get into remote session and everything works there though. version 21.9.0.25-2 is last version that worked.

anyone else seeing this?

@symtog

Your comment should be higher up, is there a way how we can incorporate it into the package install script? That fixes teams hdx.

buzo: microsoft teams is not able to detect any audio device because some 'microsoft teams citrix optimization' I think is used from HdxRtcEngine

darose: Since version 21.12 I don't see UtilDaemon clogging up one CPU any more. I guess they have fixed this upstream.

indjera: Yes, or an extra package as dependency. What exactly does not work without libunwind?

Hi @buzo, maybe is not proper solution, but we can create a folder with libunwind.so.1 and update wfica.sh with export LD_LIBRARY_PATH=$LD_LIBRARY_PATH:/opt/Citrix/ICAClient/library folder

Regarding libunwind, this looks like quite a mess to me. Arch has the GNU version with SO version 8, while Citrix apparently uses the LLVM version with SO version 1, which I didn't find anywhere packaged for Arch. I can't see an easy way to deal with this.

daniel_shub: I have already created an extra AUR package for version 2109, see my comment on 2021-12-01 21:03. Other old versions could be handled like this, since they are still available for download at Citrix (although quite hidden).

@indjera see about a dozen message ago. Linking ABI version 8 to an app that wants ABI version 1 could have unseen issues.

@buzo, about a year ago I asked about dealing with the fact that upstream keeps releasing buggy versions and their download naming convention makes it a pain to maintain: https://bbs.archlinux.org/viewtopic.php?id=260419

I wonder if there is something that can be done in the PKGBUILD to make things easier. Maybe keep a few past version checksums and download links in the PKGBUILD so that if people want to build an older version they can just change pkg_ver to what they want.

I also just asked on the Citrx forum that they create a persistent link when they release the version and not when they update it. This would make rolling back so much easier: https://discussions.citrix.com/topic/415050-create-persistent-download-link-when-version-is-released-not-when-version-changes/ Maybe if other people chime in they would add a redirect.

There is an error loading this library libunwind.so.1 witch is needed in order teams optimization to works. fix: ln -s /usr/lib64/libunwind.so /usr/lib64/libunwind.so.1

In the mean time, to work around I've been using:

NoExtract = opt/Citrix/ICAClient/UtilDaemon

Anyone found any fix / workaround yet for the issue of UtilDaemon pinning 1 cpu?

@p3sto I have tested an actual fedora 35 system with glibc 2.34 and client drive writing is not working. Fedora 33 with glibc 2.32 is working fine. Maybe Citrix needs to analyze and fix this or needs to give the glibc developers information’s about the problem. Now I have seen this on the Citrix webpage: https://www.citrix.com/downloads/workspace-app/linux/workspace-app-for-linux-latest.html We recommend not to install Citrix Workspace app with app protection enabled on operating systems that use glibc 2.34 or later. We are planning to upgrade our compatibility libraries in one of our future releases. Citrix Workspace app will be compatible only with the following: GCC -> 8.3.0 GLIBC -> 2.28 libstdc++ -> GLIBCXX_3.4.25

I wonder if the copy-paste and the remote drive issues are going to be resolved with glibc 2.34...

SuccubiusEisspin: I can't use client drives anyway (no permission by the company).

Stylian: Thanks for finding that out. But I don't have a good idea how to solve this. Installing two glibc versions next to each other is probably not that easy.

@SuccubiusEisspin I have the same problem with writing files on client drives. I have checked some other Linux distributions in the last days where it works and found out that this could have something to do with the used glibc version. If I am using an arch system with glibc 2.32-5 writing on client drive is working fine. After I update only the glibc version to 2.33-5 it´s not working anymore.

@SuccubiusEisspin I've noticed that if you create a zero-length file (touch filename) on your local linux machine then you can copy over that file from the citrix remote desktop...

@buzo: Thank you so much! At least Teams Optimization is working again for me and I can call people again :-D Do you also have this issue with the client drives (always read only) ?

brokenpip3: same here

And yes, copy+paste does not work well for me too.

So for anybody affected I have created an extra AUR package for version 2109. Hope that helps.

@brokenpip3: same here. i downgraded to version 21.9.0.25-2 until a fix is in

@brokenpip3: Nope, I am seeing this behaviour with the UtilDaemon as well. :-/ In addition to non-working Teams, non-working clipboard, non-working client-drives and non-working self-service. One would think that citrix, as a company that has their whole business model set up on client-server-infrastructure would take a little bit more care with their CLIENT-software.... Does anyone know a nice and user-friendly way on Manjaro to install a AUR package from a certain version? Some sort of version selector for available package versions? ^^

While using the last version (21.11) I discovered that "/opt/Citrix/ICAClient//UtilDaemon" binary is always using 1cpu even after closing the session, I had to kill it manually every-time. I'm the only one?

symptog: Shared libs have an ABI version number for a reason, and version 1 and 8 of libunwind are most likely incompatible, so this is not a proper solution. I'll see what I can do, but apparently Citrix is requiring a very old version of that lib.

@symtog Thanks for the solution, hopefully the package maintainer incorporates it. I think for now I rather stick with the old version until the issue gets fixed.

@huebi The problem seems to be libunwind.

cd /opt/Citrix/ICAClient
./util/HdxRtcEngine 
./util/HdxRtcEngine: error while loading shared libraries: libunwind.so.1: cannot open shared object file: No such file or directory

I've fixed it by linking libunwind

cd /usr/lib/
ln -s libunwind.so.8.0.1 libunwind.so.1

I'd really like to know what they are smoking at Citrix. The download page is switching back and forth between 21.09 and 21.11 almost every time I hit the reload button in the browser.

For this package this means that it is based on luck whether a build will download version 21.09 or 21.11. As a safeguard, I have added a check which prevents a download of the wrong version. You will see this message then:

ERROR: icaclient-x64-21.11.0.20.tar.gz was not found in the build directory and is not a URL.

Just try again then. And if you are still seeing a failed validity check, just rm -f icaclient-*-21.11.0.20.tar.gz and try again.

Sidju: I don't see how that could be possible. That automation also does the sha256 verification, which is an important part.

Besides, I've just compared the sha256sums on their download website with the PKGBUILD, and they are still correct. If you're having problems with the verification, remove the downloaded icaclient-*-21.11.0.20.tar.gz and try again.

Perhaps taking the download out of makepkg's automations and scripting it in the prepare() block? That would allow for more freedom in scripting around their odd downloads.

older versions are available here: https://www.citrix.com/downloads/workspace-app/

but afaik the links aren't static, so....

Ravager: The links change on every invocation of the web page, which is horrible. This is why they have to be dynamically adapted in PKGBUILD. As a side effect they change on every regereration of .SRCINFO.

SuccubiusEisspin: Yes, copy+paste has a huge delay of several seconds for me, too, but it works with some patience. I have no idea why. But I don't have any problems starting a Desktop from Self Service. And I don't use local drive mapping (not allowed), so I cannot help there.

huebi: I think a downgrade would only be possible if you still have that tarball, since you can only download the latest version from Citrix AFAIK.

Links in .srcinfo are incorrect as far as I can tell. Although I'm unsure how citrix generates these. Could this be why I'm failing sha256 checksum? (I'm fairly new to Arch and Linux/GNU in general)

I had to downgrade, downgrade (tool) didn't work, as my teams was not working (HDX not connected).

Download from old commit (Top right of the page, view changes ⇒ click on commit you want to download ⇒ click download) https://aur.archlinux.org/cgit/aur.git/snapshot/aur-c00dc7dfb2fdaf192c336534ba45ca5b6af26eb8.tar.gz

extract archive ⇒ https://wiki.archlinux.org/title/Makepkg ⇒ makepkg -s

⇒ makepkg -i icaclient-21.9.0.25-1-x86_64.pkg.tar.zst

⇒ install libc++ manually

⇒ chmod +x /opt/Citrix/ICAClient/util/HdxRtcEngine

chmod 755 /opt/Citrix/ICAClient/lib/libwebrtc_codecs.so

chmod 755 /opt/Citrix/ICAClient/lib/libwebrpc.so

Hi@all!

first: Thanks a lot for all the work around this package!

