Citrix Virtual Desktop users get 403 Access Denied Topic is solved
Moderators: mandville, General Support Moderators
Forum rules
Forum Rules
Absolute Beginner's Guide to Joomla! <-- please read before posting, this means YOU.
Forum Post Assistant / FPA - If you are serious about wanting help, you will use this tool to help you post.
Windows Defender SmartScreen Issues <-- please read this if using Windows 10.
Forum Rules
Absolute Beginner's Guide to Joomla! <-- please read before posting, this means YOU.
Forum Post Assistant / FPA - If you are serious about wanting help, you will use this tool to help you post.
Windows Defender SmartScreen Issues <-- please read this if using Windows 10.
-
- Joomla! Intern
- Posts: 87
- Joined: Wed Mar 04, 2015 6:22 am
Citrix Virtual Desktop users get 403 Access Denied
Hi
I hope this this the right place- I maintain a small J3 website (current version, always) on a shared host in AU.
Since about the end of last year we have a number of users who are greeted by "403 Access Denied" when they try to access the domain https://mbea.com.au
Working through the issues and some trial, error and elimination and consultation with the host and the Citrix environment admins we've established that the block originates in the Joomla CMS. As I understand it, when the user arrives at the site Joomla cannot "authenticate" the user (proxy?) and generates the 403. This is above my paygrade, so I cannot comment.
The Citrix admins whitelisted the domain, but that has had no effect. The 403s continue.
I then thought it was Akeeba's Admin Tools. We consulted Akeeba, which led to no solution. Consequently, and clutching at straws, Admin Tools was removed. Again, that wasn't the issue.
Since then I have done a clean Joomal install, and provided a plain HTML sub domain for testing.
The Citrix users can access the latter OK. However, the main domain running a clean, new copy of Joomla gives the Citrix mob a 403.
Users coming from a non Citrix environment are able to access the domain OK.
I'm beside myself here. Does anyone have a suggestion what else I might look at to find a solution?
Thanks
I hope this this the right place- I maintain a small J3 website (current version, always) on a shared host in AU.
Since about the end of last year we have a number of users who are greeted by "403 Access Denied" when they try to access the domain https://mbea.com.au
Working through the issues and some trial, error and elimination and consultation with the host and the Citrix environment admins we've established that the block originates in the Joomla CMS. As I understand it, when the user arrives at the site Joomla cannot "authenticate" the user (proxy?) and generates the 403. This is above my paygrade, so I cannot comment.
The Citrix admins whitelisted the domain, but that has had no effect. The 403s continue.
I then thought it was Akeeba's Admin Tools. We consulted Akeeba, which led to no solution. Consequently, and clutching at straws, Admin Tools was removed. Again, that wasn't the issue.
Since then I have done a clean Joomal install, and provided a plain HTML sub domain for testing.
The Citrix users can access the latter OK. However, the main domain running a clean, new copy of Joomla gives the Citrix mob a 403.
Users coming from a non Citrix environment are able to access the domain OK.
I'm beside myself here. Does anyone have a suggestion what else I might look at to find a solution?
Thanks
-
- I've been banned!
- Posts: 13639
- Joined: Sun Jul 05, 2009 3:30 am
- Location: Canberra, Australia
Re: Citrix Virtual Desktop users get 403 Access Denied
G'day ...
... nice website design. I am not one of the visitors to your website who's greeted with a 403 Access Forbidden error. Maybe the error message appears for people after they've logged in? This would make some sense because you mentioned authentication (and authentication doesn't come into play until after login).
So the first question is simple: where do you users go when they login?
BTW, J! is agnostic about what device people use (or, for that matter, what browser(s) people use). When J! handles a GET request from the client (i.e the "user") it just sends back a HTML package assuming that the client is permitted access to the content sought in the GET. Get it?![Wink ;)](./images/smilies/icon_wink.gif)
... nice website design. I am not one of the visitors to your website who's greeted with a 403 Access Forbidden error. Maybe the error message appears for people after they've logged in? This would make some sense because you mentioned authentication (and authentication doesn't come into play until after login).
So the first question is simple: where do you users go when they login?
BTW, J! is agnostic about what device people use (or, for that matter, what browser(s) people use). When J! handles a GET request from the client (i.e the "user") it just sends back a HTML package assuming that the client is permitted access to the content sought in the GET. Get it?
![Wink ;)](./images/smilies/icon_wink.gif)
- abernyte
- Joomla! Virtuoso
- Posts: 4194
- Joined: Fri May 15, 2009 2:01 pm
- Location: Écosse - Scozia - Escocia - Škotija -स्कॉटलैंड
Re: Citrix Virtual Desktop users get 403 Access Denied
Is there a rewrite condition in your .htaccess blocking proxys? As @sozzled states, Joomla is agnostic about what connects unless a rule has been set on the server which loads before Joomla.
"Those who expect to reap the blessings of freedom must, like men, undergo the fatigue of supporting it." Thomas Paine
-
- Joomla! Intern
- Posts: 87
- Joined: Wed Mar 04, 2015 6:22 am
Re: Citrix Virtual Desktop users get 403 Access Denied
We had an .htaccess generated by admin tools. That was removed and on the clean install we implemented the basic one that comes with Joomla.
That said, we have tested with no .htaccess and Citrix users are immediately greeted with 403s.
