Citrix ICA Client How-To for Linux

Preface

Note: I changed jobs a couple of years ago, and I no longer have access to a Citrix Server, therefore these instructions are to the best of what I had at the time, and may have changed or require tweaking since the last time I executed them.

Fortunately for us Linux users, Citrix provides binaries for connecting to Citrix servers from Linux boxen. Unfortunately, they have made the attempt to oversimplify the installation of their binaries by providing an installation script. The installation script is flawed in that it assumes you want to use Netscape as your browser. And even then it doesn’t seem to install ready-to-use. So for those of us that want to use it with a different browser (and/or Netscape for that matter), we are relegated to hunting google and/or searching for hidden documentation on how to manually install the client. So to Citrix, I say "A for effort" and "F" for not realizing that us linux techies also like to have detailed instructions on how to manually install when the automated install doesn’t suit our needs. And that brings us to the purpose of this page.

Obtaining the Citrix ICA Client

You need to obtain the Citrix ICA Client package. Citrix offers an RPM, but for the purposes of this page, I’m recommending the tarball. Thus, these instructions will be based off of the tarball download.

First, obtain the Citrix ICA Client tarball by going to http://www.citrix.com/ and selecting "Downloads". Or if you specifically want the current Linux x86 tarball, go to http://download2.citrix.com/files/de/products/client/ica/current/linuxx86.tar.gz. From this point on in the documentation, the tarball will be assumed to be the x86 version, so substitute accordingly if you have to.

Unpacking Citrix ICA Client

Once you've obtained the tarball, you need to unpack it. Pick a temporary location to unpack this tarball. For this page, we’ll use /tmp/citrix/. So create the temporary directory, move the tarball to that directory and change into that directory:

mkdir /tmp/citrix/

mv linuxx86.tar.gz /tmp/citrix/

cd /tmp/citrix/

Now unpack the tarball:

gzip –decompress linuxx86.tar.gz

tar xf linuxx86.tar

Now to run the installation command you must be logged in as the super user (root). So change to root (using su, or however).

Execute the installation script, and follow the instructions as prompted:

./setupwfc

Using the default installation directory is highly recommended. If you choose not to, you’ll have to read the install.txt to figure out what environment variables need to be set to get the Citrix ICA Client to work. The rest of this page will assume that the Citrix ICA Client was installed to its default directory. If the default was chosen, the binaries are now installed in /usr/lib/ICAClient/.

Note: I reccomend answering "No" to the installer when it asks if you'd like to integrate Citrix automatically since this How-To handles all of the setup needed.

Configuring Your Browser

These directions should work for Firefox, Mozilla, Netscape, and any other Linux Mozilla-based browser. The first step is to find the plugins directory for the browser you wish to configure. The plugins directory is typically found as a subdirectory of the installation directory for your browser. If you are unsure of the location of your plugins directory, you can try the following command to attempt to locate the plugins directory:

find / -name plugins | grep -i "netscape\|firefox\|mozilla"

We’ll assume that we are configuring Firefox, and that Firefox was installed to /opt/firefox. Again the following will have to be done as the superuser (root). Change into the plugins directory of your browser:

cd /opt/firefox/plugins/

Next, create a symlink (aka softlink) to the Citrix ICA Client library:

ln –s /usr/lib/ICAClient/npica.so npica.so

If the Citrix install script was able to find Netscape, it probably already did this step for you.

Connecting to Citrix and Using the Citrix ICA Client

Close all running instances of the browser you configured (just to be safe). Open a new instance of the browser. Type the URL of and connect to your Citrix Server (as though installation were complete). Login to the Citrix server with your user id and password. Once logged in, you should get the mini-desktop with all of your applications. The first time you click on an application, your browser is likely going to popup a dialog box giving you the choice to open the file or save the file. Choose the option to open the file. Where it asks for the application to use on this type of file, type in the path to the wfica application:

/usr/lib/ICAClient/wfica

If given the choice, tell the browser to use this application for all future downloads of this file type.

Congratulations! You have installed and configured the Citrix ICA Client.

Reader Comments:

06/16/2009 2:40 PM - the maniac wrote:
the plugin installed in FF no prob. but starting the citrix server gives a "the terminal server is not supported in this browser". If I look at the terminal server dropdown, ica is grayed out. I'm sure it's a simple fix, but I sure can't figure it out! Running jaunty DT w/FF3, citrix 11. All freshly d/l-ed and installed

06/10/2009 8:13 AM - Bernardo wrote:
Everything seems to work fine, except for the keyboard. I can't make any key echo at the screen when I hit it. What could possibly be wrong ?

05/27/2009 10:29 AM - Peeta wrote:
Jojomi My expericen with citrix is kinna lite but it appears that it all depands how the CITRIX server was setup on you company's site. Some people report having no problem at all other cant get it to run for the hell of it. I have the exact same issue as you do. It appears the browser downloads a file called "AccessGatewayClientLaunch.vcagc" but the npica does not know what to do with it. I tried to reasearch the mistyrious VCAGC file but found no info what so ever.

04/29/2009 7:34 AM - Sergio wrote:
VIVA LA FICA!