Since the update to 21.09 and still with 21.11 I cannot copy and paste text from the session to my client and I can only browse my local drive but not copy files from server to client via client drive mapping. CWA also keeps asking me for permission to access client drives each time I start a session.

Also, since 21.09 I cannot start Apps+Desktops from SelfService - If I click on an Icon nothing happens. If I open storefront in the browser and start my desktop from there, everything works fine.

Does anyone else have those issues?

cheers and thanks a lot !!

I don't know what they are doing at Citrix, they are switching back and forth between version 21.9 and 21.11 on the download page. Currently 21.9 is on again, which causes the validity check to fail. Please wait until the download page has 21.11 again, remove your incorrect download, and try again.

==> ERROR: One or more files did not pass the validity check!

Citrix usually works fine for me but whenever someone shares their screen in Skype for business it becomes very unresponsive and sometimes even freezes the whole Citrix window for minutes. When I share my screen this also happens and the others see my screen content before I can see it. Audio however works without problems. My system also works without problems it's only Citrix. When these problems occur I find these two messages in my journalctl:

citrix-wfica[2221]: No space available in device:: 0
citrix-wfica[2221]: The count:: 1

However I don't know which device that is. I don't see any device running out of space on my local system. If anyone has an idea how this could be solved, your help would be highly appreciated.

If your systemd journal is getting flooded with error messages, the solution is to run Citrix Receiver Preferences, and under the General tab set Logging to Disabled. There are further logging settings, and I clicked that and disabled everything in there. Blessed silence at last.

After journal was spammed by CGPrecv in the last version, now my log get spammed by

Okt 15 08:44:05 jupiter citrix-wfica[764690]: SSLPutDataFn inbuffersize: 46
Okt 15 08:44:05 jupiter citrix-wfica[764690]: doEncryptData inbuffersize: 17
Okt 15 08:44:05 jupiter citrix-wfica[764690]: SSLPutDataFn inbuffersize: 46
Okt 15 08:44:05 jupiter citrix-wfica[764690]: doEncryptData inbuffersize: 17
Okt 15 08:44:05 jupiter citrix-wfica[764690]: SSLPutDataFn inbuffersize: 46
Okt 15 08:44:05 jupiter citrix-wfica[764690]: doEncryptData inbuffersize: 17
Okt 15 08:44:05 jupiter citrix-wfica[764690]: SSLPutDataFn inbuffersize: 46
Okt 15 08:44:05 jupiter citrix-wfica[764690]: doEncryptData inbuffersize: 17
Okt 15 08:44:05 jupiter citrix-wfica[764690]: SSLPutDataFn inbuffersize: 46
Okt 15 08:44:05 jupiter citrix-wfica[764690]: doEncryptData inbuffersize: 17
Okt 15 08:44:05 jupiter citrix-wfica[764690]: SSLPutDataFn inbuffersize: 46
Okt 15 08:44:05 jupiter citrix-wfica[764690]: doEncryptData inbuffersize: 18
Okt 15 08:44:05 jupiter citrix-wfica[764690]: SSLPutDataFn inbuffersize: 47

Interestingly, it gets more if I move the mouse in the window. If I idle, theres a pair of lines approximately every 3 seconds. Does anybody else get this or knows how to stop the program from doing this?

Thanks krepst, the package should be fixed now.

This worked for me @krepst Thanks for providing your solution!

Thank you too @Swipe I didn't know the "downgrade" feature, but that looks very useful!

My MS Teams in citrix was not finding any audio devices until I applied:

chmod 755 /opt/Citrix/ICAClient/lib/libwebrpc.so
chmod 755 /opt/Citrix/ICAClient/lib/libwebrtc_codecs.so

and restarted ms teams in citrix

@madin315 the easiest way (without going into detail) is to install "downgrade" from the aur and you can chose any older version that it offers you.

I'm permanently running older versions on my PCs now and simply don't bother updating after all the recent audio breakages citrix introduced 12 months ago. Not worth the potential hassle unless there's a major security fix.

Latest update (21.9.0.25-1) broke my HDX redirection. I cannot user my headset with microphone in my Citrix session anymore (e.g. for Teams). The .workspacecheck.sh says everything is fine.

Does anyone else has this problem? Where can I get an older version of icaclient?

Would be nice if the /usr/share/applications/*.desktop files also had equivalent scripts in /usr/bin/ for those of us who use dmenu_run to launch programs.

EDIT: btw these scripts can be as simple as a two-liner

#!/usr/bin/env sh
/opt/Citrix/ICAClient/selfservice --icaroot /opt/Citrix/ICAClient

Like @russkel, I have a bunch of wifica error with a very slow citrix session

citrix-wfica[3070]: Failed to connect with logd.
citrix-wfica[3070]: Value of cl_argv[0] : /opt/Citrix/ICAClient/wfica
citrix-wfica[3070]: Value of cl_argv[1] : -file
citrix-wfica[3070]: Value of cl_argv[2] : /tmp/NmM2ZjAwYTItYWQzNi00N2RjLTgwZWUtOWU2ZjFjZTc5NzhhLkJVUkVBVSBWSVJUVUVMICRTMTEtMTY-.ica
citrix-wfica[3070]: ReadINIConfig() exiting
citrix-wfica[3070]: Called NCSXMLanguageInit: language is FR UTF-8, codepage is 1252
citrix-wfica[3076]: Failed to connect with logd.
citrix-wfica[3076]: Value of cl_argv[0] : /opt/Citrix/ICAClient/wfica
citrix-wfica[3076]: Value of cl_argv[1] : -version
citrix-wfica[3070]: Can't create serial number file '/etc/icalicense/clientlicense' - 'Aucun fichier ou dossier de ce type'
citrix-wfica[3070]: skip loading OPUSConverter, casuse audioOpusEnabled=0

I know it's not a good idea，but If someone really need it such as your BOSS wants you to do something at once ,but you find it out-of-date in this case a solution is needed to help them

@buzo I agree skipping the checksum validation is a terrible idea. Upstream doesn't actually remove the old versions, they just rename them from -latest to 2108. What this means is that while updating the PKGBUILD to the newest version can be tricky, patching the PKGBUILD to continue to build the intended version is actually pretty easy. For example, here is a PKGBUILD I made for 19.12 when 20.01 introduced a major bug https://aur.archlinux.org/cgit/aur.git/tree/PKGBUILD?h=icaclient19).

Vislecaina: That “solution” is not good at all. Your package will have the wrong version. Just click on “Flag package out-of-date” and wait for the update, it usually doesn't take that long.

There is nothing we can do here about upstream removing any old version immediately.

if failed sha256 checksum validation, i find the solution from CSDN to avoid check [https://blog.csdn.net/qq_37284020/article/details/103991649] we can edit PKGBUILD info to SKIP all the check like this

sha256sums=('SKIP' 'SKIP' 'SKIP' 'SKIP' 'SKIP' 'SKIP') sha256sums_x86_64=('SKIP') sha256sums_i686=('SKIP') sha256sums_armv7h=('SKIP') install=citrix-client.install

Is citrix spamming the systemd journal is or is this just me? I get multiple lines a second from citrix-wfica if I look at journalctl -b. Lots of CGPrecv.

Latest update (21.6.0.28-1) broke the program for me. I can launch the workspaces but upon trieing to start one, nothing happens. I have downgraded to 21.4.0.11-13 that version runs perfect for me.

@buzo Thank your for the update and I will do that next time!

I can't build this package, the sha validation does not let it go through.

I get The socks 5 command requested is not supported while trying to run an .ica file. Should I install something extra? (should there be an extra dependency preconfigured?)

@Buzo, thanks a lot, the new icaclient 21.4.0.11-3 is working fine for me!

Buzo, pixel1138 and p3sto, thank you for finding and implementing a solution for this. I ended up restarting an old windows 7 vm just to connect to work on Friday, but your work is really appreciated.

Thanks pixel1138 and p3sto for sorting this out! In fact I pushed the update before testing myself. But with version -3 it works for me again.

