Edit: WIll attempt to forward this as a bug report and keep you informed guys ifI make any advance thus subject, I don't think to find muich alone and it looks like a complex problem which only activates in rare circumstances because my selfservice worked very well a few days ago.
Finally, the issue I identified on my system smells like a bug, when a NetScaler internet gateway is used, circumstances as yet undetermined mean that, the authentication token may be attempted to be retrieved from the NetScaler gateway instead of the internal host...
Under these circumstances, SelfServuice will not return until exactly 30min.
If you are experiencing the same problem, to reproduce what I have found, enable Trace and Verbose in in /opt/Citrix/ICAClient/config/AuthManConfig.xml
You will see then it hangs there, because the url sent to curl returns 404, and the code is waiting 10min for a response, and is attemptingh this 3 times
CHttpTransactionBase::SendAndReceive
{
. virtual void AM::Networking::CLinuxHttpTransaction::CheckedSendAndReceive()
. {
. . m_easyResult: 52; error string from curl: 'Empty reply from server'
. . CheckedSendAndReceive client cert none
. . Throwable created: CHttpException: CheckedSendAndReceive(); server URL: 'https://NetScalerGatewayInternetHost/Citrix/Auth/auth/v1/token'
. . Throwable created: CLinuxHttpException: CheckedSendAndReceive(); m_Reason=1 m_Curlcode=52; url: 'https://NetScalerGatewayInternetHost/Citrix/Auth/auth/v1/token'
. }
}
https://NetScalerGatewayInternetHost/Citrix/Auth
And I suspect it wanted to contact instead the internal host
https://InternalHost/Citrix/Auth/auth/v1/token
Because in several other places of the traces, this url works perfectly but on the internal host!
Pinned Comments
buzo commented on 2021-06-26 12:42 (UTC) (edited on 2023-02-02 09:00 (UTC) by buzo)
If you cannot build because of a missing tar ball or a failed sha256 checksum validation, then the package is most likely outdated and they have removed the old version already. In this case, please click on “Flag package out-of-date”.
evanator commented on 2020-07-02 06:46 (UTC)
Found a fix for "authentication service could not be contacted"
Edit the config file under /home/username/.ICAClient\WFClient.ini and add a new line SSLCiphers=ALL save file and run "killall AuthManagerDaemon ServiceRecord selfservice storebrowse"
Relaunch Citrix and you should be fine