It so life

love as life

CTX116603

Posted on

CTX116603 - How to Convert VMware Virtual Machines to XenServer Virtual Machines - Citrix Knowledge Center

Citrix Logo

Knowledge Center Citrix

Knowledge Center Communities Support Forums Blogs Alerts Sign in

Knowledge Center Home > CTX116603

Rate this Article:

You must be signed in to rate again Article Feedback Print View Languages:

  • Select

  • 日本語

    How to Convert VMware Virtual Machines to XenServer Virtual Machines

Document ID: CTX116603 / Created On: Jun 17, 2008 / Updated On: Aug 18, 2009

Average Rating: 4 (14 ratings)

View products this document applies to link to products this document applies to

Summary

This document describes the two methods available to convert a VMware-formatted virtual machine (VM) into a Citrix XenServer virtual machine. The first method of converting OVF packages exported directly from VMware is the preferred as it is the quickest, most efficient and allows you to convert multiple virtual drives at the same time. The second method of converting VMDK files should be used as an alternative as it only allows the conversion of one drive at a time. For best results, copy the OVF template and the VMDK file to the computer that XenConvert is installed on for conversion.

Requirements

• Administrator access to VMware VM to be converted

• Administrator access to XenServer and/or XenCenter

• Basic knowledge on Open Virtualization Format (OVF)

You must be comfortable using VMware, a Windows computer to run the XenConvert Utility, XenServer and XenCenter.

Please reference the Citrix XenConvert Guide for XenConvert Supported Operating Systems and the Overview of the Open Virtualization Format (OVF) for more information on OVF packages.

Click here to download Citrix XenConvert Application Software

Initial Procedures

  1. Identify the VM you want to export.

  2. Log on to that VM and uninstall VMware Tools. Refer to the following screen shot:

Note: You will experience issues if these items are not properly removed and/or uninstalled from Add or Remove Programs and from the Taskbar.

  1. Delete any snapshots located with the VM.

  1. Delete any unnecessary data, drives, partitions and/or applications you will no longer need for that VM.

Note:

• Enableautomount.aspx) feature for Windows VMs

• If manifest feature in VMware Workstation was enabled, delete the .mf file to allow import.

Exporting OVF packages from VMware

The following VMware products support OVF export:

• VMware vSphere 4

• VMware VI3

• VMware Workstation 6.5.x

• VMware OVF Tool 0.9 and 1.x

• VMware Converter 3.0.3

• VMware Converter 4.x

• VMware Studio

Note: The example shown here was done with VMware vSphere.

  1. Select File > Export > Export OVF Template.

  1. Select a Directory to store the OVF Export and ensure that Optimized for: Web (OVF) is selected.

  1. A dialogue will indicate that the export completed successfully.

  1. Copy the entire exported contents over to your XenConvert workstation leaving the folder structure the same.

Converting OVF Export with XenConvert

  1. From XenConvert select the Open Virtualization Format (OVF) Package option.

Note: OVF packages can only be converted directly to XenServer.

  1. Select the OVF Package to import and indicate whether you would like to “Verify Content” and/or “Verify Author”.

  1. Enter the hostname, user name (root) and password of the XenServer that you will convert the OVF package directly to.

  1. Select Convert to start the conversion process.

Converting VMDK Files

Note: XenConvert has been designed to convert a single virtual disk from VMDK format at a time. Copy data from all additional drives and partitions to an external location and delete any additional drives and/or partitions.

  1. Browse the physical location of the VMware files and locate the virtual machine’s .vmdk file.

  1. Make a note of the path to the virtual machine’s .vmdx file.

  2. Install XenConvert application on the Windows computer that will perform the conversion.

  3. Launch XenConvert and select the “VMware Virtual Hard Disk (VMDK)” option.

  1. You will be presented with the following three options on converting a “VMware Virtual Hard Disk (VMDK)” for XenServer.