@buzo thanks for all your work in maintaining this package! I'm pretty sure that packaging a closed source sw and making sure it works is not easy...

unfortunately icaclient 21.4.0.11-2 does not work for me either - similar to @pixel1138 but in my case it says:

Load of Auth page started..
Loading uri..
Load finished..

and then nothing happens - I can't connect to my remote desktop

but if I create a link: "ln -s /opt/Citrix/ICAClient/wfica /opt/Citrix/ICAClient/adapter" the client starts working again... although I have this error:

532772: stderr from child
----------------
Error Launching UtilDaemon: No such file or directory

@buzo I uninstalled and reinstalled the 21.04.0.11-2 package. I now have the file /opt/Citrix/ICAClient/adapter the earlier errors stated was missing, but it still fails to launch from within selfservice. The error received now is:

Citrix_subscribed_Citrix_7_VIP.Admin $S91-200.desktop[8860]: Error Launching UtilDaemon: No such file or directory

After copying

sudo cp icaclient/src/linuxx64/linuxx64.cor/UtilDaemon /opt/Citrix/ICAClient

it still wouldn't work.

I then compared the folder contents from the extracted archive, and copying the following files:

sudo cp icaclient/src/linuxx64/linuxx64.cor/{icasessionmgr,NativeMessagingHost} /opt/Citrix/ICAClient

caused it to start working.

Should be fixed now. Thanks for all the hints!

@MauMee, I was also able to launch when running the store in the browser as well.

I've the same problem as @pixel1138 and @p3sto. A connection via browser (chromium) works, connection via selfservice doesnt work. I've added a link adapter -> wfica in /opt/Citrix/ICAClient, and it worked again. But this is a quick and dirty workaround, I've no idea who is searching for /opt/Citrix/ICACLient/adapter and why.

@doctorx: You have installed it manually and it works? Do you have a file 'adapter' in /opt/Citrix/ICAClient?

I was able to sign in to Self Service... however nothing would run. i downloaded linuxx64-21.4.0.11.tar.gz and it works fine. I could not find a log to post.

I'm having the same issue as @pixel1138:

382335: stderr from child
----------------
Couldn't execvp(/opt/Citrix/ICAClient/adapter, /opt/Citrix/ICAClient/adapter,--display,:0,-icaroot,/opt/Citrix/ICAClient,-WI,https://XXX.XXX.XXX.XXX/citrix/remote/discovery,-file,/home/XXX/.ICAClient/cache/%sYXg4wb.ICA,-casEnabledStore,false)
Piped child execvp(): No such file or directory

End of stderr (301 read)
-------------

Launching any application or desktop fails with the below error:

wfcmgr.desktop[12073]: 12073: stderr from child

wfcmgr.desktop[12073]: ----------------

wfcmgr.desktop[12073]: Couldn't execvp(/opt/Citrix/ICAClient/adapter, /opt/Citrix/ICAClient/adapter,--display,:1,-icaroot,/opt/Citrix/ICAClient,-WI,https://store.domain.com/citrix/remotemfa/discovery,-file,/home/user/.ICAClient/cache/%s7bjRuP.ICA,-casEnabledStore,false)

wfcmgr.desktop[12073]: Piped child execvp(): No such file or directory

wfcmgr.desktop[12073]: End of stderr (298 read)

wfcmgr.desktop[12073]: -------------

after upgrading to 21.4.0.11.

I uninstalled, deleted user .ICAClient folder, and reinstalled, but the error continues. I confirmed that there is no /opt/Citrix/ICAClient/adapter file.

Looks like there is a known memory leak issue in ICA Client 21.3.

https://discussions.citrix.com/topic/412533-memory-leak-with-icaclient-v213038-amd64/

@buzo understandable, I hoped some in here had a solution. I will look else where, thanks!

I don't think there is much we could do here about the memory consumption. Since it is not open source we cannot even apply a patch here. You should ask Citrix for help and support. Good luck.

@girishpadia

I tried to solve it by working on the wfclient.ini and All_Regions.ini files. Everything is set up correctly, but nothing will be written on my local drive. Workaround is using a google drive folder, but it is not very practical.

I wanted to post this issue on the citrix forum, but I noticed it's full of questions with very very few (sometimes unhelpful) answers. My organization does not care where I use citrix from, but won't open an issue with citrix if I can solve the problem by using windows (they only support windows internally anyway). I believe this is a bug, but I am not sure this will be looked into if it's not an issue opened by a paying customer directly.

to make matters short... I am using my windows PC or Google drive as a workaround.

@XTREEMRAGE I have high memory consumption too.

4.2g res and 8180460 virt

@gkun: I am also facing same issue. Any solution?

Thanks for the information, is there a way to configure it, so it will not use more then 25% of my memory. Or maybe I need to reinstall it...

-- edit
I have reinstalled it, but it's running for 1 hour and 15 min and it's already at the 2GB.

I'm using:
OS: Manjaro 20.2.1 Nibia
Kernel: x86_64 Linux 5.4.101-1-MANJARO
Resolution: 5120x1440
DE: Xfce4
RAM: 7308MiB / 11979MiB

I have 2.7G reserved and 6G virt I use hdx-plugin and HDXTeams

XTREEMRAGE: Not me. Here it takes 103 MB of memory after about three hours (albeit 84 GB virtual memory, but that doesn't matter).

Does anyone have a high memory consumption when using this ica client for a few hours? I didn't had that before the last update.

Package disowned because I do not need to use this software anymore.

@gkun: I don't use drive mappings and can't test it since it is not allowed in my company. But client drive mappings was changed in the Linux 2103 release according to the release docs https://docs.citrix.com/en-us/citrix-workspace-app-for-linux/whats-new.html. Maybe try to ask in the Citrix forums https://discussions.citrix.com/forum/169-workspace-app-receiver.

I have a strange issue since this last version. I have given full access to shared folders from my local disk, where I gave full access to a local folder to every user. I checked already that full access is granted from connection manager.

I can connect only from web through a browser and open the ica connection file (access from receiver is not possible because the organization won't give me a connection address). Yet this setup worked perfectly. Since the last version I can see disk structure and I have read only access.

If I try to create a directory or save a file I get a windows error ("Destination Folder Access Denied - You need permission to perform this action" if I create a directory and "You don't have permission to save in this location. Contact the administrator to obtain permission" if I try to save a file) I managed to open a file explorer windows of my shared folder and I noticed windows sees them as "Read Only".

I checked on my windows pc (using the same server session I had opened on linux) and while it got confused by the fact the shared folders had disappeared, I was able to use file explorer to create folders on my local disk and download files.

sha256sums should be updated for the new version https://www.citrix.com/downloads/workspace-app/linux/workspace-app-for-linux-latest.html

Thanks for providing this PKGBUILD, it works great for my setup. Did you by any chance get usb device forwarding working? I created a systemd service for ctxusbd and ctxlogd and installed the udev rule, the debug output is printed when I plug in a device (Suppressing HAL action for XXX), but there's no "devices" button in wfica. I'd be happy to provide the service files, of course.

@daniell @alexdw: I confirm audio (speaker and mic) is more stable with the legacy. Without it the Citrix Teams is trying to figure out which devices I have and it's getting confused / not working. Skype is eclipsed on my organization so can't comment on that.

@daniell: Thanks for the details. Without setting that config I had no audio support at all, and with it the playback works again (as it did in previous versions). So it may very well be legacy and incomplete but for my use case (playback only from Windows session, not tested any recording/microphone usage) it is a clear improvement over no audio at all.

@robertlturner, @alexdw, that "solution" does nothing but falls back to a legacy and broken alternative re. audio. With that no HDX support for e.g. Skype and no microphone support either. Citrix have just broken pulseaudio since 20.10, and there's no fix for it currently.

@robertlturner: Thank you for the link on disabling the 'enhanced' audio by adding "VdcamVersion4Support=False" under "[ClientAudio]" in the main "module.ini" config (under "/opt/Citrix/ICAClient/config"). This fixed the audio for me using icaclient 20.12-2, which was previously working but then broken in recent versions.

