Wednesday, June 27, 2012

Enable SSH Access on a Citrix License Appliance

A customer recently started to get not enough license errors while connecting to their XenDesktop environment.  The customer uses a Citrix License Appliance, hosted in their XenServer pool.  I verified they were out of licenses by going to the web interface of the license appliance.  I then went to the console of the license appliance and quickly verified there are users listed as having a license but do not exist anymore.  So, instead of trying to go through each user line by line through the console, I wanted to export that information so the client could review the list and then we could take the appropriate steps.  Trying to copy almost 500 users listed did not work.  So, instead I needed to enable SSH access so I could then copy the output file generated and send it off for review.  Below are the steps taken to enable SSH access on the Citrix License Appliance:

  1. Connect to the console of the Citrix License Appliance through XenCenter.
  2. Login with root access.
  3. Open the following file with a text editor like vi:  vi /etc/sysconfig/iptables
  4. Add the following line: -A INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT
  5. Save the file and exit the text editor.
  6. Run the following command: service iptables restart
  7. To make the SSH service start every time you boot the appliance, run the following command: chkconfig sshd on
  8. To start the SSH service, run the following command: service sshd start
  9. To verify the license appliance is listening on port 22, run the following command: netstat -tulpn
After performing the above, you should be able to access your license appliance through SSH.  At this point, I ran the udadmin -list -a > liclist.txt command to save the list of users with licenses to a text file.  Then, I used WinSCP to copy that text file over to send to the client.

4 comments:

  1. The SSH service doesn't seem to be installed on the Citrix Appliance. I keep getting unrecognised service.

    ReplyDelete
  2. Are you getting that error on step #8? What version of the appliance are you running?

    ReplyDelete
  3. Nice to know you.
    I usually add this as well
    -to change https port
    # vi /opt/citrix/licensing/LS/conf/server.xml
    search for securePort
    change to 10443 because iptables allow port 10443

    ReplyDelete