• XenServer option converts directly to an accessible XenServer host

• XenServer Virtual Appliance option converts to an .xva format file that can be used to import

• XenServer Virtual Hard Disk (VHD) option converts VMDK file to a .vhd file

6.All three options prompt you to browse for and select the .vmdk file to convert.

Option 1 – XenServer

  1. You must specify the destination XenServer hostname, User name, Password and Workspace to be used during the conversion.

  2. Type or browse to the location where you want the converted files to be stored. For conversion efficiency, Citrix recommends specifying a location on the local computer where you are running conversion, preferably on a different partition or drive.

Note: The Workspace specified will need to have enough space available to convert the selected VM.

  1. Enter the name of the VM as you would like it to appear in XenCenter after it has been uploaded.

  1. The XenConvert utility displays the progress of the conversion and upload of VM to XenServer.

5. Note: Do not close dialogue box until the Status indicates “Conversion was successful!”

  1. After the conversion process completes, XenServer shows the converted VM by the name specified during conversion followed by “import”.

Option 2 –Xen Virtual Appliance

The Xen Virtual Appliance option converts the VM into a portable format that can be easily moved, archived or uploaded to XenServer.

  1. After selecting the Xen Virtual Appliance option and VMDK file to convert you are prompted to select a folder to store the converted contents.

  1. After the VMDK file is converted you have an output that lists an hda folder, ova.xml, .pvp and .vhd file.

Note: Do not change the file structure. The ova.xml file and hda folder must be on the same level.

Importing the Converted VM to XenServer

  1. Log on to XenCenter.

  2. On the menu bar, go to VM > Import.

You have the option to browse for the ova.xml file or choose either Exported VM or Exported template.

Note: The same file extension (.xva) is used for both the exported VMs and exported templates.

  1. Select XenServer Virtual Appliance Version 1 (ova.xml) from the Files of Type list. You are now able to browse and see the ova.xml file.

  1. Select the XenServer host that you want to deploy the imported VM to.

  1. Select the storage repository where the virtual disks for the newly imported VM will be stored.

Note: You can copy a VM from one storage repository to another storage repository after the import process has completed.

  1. Add the network interfaces you want to configure for the new VM.

  1. Click Finish to complete the import process.

Allow enough time for the import process to complete. The XenCenter Logs tab displays an estimate of the amount of time that the VM will take to import.

The imported VM will have the name “import” at the end of it to identify that it has been imported. You can rename the VM after the import process finishes.

How to Import a VM through the Command Line Interface (CLI):

  1. Copy all the files needed to a mounted share accessible by your XenServer host.

  2. Run the xe vm-import command:/#xe vm-import filename= sr-uuid=

Example command: /# xe vm-import filename=/nfs or cifs share/VMWare_WinXP_Export/ova.xml sr-uuid=da31c9d2-88ea-35f6-8c48-924db6c39817

More Information

Citrix XenConvert Application Software

CTX121646 - Citrix XenConvert 2.0.1 Guide

CTX116685 - How to a Copy a Virtual Machine From One Storage Repository to Another

VMware OVF Tool User Guide

This document applies to:

Yes No Need to test first Not sure, I need help Just browsing/General research

What would you have done if this article had not solved your issue?

What action will you take next?

Open a Citrix Technical Support Case Contact my Citrix Solution Advisor Continue searching Knowledge Center Search non-Citrix resources Ignore the problem/take no further action

Thanks for your feedback! Report errors with this document

Use this field to report errors with this document:

Thanks for your report!