These lines can be removed from the PKGBUILD, as npica.so is no longer included:

# Copy Firefox plugin into plugin directory
mkdir -p "${pkgdir}/usr/lib/mozilla/plugins"
ln -s "$ICAROOT/npica.so" "${pkgdir}"/usr/lib/mozilla/plugins/npica.so

20.12-[12] completely breaks pulseaudio audio for me:

curl_easy_perform() failed: Problem with the SSL CA cert (path? access rights?)
couldn't read configuration file /var/lib/RTMediaEngineSRV/settings.conf trying to create one...
couldn't read configuration from a file /var/lib/RTMediaEngineSRV/settings.conf
sh: line 1: lldpcli: command not found
ioctl (HIDIOCGSTRING): Invalid argument
ioctl (HIDIOCGSTRING): Invalid argument
ioctl (HIDIOCGSTRING): Invalid argument
sh: line 1: lldpcli: command not found
ALSA lib conf.c:5200:(snd_config_expand) Unknown parameters 1
ALSA lib control.c:1471:(snd_ctl_open_noupdate) Invalid CTL sysdefault:1
ALSA lib conf.c:5200:(snd_config_expand) Unknown parameters 2
ALSA lib control.c:1471:(snd_ctl_open_noupdate) Invalid CTL sysdefault:2
ALSA lib conf.c:5200:(snd_config_expand) Unknown parameters (null)
ALSA lib control.c:1471:(snd_ctl_open_noupdate) Invalid CTL sysdefault:(null)
ALSA lib confmisc.c:767:(parse_card) cannot find card '(null)'
ALSA lib conf.c:4745:(_snd_config_evaluate) function snd_func_card_driver returned error: No such device
ALSA lib confmisc.c:392:(snd_func_concat) error evaluating strings
ALSA lib conf.c:4745:(_snd_config_evaluate) function snd_func_concat returned error: No such device
ALSA lib confmisc.c:1246:(snd_func_refer) error evaluating name
ALSA lib conf.c:4745:(_snd_config_evaluate) function snd_func_refer returned error: No such device
ALSA lib conf.c:5233:(snd_config_expand) Evaluate error: No such device
ALSA lib pcm.c:2660:(snd_pcm_open_noupdate) Unknown PCM sysdefault:(null)
ALSA lib confmisc.c:767:(parse_card) cannot find card '(null)'
ALSA lib conf.c:4745:(_snd_config_evaluate) function snd_func_card_driver returned error: No such device
ALSA lib confmisc.c:392:(snd_func_concat) error evaluating strings
ALSA lib conf.c:4745:(_snd_config_evaluate) function snd_func_concat returned error: No such device
ALSA lib confmisc.c:1246:(snd_func_refer) error evaluating name
ALSA lib conf.c:4745:(_snd_config_evaluate) function snd_func_refer returned error: No such device
ALSA lib conf.c:5233:(snd_config_expand) Evaluate error: No such device
ALSA lib pcm.c:2660:(snd_pcm_open_noupdate) Unknown PCM sysdefault:(null)

Had to downgrade to 20.10-3.

The sha256sum in the PKGBUILD for x86_64 needs to be changed to: ca88a1abc93970a0141adcd5613d95116ffbbfd0573e744e5b3846a35778a906

That fixes the validity check error. This is the SHA256 sum from the corresponding file downloaded from Citrix: https://www.citrix.com/downloads/workspace-app/linux/workspace-app-for-linux-latest.html

==> Validating source files with md5sums... configmgr.desktop ... Passed conncenter.desktop ... Passed selfservice.desktop ... Passed wfica.desktop ... Passed wfica.sh ... Passed wfica_assoc.sh ... Passed ==> Validating source_x86_64 files with sha256sums... icaclient-x64-20.12.tar.gz ... FAILED ==> ERROR: One or more files did not pass the validity check! error downloading sources: icaclient

The version of the package is not properly dispatched to the wfica client.

In the DEB package provided by Citrix, the post installation script creates the file pkginf/Ver.core.linuxx64 (or any other supported Architecture) which is used by the wfica client to know which version is currently installed.

Some servers check that version to block outdated clients.

Edit: I'll send a patch.

The latest PKGBUILD creates a symlink in /usr/lib/gstreamer-1.0:

mkdir -p "${pkgdir}/usr/lib/gstreamer-1.0"

ln -s "$ICAROOT/util/libgstflatstm1.0.so" "${pkgdir}/usr/lib/gstreamer-1.0/libgstflatstm.so"

I don't think it's necessary to create that link outside $ICAROOT/util. I just replaced it with the following link and it still works:

ln -s "$ICAROOT/util/libgstflatstm1.0.so" "$ICAROOT/util/libgstflatstm.so"

@robertlturner thanks for this - I am able to join calls again!

@Swipe & @coroner21

Follow this:

https://docs.citrix.com/en-us/citrix-workspace-app-for-linux/configure-xenapp.html#audio

The new app has 'enhanced' audio redirection support....and by enhanced I mean broken. It's meant to allow you to select multiple audio devices on the client system, but disabling it was the only way to have my Windows VDS session detect the audio again.

@coroner21 I have also experienced audio issues in the form of an intermittent missing Citrix HDX audio device in citrix published apps on 20.12. I have had to downgrade back to 20.09 for now, although restarting icaclient did tend to resolve the issue but it would go missing again after a while.

I have the problem that lately citrix receiver audio is no more routed through pulse. Instead it seems to be using alsa directly even though pulseaudio-alsa is installed and works for other apps (that try to output alsa audio). Anyone experience similar issues? Any fix / workaround available?

20.12 solved the SSL problems.

Same SSL-Problem here with the latest 20.10 package. The problem seems to have been introduced in the Apple version some years ago: https://support.citrix.com/article/CTX205443

Unfortunately there's no hint for a workaround.

@Swipe: same error here with 20.10-3. I get 3 different errors, switching between them from time to time:

The supplied SDK context is invalid for the function called (SSL error 31).

The remote SSL peer sent a Bad MAC alert (SSL error 45).

There is no memory available to the application (SSL error 9).

As a workaround I installed the icaclient19 package and that works. It seems they mostly appear when I try to interact with skype windows on the remote windows machine, that could be coincidence though.

https://support.citrix.com/article/CTX224988

In case anyone is troubleshooting HDX Webcam redirection I finally managed to get it working by following the above link, installing all of the gst plugins and enabling the HDXWebCam in the All_Regions.ini and the AllowAudioInput in wfclient.ini. Pretty sure the symbolic links referenced were not needed, but I'm too scared to intentionally break it and replicate the fix :).

Recently HDX Realtime Connector reports that audio is not optimized and when using Skype my voice sounds like a robot. Host machine is Windows. I have seen that some new flags related to HDX appeared in the config.ini and was wondering if it's only me or if anyone has the same issue.

Given the potentially critical nature of the package to getting work done and the frequency at which Citrix breaks the client, it might be worth sticking with a known version and updating less frequently: https://aur.archlinux.org/packages/icaclient19/

Had to downgrade back to icaclient-20.09 due to multiple instances of the following error on 20.10:

"SSL error - The remote peer sent a Bad MAC alert (SSL error 45)"

I can confirm it works without libc++ for me as well, and on top of that the libc++abi package (https://aur.archlinux.org/packages.php?ID=794696) which libc++ depends on doesn't work with aur helpers which makes it a real inconvenience to install/update this without manually editing out the libc++ dependency or going through and installing that entire other package manually

Could the libc++ dependency for this be made optional? Icaclient works fine without it

Notes:

• I believe there is issue regarding CEIP service.
  I am trying to disable in the module.ini using sed. So if it creates a pacnew file, please action accordingly.
  The related line EnableCeip=Enable was not available in previous versions.

• applied chmod +x /opt/Citrix/ICAClient/util/HdxRtcEngine

• Updated to 20.12.
• libc++ moved to optional. There is one file called HDXTeams needs this.

@jaapcrezee the checksum changed because the package version changed. If you want to stick to the same version, you can update the source url to https://downloads.citrix.com/18741/linuxx64-20.9.0.15.tar.gz?__gda__=1604074193_b36c3df540e08a9674188c1111d5cf04 (I am not sure if the long string at the end is universal).