04/26/2009 12:19 PM - Hardeep Singh wrote:
doesnt work for me. says "this browser is not supported". am trying with firefox

03/24/2009 2:01 PM - H55F13 wrote:


03/14/2009 7:29 PM - Ian wrote:
Tried this - still get " The Web site is unable to detect the appropriate client software on your computer to allow you to access your published resources. Click here to obtain the client software "

02/13/2009 5:40 AM - sergio (CL - STGO) wrote:
we don't have problem with citrix client, we have problem with printer atached a client, we can local print, but not throow citrix. We read about spool, but not found information about this problem. We see file printcap, etc, etc, etc, but don't have any idea about this problem. any help will be thanks. Sorry for my english. ;)

12/23/2008 4:12 AM - Eric wrote:
Thank for the help with the certificate. Been battling with this for a while and now I can work

12/18/2008 8:23 PM - eric wrote:
whats the most minimal linux install required? assuming: some form of a gui desktop citrix login remote file shares internet browser network & printer support shortcut for a sudo terminal java based app support got my ubuntu ibex down to 2.25g, can i get rid of ubuntu desktop, what else will help a network thin client?

12/14/2008 12:48 PM - Frrrnk wrote:
Thanks a lot!! Works perfect. Nearly went back to WinXP. Running the setupwfc script did the trick.

11/19/2008 12:32 PM - LinuxN00b wrote:
Awesome, thanks. Now if only I could figure out how to make remote windows drive mappings (via group policy) work under Linux :(

11/17/2008 11:33 PM - Eman wrote:
I'm using CentOS 5.2 and I have followed the instructions in this guide. However, when i click an application in the mini-desktop I get a window that says: Network or dial-up problems are preventing communication with the server. Could someone shed some light on this. Thanks...

11/05/2008 8:59 PM - Chris wrote:
Thanks - used the same tarball as Scott - worked straight away - Ubuntu 8.04 - sems to be working fine under Firefox and Epiphany.

10/31/2008 8:55 AM - Scott wrote:
Awesome. Worked like a charm, thank you! Only difference is the link to the tarball you posted doesn't work. I went to their Downloads section and downloaded the file en.linuxx86.tar.gz. The guide worked perfectly.

10/29/2008 4:49 PM - Hanzi Muller wrote:
Works just as advertised. Pretty old version of Linux (Ubuntu 6.06) and Firefox 2.0.017, but it works perfectly. Thanks.

10/16/2008 6:03 PM - coryem wrote:
Firstly, thanks for useful guide. I too was faced with the ssl error 61 message but by simply exporting the certificate mentioned in the error window and placed it into the directory '/usr/lib/ICAClient/keystore/cacerts/' as mentioned by G?rald. I also renamed the extension of the certificate file to .crt and bob's you uncle. I would like to point out that wfica had failed for me too but I decided to ignore that error and try the export of the certificate first before reinstalling the client. Lucky I did :O)

10/13/2008 11:03 AM - G?rald wrote:
I followed the directions, worked up to the final stage. i.e. I can logon my company's site, when I click on the my application I get the "SSL error 61" mentioning not having trusted certificates. My company has posted a certificate file on its site; I downloaded the certificate and placed it in the /usr/lib/ICAClient/keystore/cacerts/ directory, I changed its ".cer" extension to ".crt" but to no avail, after many hours of trying I am giving up for now. Anyone has a suggestion?

10/09/2008 8:58 AM - ana wrote:
It worked! Thanks

09/13/2008 4:14 PM - Bryan Allred wrote:
FYI If you have any problems concerning an SSL error 61 mentioning not having trusted certificates (CA Root certificates) don't worry. You can either export it from Firefox, or download the .cer file from a public website and place it in the /usr/lib/ICAClient/keystore/cacerts/ directory.

09/01/2008 8:28 AM - nitro wrote:
Thanks for the info. Works fine for me, did not have to supply the path to the wfica application.

08/04/2008 3:41 PM - biouser wrote:
didn't work for me. I have some horrendous issues with fonts, then with some fixes still: bio@bio-bushido:~$ sudo /usr/lib/ICAClient/wfica Error: 12 (E_MISSING_INI_ENTRY) Please refer to the documentation. Warning: Missing charsets in String to FontSet conversion Warning: Unable to load any usable fontset Error: Aborting: no fontset found

08/01/2008 10:41 AM - Jojomi-----gmail wrote:
Hello! fyi I already found the npica.so /home/user/.mozilla/plugins# ln -s /usr/lib/ICAClient/npica.so ln: creating symbolic link `./npica.so': File exists Anyway... I start the /usr/lib/ICAClient/wfica and a windows pops up saying "error in configuration file. Section "ApplicationServers" must contain an entry ""." I tried starting off an empty appsrv.ini file and with another one with appservers but did not have luck. Basically I think that starting off a clean installation I should be prompted to configure my client. Had no luck with wine either, regsvr32 present but not as the installer expects I suppose. GG

Post a Comment:

Your Name:
Your Comment:

Copyright ©2004-2009 Wade Wassenberg
Last Modified: Wednesday July 30, 2008. 
If you have questions, comments, or if you find any part of this document to be inaccurate or incorrect, please submit your feedback to webmaster@wass.homelinux.net.