Knowledge Center

Advanced Search Products XenApp

>> View All Products

Knowledge Resources

httpClient中文乱码问题解决

Posted on

httpClient中文乱码问题解决

kangojian

2008-06-24 14:55
我在尝试着直接将中文改变为utf-8的字符串直接写入，失败后！以为是网络传输中应该是iso-8859-1方式传输的，然后将中文转为该编码格式，还是失败后，看httpclient源代码发现：重写postmethod中的getrequestcharset()方法，虽然源代码中该方法动态的设置编码格式，但是好像并没有很好的执行！在重写后，问题解决！ package pro; import java.io.IOException; import org.apache.commons.httpclient.HttpClient; import org.apache.commons.httpclient.HttpException; import org.apache.commons.httpclient.HttpStatus; import org.apache.commons.httpclient.NameValuePair; import org.apache.commons.httpclient.methods.PostMethod; public class simulateWebAction { public static void main(String[] args) throws IOException { // TODO Auto-generated method stub String url = “///////”; PostMethod postMethod = new UTF8PostMethod(url); StringBuilder origin = new StringBuilder(); origin.setLength(0); HttpClient httpClient = new HttpClient(); // getMethod.getParams().setParameter(HttpMethodParams.RETRY_HANDLER, new DefaultHttpMethodRetryHandler()); NameValuePair a = new NameValuePair("a","//"); NameValuePair q = new NameValuePair("q","//*"); NameValuePair[] param = new NameValuePair[]{a,q}; postMethod.setRequestBody(param); try { // 执行getMethod int statusCode = httpClient.executeMethod(postMethod); if (statusCode != HttpStatus.SC_OK) { System.err.println("Method failed: "+ postMethod.getStatusLine()); }else{ // 读内容 System.out.println(postMethod.getResponseBodyAsString()); } } catch (HttpException e) { // TODO Auto-generated catch block e.printStackTrace(); } catch (IOException e) { // TODO Auto-generated catch block e.printStackTrace(); }finally{ postMethod.releaseConnection(); } } public static class UTF8PostMethod extends PostMethod{ public UTF8PostMethod(String url){ super(url); } @Override public String getRequestCharSet() { //return super.getRequestCharSet(); return "UTF-8"; } } }

Citrix Mfcom Programming For Administrators

Posted on

Citrix Mfcom Programming For Administrators--

SlideShare

Search

Citrix Mfcom Programming For Administrators

*

Flash Player 9 (or above) is needed to view presentations. We have detected that you do not have it on your computer. To install it, go here.

Post a comment

Post a comment

Embed Video Email: Subscribe to follow-up comments Unsubscribe from followup comments Edit your comment Cancel

Notes on slide 1

2 Favorites

Tags citrix mfcom

  • [AmitRanjan Amit Ranjan]( "AmitRanjan | I head SlideShare's New Delhi office.

"), CoFounder & COO at SlideShare, favorited this 11 months ago more

Citrix Mfcom Programming For Administrators - Presentation Transcript

  1. Citrix MFCOM Programming for Administrators October 2007
  2. 100 Applications 1000 Users 100,000 Clicks
  3. Introductions

  • Instructors

  • Nitin Desai

  • Vishal Ganeriwala

  • Facilitators

  • Fred Liu

  • Tom Kludy

  • Jeff Reed

  • Agenda MFCOM Basics Start Using MFCOM Labs In Action Future And Takeaways
  • Agenda Agenda item number 1 Start Using MFCOM Labs In Action Future And Takeaways MFCOM Basics

  • What is MFCOM?

  • COM-based management interface

  • Runs on every Citrix Presentation Server™ box

  • Scriptable and COM programming language support

  • Remote execution

  • Work Smarter and Faster Using MFCOM Integration with third-party software applications 3 Information reporting 2 Automate administration tasks 1
  • How Does MFCOM Work ? MFCOM IMA LHC DCOM RPC SAL SAL SAL Data Store Data Collector Citrix Presentation Server Windows Machine SAL : Subsystem Access Layer
  • Common MFCOM Objects Zones Farm Apps Servers Sessions Policies Servers Users Sessions Apps Processes VCs
  • Agenda Agenda item number 1 MFCOM Basics Labs In Action Future and Takeaways Start Using MFCOM
  • Today’s Setup For Class Demos DCOM Port 2512 Client Machine MPS SDK Lab1CPS CPS 4.5 VM Lab2CPS CPS 4.5 VM DCOM IMA Farm Name: SDKDemo Data Store: Lab1CPS Zone Data Collector: Lab1CPS Servers : Lab1CPS & Lab2CPS

  • How Can I Get Started?