@hnws, I wonder if it makes sense to use https://downloads.citrix.com/18741/linuxx64-20.9.0.15.tar.gz?__gda__=1604074193_b36c3df540e08a9674188c1111d5cf04 as the url instead of always pointing at latest. That way the PKGBUILD will not break when the version is updated.

same problem here

This does the trick: can you commit maintainer? Thanks. Got the checksums from https://www.citrix.com/downloads/workspace-app/linux/workspace-app-for-linux-latest.html

diff --git a/PKGBUILD b/PKGBUILD
index ed2368f..e5c25f1 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -31,9 +31,9 @@ md5sums=('71aca6257f259996ac59729604f32978'
          '1f214f6f456f59afd1a3275580f4240e'
          '59f8e50cc0e0c399d47eb7ace1df5a32'
          'dca5a1f51449ef35f1441b900d622276')
-sha256sums_x86_64=('F992869AB2CECAD50D0DC192288601D9E6045355B68B73D360E6F83077C0F295')
-sha256sums_i686=('64673CF7FEE5666C43349A716D709E1A3ACBD055D53AB163F3C1A86B6D6D8FAC')
-sha256sums_armv7h=('339D74E69C6FB08B52DE31A7DD1262BBCDA2453354AFCECDA8630B5EDDBA1B99')
+sha256sums_x86_64=('AE613A77036AFB101B47F268177B9DF0453184F5641265EAC41C735845CAE78D')
+sha256sums_i686=('DD2788D7E770483127717EE246AF1C334FD20E515C7AC650021DED2254139911')
+sha256sums_armv7h=('2D2806B84D1FA09FA810475D6C6762F372CC4EE1741C5D9E8EBBCA5D9903B98D')
 install=citrix-client.install

 package() {

I'm getting a SHA256sums error -- I'm aware I can by pass the validity check but -- just a heads up:

==> Validating source files with md5sums...
configmgr.desktop ... Passed
conncenter.desktop ... Passed
selfservice.desktop ... Passed
wfica.desktop ... Passed
wfica.sh ... Passed
wfica_assoc.sh ... Passed
==> Validating source_x86_64 files with sha256sums...
icaclient-x64-20.09.tar.gz ... FAILED
==> ERROR: One or more files did not pass the validity check!
error downloading sources: icaclient

My SHA256sums in the pkgbuild file are the following:

sha256sums_x86_64=('F992869AB2CECAD50D0DC192288601D9E6045355B68B73D360E6F83077C0F295')

When I calculate the sha256sum, I get a different hash:

$ sha256sum /home/<user>/.cache/yay/icaclient/icaclient-x64-20.09.tar.gz
ae613a77036afb101b47f268177b9df0453184f5641265eac41c735845cae78d
/home/<user>/.cache/yay/icaclient/icaclient-x64-20.09.tar.gz

I had to change exec flag on /opt/Citrix/ICAClient/util/HdxRtcEngine to use MS Teams in Optimized mode. (chmod +x /opt/Citrix/ICAClient/util/HdxRtcEngine) The setup should do that.

Having issue getting icaclient to resize. Issue exists for me in both GNOME on wayland and DWM on X.

linuxx64-20.9.0.15.tar.gz (sha256sums_x86_64) correct SHA-256 is

F992869AB2CECAD50D0DC192288601D9E6045355B68B73D360E6F83077C0F295

I can confirm that the smartcard is working again with 20.06.

For arch linux arm (alarm) i had to create a symbolic link for libpcre like so

ln -s /usr/lib/libpcre2-posix.so.2.0.3 /usr/lib/libpcre.so.3

Hope it helps someone out.

It seems to have fixed the smartcard issues I was having. I cannot test my webcam.

My camera still doesn't work with 20.06. :-(

Hint: If you really need your camera, you can use the Citrix Workspace Chrome extension. At least my camera is working there. Unfortunately the audio connection is unstable in the Chrome extension, that's why I came back to the native icaclient.

Found a fix for "authentication service could not be contacted"

Edit the config file under /home/username/.ICAClient\WFClient.ini and add a new line SSLCiphers=ALL save file and run "killall AuthManagerDaemon ServiceRecord selfservice storebrowse"

Relaunch Citrix and you should be fine

I'm getting authentication service could not be contacted after upgrading from 20.04 to 20.06 complete remove and reinstall didnt fix :(

Updated to 20.06. According to release notes, smartcard issue is fixed in this version. Unfortunately I have no environment to test webcam. Good luck.

I am getting the following error when trying to install:

"ERROR: One or more files did not pass the validity check!"

Anyone know why this happens?

@Arc: Same problem here with 20.04.

Is anyone able to get their webcam to work using this version? It doesn't work for me, but I have an irregular setup (Linux on an iMac) so I wanted to check. Other apps can access my camera, but not Citrix. I do have the Citrix Workspace > Preferences > Use my microphone and webcam box checked. But I don't get any video.

If you want SmartCard support to work again, you can take the /opt/Citrix/ICAClient/wfica binary from 19.12 and replace the 20.04 version with it. All other virtual drivers can stay on the 20.04 version.

I deployed this mod on our debian-based thinclients today. I can report back, if our users experience any major side-effects/API-breaks in the virtual drivers.

Anyone having timezone issues?

Have tried all below to try force the timezone

export TZ="Australia/Brisbane" (in ~/.bashrc)
sudo ln -sf /usr/share/zoneinfo/Australia/Brisbane /etc/timezone
echo "Australia/Brisbane" | sudo tee "/opt/Citrix/ICAClient/timezone"
echo "Australia/Brisbane" | sudo tee /etc/timezone
echo "AEST-10" | sudo tee /etc/timezone
echo "Australia/Brisbane" | tee ~/.ICAClient/timezone
echo "AEST-10" | tee ~/.ICAClient/timezone
echo "UTC+10" | tee ~/.ICAClient/timezone

@engine481 I just wrote a PKGBUILD for version 19.12 https://aur.archlinux.org/packages/icaclient19/ It conflicts with icaclient. Hopefully no one needs to install both versions. I would only install 19.12 if you need smart card support. Hopefully someday they will fix the regression.

@hnws if you can think of a better way to manage the packages, just let me know.

I have the same issue with smart cards. Is there a pending fix or can someone walk me through how to roll back to version 19.12? I am struggling with the checksums.

Both autoconf and automake are in the base-devel group, so you should not need to specify them in the makedepends.

@daniel_shub thank you very much for your reply. Your instructions allowed me to install 19.12 version however I am still unable to read/write cards in my Citrix VDI. All the drives on my Linux side are working however the external USB reader is not showing in my work Windows VDI. I have amended usb.config files to allow smart card connection however is still not working. I've already spent more than 6h searching forums and amending files, no joy. If you guys could advise on what I might be doing wrong please let me know. In am issuing SSH smartcard daily as part of my job so having this issue solved would allow me to get rid of Windows from my machine.

@geoamaris what I did was download the 19.12 source manually from https://www.citrix.com/downloads/workspace-app/legacy-workspace-app-for-linux/workspace-app-for-linux-1912.html, change the pkgver variable to 19.12, updated the check sums and built with makepkg. You could also click on the "view changes" link to see the older version of the PKGBUILD, which would probably let you automatically download the source.

Did anyone manage to make the smart-card work? I am unable to downgrade to the older version as I never had it installed. Anyone know how can I get the 19.12 that apparently works with smart-cards?

@bachp thanks for the heads up. My smartcard stopped working with the update, but I didn't realize it until yesterday which I spent yelling at the computer and cursing out IT. I will try the downgrade.

Smartcard stopped working after the update from 19.12 to 20.04. Downgrading to 19.12 makes it work again.

Did somebody manage to get smartcards working with 20.04?

Not sure why webkit2gtk is considered an optional dependency. It was absolutely needed on my plasma system. Is there a reason its in the optdepends block instead of depends in the PKGBUILD? Maybe there is some use cases that I am unaware of..?