-
- Joomla! Intern
- Posts: 87
- Joined: Wed Mar 04, 2015 6:22 am
Re: Citrix Virtual Desktop users get 403 Access Denied
Thanks for the compliment.
Users get the 403 on the connection attempt. They don't even see the home page.
So I don't misunderstand, are you coming from a Citrix environment?
Thanks
-
- I've been banned!
- Posts: 13639
- Joined: Sun Jul 05, 2009 3:30 am
- Location: Canberra, Australia
Re: Citrix Virtual Desktop users get 403 Access Denied
No, I don't use Citrix.
When I searched for citrix on this forum I did not find much current information about those issues. There was also nothing at GitHub or at Joomla StackExchange.
You may need to engage a professional web developer to identify and resolve your issues. I'm sorry I don't have any real insight in that area; Citrix is not on my radar screen.
I don't have problems accessing your website without Citrix. Good luck in finding the answer.![Smiley :)](./images/smilies/icon_smile.gif)
When I searched for citrix on this forum I did not find much current information about those issues. There was also nothing at GitHub or at Joomla StackExchange.
You may need to engage a professional web developer to identify and resolve your issues. I'm sorry I don't have any real insight in that area; Citrix is not on my radar screen.
I don't have problems accessing your website without Citrix. Good luck in finding the answer.
![Smiley :)](./images/smilies/icon_smile.gif)
-
- Joomla! Intern
- Posts: 87
- Joined: Wed Mar 04, 2015 6:22 am
Re: Citrix Virtual Desktop users get 403 Access Denied
Hi
A couple of the (Citrix) users who had previously reported the 403 issue, this morning (AU time) advised that they were getting the ERR_TUNNEL_CONNECTION_FAILED failure in Chrome. This is generally well known & documented in search engines.
Specifically, Chrome will report
The fix has to be applied in Chrome as I understand it.
So far I've established that the majority of affected users are reporting Chrome, although one claims he is using Edge.
But my question is, might ERR_TUNNEL_CONNECTION_FAILED cause a 403 error to be generated?
Thanks
A couple of the (Citrix) users who had previously reported the 403 issue, this morning (AU time) advised that they were getting the ERR_TUNNEL_CONNECTION_FAILED failure in Chrome. This is generally well known & documented in search engines.
Specifically, Chrome will report
This site can’t be reached
3. The webpage at https://testsite.mbea.com.au/ might be temporarily down or it may have moved permanently to a new web address.
4. ERR_TUNNEL_CONNECTION_FAILED
The fix has to be applied in Chrome as I understand it.
So far I've established that the majority of affected users are reporting Chrome, although one claims he is using Edge.
But my question is, might ERR_TUNNEL_CONNECTION_FAILED cause a 403 error to be generated?
Thanks
- Per Yngve Berg
- Joomla! Master
- Posts: 31086
- Joined: Mon Oct 27, 2008 9:27 pm
- Location: Romerike, Norway
Re: Citrix Virtual Desktop users get 403 Access Denied
Have you looked in the Web Server Logs?
-
- Joomla! Intern
- Posts: 87
- Joined: Wed Mar 04, 2015 6:22 am
Re: Citrix Virtual Desktop users get 403 Access Denied
Yes, we have. There's nothing. For example, we know the IP addresses of some of the affected users and were hoping to see them in the logs. Nothing.
On the progress side, we know the sub domain we created for testing works, so whatever the problem is it is in our main joomla installation. I'm inclined to take a backup and do a clean install in the main domain, then import the data.
I love technology. When it works....
- Per Yngve Berg
- Joomla! Master
- Posts: 31086
- Joined: Mon Oct 27, 2008 9:27 pm
- Location: Romerike, Norway
Re: Citrix Virtual Desktop users get 403 Access Denied
Looks more like an error in a proxy.
- abernyte
- Joomla! Virtuoso
- Posts: 4194
- Joined: Fri May 15, 2009 2:01 pm
- Location: Écosse - Scozia - Escocia - Škotija -स्कॉटलैंड
Re: Citrix Virtual Desktop users get 403 Access Denied
They both use the Blink engine. Just for giggles ask an effected user to use a Gecko browser - Firefox or PaleMoon with Goanna.So far I've established that the majority of affected users are reporting Chrome, although one claims he is using Edge.
I, like Per, do suspect the error is caused by a proxy and not in Joomla per se.
"Those who expect to reap the blessings of freedom must, like men, undergo the fatigue of supporting it." Thomas Paine
-
- Joomla! Intern
- Posts: 87
- Joined: Wed Mar 04, 2015 6:22 am
Re: Citrix Virtual Desktop users get 403 Access Denied
UPDATE:
More out of frustration than anything else I backed up the site, did a clean install of Joomla, and restored the content and user data.
I also enabled the standard Joomla .htaccess file.
So far, so good.
I have not installed Admin Tools at this point because I feel it was the cause of the 403 errors. When my blood pressure goes down I may try to see what happens when I install it ;-)
Cheers & thanks for the feedback.
More out of frustration than anything else I backed up the site, did a clean install of Joomla, and restored the content and user data.
I also enabled the standard Joomla .htaccess file.
So far, so good.
I have not installed Admin Tools at this point because I feel it was the cause of the 403 errors. When my blood pressure goes down I may try to see what happens when I install it ;-)
Cheers & thanks for the feedback.