An I/O (Input/Output) error occurred while your request was being processed

(Last modified: 03Aug2004)

This document (10093878) is provided subject to the disclaimer at the end of this document.

symptom

An I/O (Input/Output) error occurred while your request was being processed

Cannot access Citrix Metaframe server through iChain

fact

Novell iChain 2.3

Novell eDirectory 8.7.3 for All Platforms

FormFill enabled

Novell iChain 2.3 Secure Access to Citrix Thin-Client Services

All Citrix ICA Client Engine versions higher than "6.30.1051.0" (wfica32.exe) report the error:
"An I/O (Input/Output) error occurred while your request was being processed"
while trying to establish a tunnel connection to the Citrix server using iChain as a forward proxy

Citrix ICA Client Engine versions "6.30.1051.0" and below works without any problem

iChain FormFill rewrites the LAUNCH.ICA file as defined by using the following FormFill Policy Rule:

<!-- This is an example form fill policy for logging in to Nfuse -->
<!-start of secure tunnel to MetaFrame through NFuse -->
<urlPolicy>
<name>NFuseTest</name>
<url>nfuse.dus.novell.com/Citrix/NFuse17/launch.asp</url>
<actions>
<icaFill>
<icaOriginal>
[WFClient]
</icaOriginal>
<icaReplace>
[WFClient]
ProxyHost=citrix.dus.novell.com:80
ICHAIN-TOKEN = 30
</icaReplace>
<icaMetaPrivateAddress>
Address=10.2.91.194
</icaMetaPrivateAddress>
<icaMetaPublicAddress>
Address=citrix.dus.novell.com
</icaMetaPublicAddress>
</icaFill>
</actions>
</urlPolicy>
<!- end of secure tunnel to MetaFrame through NFuse -->

 

iChain FormFill modified LAUNCH.ICA file:

[Encoding]
InputEncoding=ISO8859_1

[WFClient]
ProxyHost=citrix.dus.novell.com:80
ProxyType=Secure
ProxyUsername=3729ebbe298063587f9845eb
ProxyPassword=ecbfb2abc31e532e7393742b9838f03f1111ff34

Version=2
ClientName=

RemoveICAFile=yes


[ApplicationServers]
Desktop=

[Desktop]
Address=citrix.dus.novell.com:1494
InitialProgram=#Desktop
LongCommandLine=""
DesiredColor=4
TransportDriver=TCP/IP
WinStationDriver=ICA 3.0

AutologonAllowed=ON
Username=UserName
Domain=\D6963758AF960A77
ClearPassword=192D1F210C988E

DesiredHRES=800
DesiredVRES=600
TWIMode=Off

SessionsharingKey=4-basic-none-citrix-server-UserName-Citrix-Farm

[EncRC5-0]
DriverNameWin16=pdc0w.dll
DriverNameWin32=pdc0n.dll

[EncRC5-40]
DriverNameWin16=pdc40w.dll
DriverNameWin32=pdc40n.dll

[EncRC5-56]
DriverNameWin16=pdc56w.dll
DriverNameWin32=pdc56n.dll

[EncRC5-128]
DriverNameWin16=pdc128w.dll
DriverNameWin32=pdc128n.dll

[Compress]
DriverNameWin16=pdcompw.dll
DriverNameWin32=pdcompn.dll

With a standard setup the problem could not be reproduced by Novell Support in the LAB all Citrix Client versions could create the Secure Tunnel Connection without any problems

cause

The customer changed the Novell iChain 2.3 MiniWeb Server Language from English to German without applying a messages.cfg file.
 In this case iChain does not return the correct HTTP Content-Type Header for the "Proxy Authentication Required" message:

HTTP:   1: HTTP/1.0 407 Proxy Authentication Required  
HTTP:   2: Content-Type: text/html; charse
HTTP:   3: Content-Length: 1514  
HTTP:   4: Pragma: no-cache  
HTTP:   5: Proxy-Authenticate: Basic realm="iChain-ICA"

The Header should look like:

HTTP:   1: HTTP/1.0 407 Proxy Authentication Required  
HTTP:   2: Content-Type: text/html; charset=utf-8  
HTTP:   3: Content-Length: 1527  
HTTP:   4: Pragma: no-cache  
HTTP:   5: Proxy-Authenticate: Basic realm="iChain-ICA"

fix

Apply the correct messages.cfg (see iChain 2.3 documentation for further details) as defined in the iChain 2.3 Administration GUIDE in "SYS:ETC\PROXY\DATA\ERRPAGE\NLS\language".
Per default there is no messages.cfg file in any language directory other than English.

note

For troubleshooting use the AppNote: How to Configure and Troubleshoot iChain 2.3 Issues Accelerating a Citrix MetaFrame Server

document

Document Title: An I/O (Input/Output) error occurred while your request was being processed
Document ID: 10093878
Solution ID: NOVL98097
Creation Date: 30Jul2004
Modified Date: 03Aug2004
Novell Product Class:iChain

disclaimer

The Origin of this information may be internal or external to Novell. Novell makes all reasonable efforts to verify this information. However, the information provided in this document is for your information only. Novell makes no explicit or implied claims to the validity of this information.
Any trademarks referenced in this document are the property of their respective owners. Consult your product manuals for complete trademark information.