For the record, the Citrix Workspace app for Chrome mentioned by sjy also works with Chromium and can be found here:

Citrix Workspace app for Chrome

The app will show up in Chromium's Apps page.

If you have your bookmarks bar hidden and therefore lack the Apps button, you can still call up the Apps page with this address:

chrome://apps

You can also create a bookmark to this page.

I have detected that if I use Cliet ICA with a pc with a Nvidia video my mouse pointer does not work properly, the problem is the mouse is not clicking in the same place that I see the pointer, exactly the mouse is pointing a little under its position. I think that the problem is with the Nvidia card because I have the problem with a pc and a laptop, but I have another laptop with an Intel card and It works properly. Somebody know how to correct this problem?

Odd I never experienced any problems with this package. At the moment I am using Arch Linux with KDE plasma and the falkon browser.The only thing I had to do is change a setting in the All_Regions.ini edtMSS=* to edtMSS=1000 else I kept getting an error the whole time when trying to connect.

Unless I comment

cp -r ./usb/ "${pkgdir}$ICAROOT"
cp -r ./util/ "${pkgdir}$ICAROOT"

then somehow, the resulting package 'tar.xz' is broken and has a lot of files missing in it as well as upon actual installation. Never seen anything like that. WTF?

I think pinned comment can be removed since new version creates symbolic link to /etc/ssl/cacerts.

using this package on my everyday computer at work for at least two years and never hat any problems, so.... yeah...

I've been struggling with this crappy software breaking repeatedly over the past couple of months and I just wanted to add a comment here for anyone else who is sick of it, because I didn't realise this until today – there is a slightly different version of Citrix Workspace available through Chromium as an extension. That seems like a more reliable way of using Citrix than the "native" Linux bundle, which is unlikely to be a support priority for the company.

package 19.12-1 last updated 2019-12-17 works on Manjaro using pamac AUR

zzhumphreyt: This package has been flagged out-of-date already – see „Package Actions“ in the top right corner.

I tried to install this and repeatedly got package validation errors. I noticed that the pkgbuild file is referencing the latest URL link on Citrix's site for archives but the SHA hash is hardcoded. The current version is now 19.12, not 19.10, so I updated the build file before installing by clicking the Edit build button and updated the x86-64 hash to what Citrix's site had to get a good build.

When I try to run /opt/Citrix/ICAClient/selfservice I get the error:

/opt/Citrix/ICAClient/selfservice: error while loading shared libraries: libwebkit2gtk-4.0.so.37: cannot open shared object file: No such file or directory

installing webkit2gtk fixed this for me.

but starting sessions over storeweb should work, so it's not really mandatory.

I think an opt dependency is not enough for extra/webkit2gtk. I couldn't add a store until i installed extra/webkit2gtk manually.

I think this might benefit from a dependency to extra/webkit2gtk since selfservice won't start without it

Looks like the "latest" URL format may have changed --> https://www.citrix.com/downloads/workspace-app/linux/workspace-app-for-linux-latest1.html

@buzo: okay, thx for the hint!

svettwer: If you find an outdated package (version 1908 instead of 19.06 in this case), please click on “flag out-of-date“ above instead of adding a comment. Thanks!

Hi!

It seems the SHA256 sum for icaclient-x64-19.06.tar.gz is not correct. PCKBUILD states 1A7E683ABF6BC40F6A39DAC38A4FCCC4A9FEE3EC339A98C000EEFD17ABA3F86B but https://www.citrix.com/downloads/workspace-app/linux/workspace-app-for-linux-latest.html states 7C35ED300D3375F74D16070A412E0E3C015803533E013FC48291974B11970D39. That leads to an error during installation.

BR and thx

Please add a "fakeroot"-check to install the package if necessary. In Manjaro Mate it was a dependency. Thanks

on my systems its NOT the system freezing, I can still switch to another tty an kill the Citrix processes.

Wanted to comment that full Citrix Workspace (both from this AUR and on other Linux installs, including Fedora) intermittently (though almost every other launch) causes a fully system panic that can only be remedied by hard restart.

Don't know if anyone else is experiencing this, but thought I would post so you know you are not alone.

Also, though I haven't tried it yet, Citrix just released a new version yesterday (July 2, 2019).

Was experiencing high processor usage and full crashes until implemented @FlyingBuzz's solution to downgrade the wfica binary to linuxx64-18.8.0.31.tar.gz. Now works perfectly (as mentioned). Thank you!

@FlyingBuzz you are awesome!

For those who suffer from segfault while opening *.ica files with version 19.03, try replacing wfica binary in /opt/Citrix/ICAClient/ with one taken from previous version tarball. For me linuxx64-18.8.0.31.tar.gz works perfectly.

@hnws, It still does not work for me either (same error)... I tried 19.03 in Win10 and it connects fine so it does not look like something they broke with my setup. Also, I found that I do not get the core dump reliably so maybe the crash was a red herring.

@hnws, for my still not work...

This package used to setup the correct associations for the .ica file and launch correctly, but some time ago it stopped working and now it opens in a text editor. When I right click on an .ica file and "open with another application" there are no options for wfica, ica, citrix, workspace or receiver.

Also none of the above are in PATH. Need to get this back, as right now I am having to launch Workspace manually and copy paste from password manager. Whereas before I could autologin with password manager and click to download an ICA file then it would launch automatically.

I tried running it from the console but it gave no output except the cannot connect to "0.0.0.2.. popup. Interestingly, I did find some info in dmseg output. Seems it cored.

[109622.688297] traps: wfica[24582] general protection fault ip:7f866329812d sp:7ffd0aaff2c8 error:0 in libc-2.28.so[7f866315e000+14b000]
[109622.688383] audit: type=1701 audit(1554918752.323:186): auid=1000 uid=1000 gid=1000 ses=1 pid=24582 comm="wfica" exe="/opt/Citrix/ICAClient/wfica" sig=11 res=1
[109622.698766] audit: type=1130 audit(1554918752.333:187): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-coredump@2-24651-0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
[109622.956813] audit: type=1131 audit(1554918752.593:188): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-coredump@2-24651-0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'

Edit: Here is the stacktrace:

                Stack trace of thread 24582:
                #0  0x00007f866329812d __strcasecmp_l_avx (libc.so.6)
                #1  0x00000000005bab47 n/a (wfica)
                #2  0x00000000005bb66c n/a (wfica)
                #3  0x00000000005bb6ce ceip_uploader (wfica)
                #4  0x00000000005bc394 ceip_regular_scheduler (wfica)
                #5  0x00000000005ba4f1 n/a (wfica)
                #6  0x00000000005ba5a8 ceip_launch (wfica)
                #7  0x000000000049ae84 OldMain (wfica)
                #8  0x0000000000581b83 PlatAppMain (wfica)
                #9  0x000000000054b4ec AppMain (wfica)
                #10 0x000000000049820a main (wfica)
                #11 0x00007f8663160223 __libc_start_main (libc.so.6)
                #12 0x0000000000498259 _start (wfica)

icaclient (19.03-1) gives me:

> selfservice
selfservice is unable to find a compatible webkit library and will now exit.
Please install libwebkitgtk-1.0 and restart selfservice.

webkitgtk2 (3:2.4.11-16) is installed

The package is now updated to use certs from /etc/ssl/ . Please manually delete directory: /opt/Citrix/ICAClient/keystore/cacerts

I took this bit from Gentoo's package definition. It works for me either way..

I also have the same error as @felixita and @jcharest. Icaclient worked great until the last update of 28-3-19 (version 19.03-1). Reverting to icaclient-old for now.

How is this supposed to work?

I get an ica file when I access the Citrix StoreFront in my browser, but how do I tell icaclient to use it?

I get the same error as @felixita, it worked before the latest upgrade. For now, I have reverted to icaclient-old.

FWIW, since the latest upgrade on 3-28 I'm having .ica windows launching and closing seconds later. I'm not sure why or even how to debug. Installing icaclient-old brings me back to stability. Just FYI for now. Thanks as always to the maintainer!

@hnws i confirm the issue. After upgrade from 19.01-1 in my 2 pc, connect fail. of course i've an ica file to open. Downgrading all work again correctly.

@felixita I have to say that it works for me.. I always have an ica file to open. Maybe this is not your use case?

icaclient 19.03-1 for me fail to connect with this message: cannot connect to "0.0.0.2 - appname". previous 19.01-1 work fine. Anyone can solve this?

Not sure why this was flagged as out of date... it is working fine for me still. The out-of-date reason indicated is that it couldn't find the tar.gz file, but I just did a fresh install without any issue.

@buzo: You were right. I was able to install this package with makepkg -s. Or it was just a coincidence. Tnx anyway.

After a fresh Arch install i tried to install icaclient 18.10-1. I got the following error:

cp: cannot stat '/tmp/yaourt-tmp-ron/aur-icaclient/pkg/icaclient/opt/Citrix/ICAClient/nls//module.ini': No such file or directory

bal0r: I think your setup is broken. This package depends on libidn11, which contains /usr/lib/libidn.so.11. Don't try to “fix” it with a symbolic link: The version change is there for a reason. See also here and here.

Hello, I get the following error:

/opt/Citrix/ICAClient/wfica: error while loading shared libraries: libidn.so.11: cannot open shared object file: No such file or directory

pacman -Ql libidn reveals that it installs:

/usr/lib/libidn.so

/usr/lib/libidn.so.12

/usr/lib/libidn.so.12.6.0

I fixed it by manually linking 11 to 12:

ln -s /usr/lib/libidn.so /usr/lib/libidn.so.11

But that is an ugly fix, isn’t it? Can I do better?

Cheers, Max

@buzo, I did flag it out of date. Then I did a manual install after fixing the PKGBUILD, but I couldn't update my flagging comment, hence me adding the one below.

cypher_zero: Next time, please click on “flag out-of-date” instead of adding a comment.

Broken due to new package today. Necessary changes to PKGBUILD (already tested):

pkgver=18.10

sha256sums_x86_64=('F5CD27E60EEEBF617142EFE437F47C140C5602156354DA16A6D30D000F225372')
sha256sums_i686=('76B7F259AA4AE250C09092C996BE70CC25CED1D9D82BE093A89970E1E1E3896D')
sha256sums_armv7h=('34BF317E4A954031D36070F5E565C4B87EC44B796978C7F45646D93F5A951280')

I am having some issues with the Connection Center; although I do have WebkitGTK+ installed, it is not detected.

/opt/Citrix/ICAClient $ pacman -Ss webkit2gtk
extra/webkit2gtk 2.22.2-1 [installed]
    GTK+ Web content engine library
/opt/Citrix/ICAClient $ ./selfservice
selfservice is unable to find a compatible webkit library and will now exit.                                                                         
Please install libwebkitgtk-1.0 and restart selfservice.

Any suggestions?

Regarding the libidn dependency: I prefer @WorMzy's way - post a comment on the icaclient package page and just change the dependency. It might take a very long time to wait for every to upgrade libidn-133-compat to get conflicts=(libidn11), and I don't see it worthwhile.

@hnws there are two libidn 1.x packages in the repos

core/libidn 1.35-1

community/libidn11 1.33-1

The second one has the files you want, and removes one dependency from the aur.

% pacman -Ql libidn11 libidn11 /usr/ libidn11 /usr/lib/ libidn11 /usr/lib/libidn.so.11 libidn11 /usr/lib/libidn.so.11.6.16

A dependency libidn-133-compat is going to be removed [1]. Please use libidn11 instead.

[1] https://lists.archlinux.org/pipermail/aur-requests/2018-October/027347.html

Why is the plugin not listed in the Firefox addons page? I cannot open apps in Citrix Receiver, they open in a new tab in Firefox instead, and I suspect it is because I cannot adjust plugin settings. This is possible with Chromium.

The package is updated with recommended libidn package: lbidn11. Unfortunately, due to lack of conflict settings, this update needs manual intervention.

pacman -Rdd libidn-133-compat

For the firefox plugin support, please refer to the Citrix official website.

btw, webkitgtk2 is listed as optional dependency. You can install from either aur-archlinux or archlinuxcn repo.

I instaled icaclient 18.09-1 but wend i execute

$/opt/Citrix/ICAClient/selfservice --icaroot /opt/Citrix/ICAClient

selfservice is unable to find a compatible webkit library and will now exit.

Please install libwebkitgtk-1.0 and restart selfservice.

Anybody knows wat happens?

Thanks in advance for the help.

Updating from 13.10-1 to 18.09-1 failed with the following error message:

error: failed to commit transaction (conflicting files) libidn-133-compat: /usr/lib/libidn.so.11 exists in filesystem (owned by libidn)

Thanks in advance for the help.

libidn-compat-133 is in conflict with libidn, providing both "/usr/lib/libidn.so.11". Can you update the package?

Thanks for the update; much appreciated! The client builds fine.

I just upgraded this morning (still need to test it) but it looks like if you applied the libidn fix you will have to remove the link. the new build builds the so file directly.

Just tested and it builds and works great. Thank you for the update

dreamersbrow's fix confirmed working here as well. Cheers!

ln -s /usr/lib/libidn.so.12 /usr/lib/libidn.so.11

Seems like the ICA client has been renamed to "Citrix Workspace App" and there is a new release:

https://www.citrix.com/downloads/workspace-app/

Thank you dreamersbrow, I ran into this error this morning and your workaround seems to be working

Looks like the latest update of libidn 1.35-1 has removed libidn.so.11 and replaced it with libidn.so.12.

As a work around I created a symbolic link to libidn.so.12 called libidn.so.11 and icaclient seems to be working again.

ln -s /usr/lib/libidn.so.12 /usr/lib/libidn.so.11

Not sure if this is the correct thing to do but...

I'm getting "cannot connect to 0.0.0.2 - device" error. I have tried creating symbolic link to /etc/ssl/certs as stated in various other ubuntu forums but no luck. Is there any known solution to this?

@hnws maybe you could pin Sam_DM's Comment until the openssl upstream fix arrives :D

Updating to 13.9.1-2 gives the following errors:

... ==> Sources are ready. :: Building icaclient package(s)... ==> Making package: icaclient 13.9.1-2 (Sun 24 Jun 2018 02:00:03 PM CEST) ==> Checking runtime dependencies... ==> Checking buildtime dependencies... ==> WARNING: Using existing $srcdir/ tree ==> Removing existing $pkgdir/ directory... ==> Entering fakeroot environment... ==> Starting package()... Unknown regexp modifier "/W" at /bin/c_rehash line 28, at end of line Unknown regexp modifier "/3" at /bin/c_rehash line 28, at end of line Unknown regexp modifier "/2" at /bin/c_rehash line 28, at end of line No such class installdir at /bin/c_rehash line 63, near "Prefix our installdir" (Might be a runaway multi-line // string starting on line 28) syntax error at /bin/c_rehash line 63, near "Prefix our installdir" Can't redeclare "my" in "my" at /bin/c_rehash line 68, near "my" Execution of /bin/c_rehash aborted due to compilation errors. ==> ERROR: A failure occurred in package(). Aborting... :: failed to build icaclient package(s)

Luckily, old version 13.9.1-1 is still good.

@marulkan: as a workaround for the issue with xorg-server-common-1.20, please do the changes to ~/.ICAClient/All_Regions.ini as described here: https://wiki.ubuntuusers.de/Citrix_ICA_Client/#Problembehebung chapter: Probleme mit Seamless Fenstern

Leave it in windowed mode and do not go in full screen.

You can vote for this to be backported :) https://bugs.archlinux.org/task/58100

bezirg: … or edit /usr/bin/c_rehash and add the missing quotes in line 15 and 16, as stated in the comments below.

I think this package cannot be built with the latest version of ArchLinux's openssl package. The error I get upon makepkg:

...
Can't redeclare "my" in "my" at /usr/bin/c_rehash line 68, near "my"
Execution of /usr/bin/c_rehash aborted due to compilation errors.

I think this is related to this bug: https://bugzilla.redhat.com/show_bug.cgi?id=1562953

This bug has been fixed upstream. A solution to build icaclient that I have tested and works is to either downgrade the ArchLinux's openssl package to a version < 1.1.0.h-1 (e.g. using the https://wiki.archlinux.org/index.php/Arch_Linux_Archive) or build a latest git snapshot of OpenSSL repository.

I had some trouble installing this package, so here is what I did to make this work:

1. Using pacaur, I got the error: /bin/pacman: unrecognized option '--color never' I don't know if this is a pacaur related issue. But anyway, the package is downloaded by pacaur to ~/.cache/pacaur/icaclient
2. I cd to the package directory (~/.cache/pacaur/icaclient) and attempt a manual install (makepkg -si). This time hitting another problem: Unknown regexp modifier "/W" at /bin/c_rehash line 28, at end of line and a bunch of other error messages.
3. I open the file /bin/c_rehash, the error in this file is not on line 28 as the error message suggests. Instead it is at line 15 and 16. Change these line to: my $dir = "/etc/ssl"; and my $prefix = "/usr";. The problem is that double quotes were missing for string literals on those lines.
4. After editing /bin/c_rehash, I went back to the package directory (~/.cache/pacaur/icaclient in my case) and tried makepkg -si again. This time it worked.

Hope it helps :)

Seems to be an issue with icaclient running with: xorg-server-common-1.20.0-2-x86_64.pkg.tar.xz xorg-server-1.20.0-2-x86_64.pkg.tar.xz

when starting a session to a windows machine it will consume all resources on your client, it tries to read from a socket at /tmp/.X11-unix/X0 to a insane degree making X unusable. I would guess this is an issue with the icaclient itself and not this package, but thought it would be good to mention here as a headsup. (running with xorg at 1.19.6+13+gd0d1a694f-2-x86_64 works fine for me)

EDIT: someone else has created a post about this in citrix support forum: https://discussions.citrix.com/topic/395450-unusable-after-upgrade-to-xorg-v120/

EDIT2: as sandstorm noted (thank you!) you can workaround this issue with following this guide https://wiki.ubuntuusers.de/Citrix_ICA_Client/#Problembehebung chapter: Probleme mit Seamless Fenstern

This question has already been asked here multiple times. It is a bug in OpenSSL. See the comment from slav on 2018-05-13 20:22 for how to edit /usr/bin/c_rehash as a workaround.

I am unable to update this package. This is the error output. What am I doing wrong?

==> Starting package()... Unknown regexp modifier "/W" at /usr/bin/c_rehash line 28, at end of line Unknown regexp modifier "/3" at /usr/bin/c_rehash line 28, at end of line Unknown regexp modifier "/2" at /usr/bin/c_rehash line 28, at end of line No such class installdir at /usr/bin/c_rehash line 63, near "Prefix our installdir" (Might be a runaway multi-line // string starting on line 28) syntax error at /usr/bin/c_rehash line 63, near "Prefix our installdir" Can't redeclare "my" in "my" at /usr/bin/c_rehash line 68, near "my" Execution of /usr/bin/c_rehash aborted due to compilation errors. ==> ERROR: A failure occurred in package().

Do you have any idea how to run it with F5 Endpoint Inspection?

Please excuse my ignorance but would somebody please explain how to edit the lines at /usr/bin/c-rehash? After failed yaourt -S icaclient command, I cannot even find the downloaded package in /var/cache/pacman/pkg directory to look for that file. Thanks!

Edit: Nevermind, I thought c_rehash was part of the package. Once I realized it was part of openssl package and already in place, I was able to fix it. Sorry for the confusion.

There's an open bug 58100 to backport upstream but the maintainer Pierre might decide to wait for the next upstream release.

Hi!

I had the problem below during the update:

==> Iniciando package()... Unknown regexp modifier "/W" at /usr/bin/c_rehash line 28, at end of line Unknown regexp modifier "/3" at /usr/bin/c_rehash line 28, at end of line Unknown regexp modifier "/2" at /usr/bin/c_rehash line 28, at end of line No such class installdir at /usr/bin/c_rehash line 63, near "Prefix our installdir" (Might be a runaway multi-line // string starting on line 28) syntax error at /usr/bin/c_rehash line 63, near "Prefix our installdir" Can't redeclare "my" in "my" at /usr/bin/c_rehash line 68, near "my" Execution of /usr/bin/c_rehash aborted due to compilation errors. ==> ERRO: Uma falha ocorreu em package(). Abortando... ==> ERRO: Makepkg não conseguiu compilar icaclient.

After editing the lines indicated the error did not occur and it was possible to update the package without problems!

my $dir = "/etc/ssl"; my $prefix = "/usr";

Thank you!

should be fixed at source in openssl-1.1.1 : https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=894282

editing c_rehash as commented below fixed the install issue

I'm getting the same error that slav reported yesterday.

OK I fixed, just modified /usr/bin/c_rehash...

change to:

my $dir = "/etc/ssl"; my $prefix = "/usr";

thanks

ARM Processor support for armv7h is now in this

Hi,

Unfortunately coming error during compilation v13.9.1-2

==> Starting package()... Unknown regexp modifier "/W" at /usr/bin/c_rehash line 28, at end of line Unknown regexp modifier "/3" at /usr/bin/c_rehash line 28, at end of line Unknown regexp modifier "/2" at /usr/bin/c_rehash line 28, at end of line No such class installdir at /usr/bin/c_rehash line 63, near "Prefix our installdir" (Might be a runaway multi-line // string starting on line 28) syntax error at /usr/bin/c_rehash line 63, near "Prefix our installdir" Can't redeclare "my" in "my" at /usr/bin/c_rehash line 68, near "my" Execution of /usr/bin/c_rehash aborted due to compilation errors. ==> ERROR: A failure occurred in package(). Aborting... The build failed.

For a manual fix to the c_rehash issue. Edit /usr/bin/c_rehash and add quotes on line 15 and 16.

my $dir = "/etc/ssl";
my $prefix = "/usr";

Then the installation succeeds.

It seems 13.9 solves previous SSL errors, finally working for me!

thats a problem with c_rehash from the new openssl package.

seems the c_rehash mechanism is kind of depcrecated in arch anyway: https://bugs.archlinux.org/task/54887

I also get this error.

==> Starting package()...
Unknown regexp modifier "/W" at /usr/bin/c_rehash line 28, at end of line
Unknown regexp modifier "/3" at /usr/bin/c_rehash line 28, at end of line
Unknown regexp modifier "/2" at /usr/bin/c_rehash line 28, at end of line
No such class installdir at /usr/bin/c_rehash line 63, near "Prefix our installdir"
  (Might be a runaway multi-line // string starting on line 28)
syntax error at /usr/bin/c_rehash line 63, near "Prefix our installdir"
Can't redeclare "my" in "my" at /usr/bin/c_rehash line 68, near "my"
Execution of /usr/bin/c_rehash aborted due to compilation errors.
==> ERROR: A failure occurred in package().
    Aborting...

I get these error during the build:

Unknown regexp modifier "/W" at /usr/sbin/c_rehash line 28, at end of line

Unknown regexp modifier "/3" at /usr/sbin/c_rehash line 28, at end of line

Unknown regexp modifier "/2" at /usr/sbin/c_rehash line 28, at end of line

No such class installdir at /usr/sbin/c_rehash line 63, near "Prefix our installdir"

(Might be a runaway multi-line // string starting on line 28)

syntax error at /usr/sbin/c_rehash line 63, near "Prefix our installdir"

Can't redeclare "my" in "my" at /usr/sbin/c_rehash line 68, near "my"

Execution of /usr/sbin/c_rehash aborted due to compilation errors.

Anyone can help?

md5sums_x86_64 changed: c6cdb81abf6b14f74245a49406077906

After installing, it says "You have to create '$HOME/.ICAClient/cache' for each user who uses this program and then populate it with the appropriate ini files. Copy paste the below to do this easily" but that is actually incorrect. With that phrasing, it sounds like the cache directory should be populated with the .ini files, while in fact it is the ~/.ICAClient directory that should be populated.

Any news to solve ssl error? 13.8 for me always the same error...