  • Download SDK from: http://support.citrix.com/page.jspa?pageID=devCenter

  • Browse Script Repository http:// support.citrix.com/kb/category.jspa?categoryID =645&subCategoryID=645

  • Setting Up Client and Server Machines

  • Register the remote Citrix Presentation Server using: mfreg

  • Use dcomcnfg to change the Impersonation level from identity to impersonate on Windows XP

  • W2K3+SP1 CPS Server - Add remote MFCOM user to the DCOM Users Group

  • Make sure you have administrative privileges for the Citrix Farm

  • Sample Examples

  • MPSSDK Documentation

  • MPSSDK Help System

  • MFCOM browser

  • http:// www.jasonconger.com/ShowPost.aspx?strID =9686d808-19c0-4bad-a577-02d85f597a8d

  • Displaying Farm Name

  • Use of VBScriptTemplate.wsf to add code

  • Use of MetaFrameFarm Object and its methods

  • Navigating MFCOM …

  • New version of interfaces with different releases

  • MetaFrameFarm object : IMetaFrameFarm6 (CPS4.0) inherits from IMetaFrameFarm5 (CPS3.0)

  • Scripts connect to the latest interfaces

  • C++ - Use QueryInterface

  • Drill down to appropriate level of object.

  • MetaFrameServer Object:

  • IMetaFrameServer

  • IMetaFrameWinServer Finding the relevant interface

  • Agenda Agenda item number 1 MFCOM Basics Start Using MFCOM Future And Takeaways Labs In Action

  • What Will You Learn?

  • When and how to use MFCOM

  • Navigating the documentation

  • Using major MFCOM objects

  • Auditing the farm

  • Automating Citrix Presentation Server™ management tasks

  • Labs: Commonly Done Presentation Server Administration Tasks

  • Lab 1: Servers and Applications

  • Lab 2: Create a Load Evaluator

  • Lab 3: Take the Server Offline

  • Extra Credit:

  • Printing

  • Auditing Using Enumerations

  • Object associations as a powerful tool for auditing Zones Farm Apps Servers Sessions Sessions

  • Lab 1 : Servers and Applications

  • List servers and applications in the Farm.

  • List Applications on each server.

  • List Servers for each application

  • Use of MetaFrameServer and MetaFrameApplication methods/properties.

  • Simple Administration Tasks

  • Creating new entities in the farm

  • Create an Object in MFCOM

  • Initialize the necessary data

  • SaveData – Saving data to IMA Datastore

  • Changing the configuration settings for the existing entities

  • Create an Object (CreateObject method)

  • Initialization – Initialize or set methods

  • LoadData – Loading data from IMA Datastore

  • Change the settings

  • SaveData – Save data back to IMA Datastore

  • Lab2 : Create a Load Evaluator

  • Create a Load Evaluator

  • Set the name and description

  • Create a LMRule for CPU utilization

  • Create a LMRules collection and add a rule

  • Set Load Evaluator Rules and save the data

  • Use of MetaFrameLoadEvaluator, MetaFrameLMRule and MetaFrameLMRules methods/properties.

  • Inside MFCOM

  • COM Free threading model

  • Error reporting

  • Limited error codes as HRESULT

  • Exceptions in. NET

  • MFCOM user

  • Current user vs. other user (runas)

  • MFCOM impersonates before calling IMA

  • Complex Management Tasks

  • Connecting more than one entity in the farm

  • Series of tasks with proper ordering

  • Repetitive pattern

  • Examples

  • Take the server offline

  • Migrate applications from one farm to another

  • Remove the server from N applications

  • Lab3 : Taking The Server Offline

  • How to take the server offline for maintenance purpose gracefully?

  • Steps -

  • Prevent the new connections

  • Communicate to the users

  • Let the connections drain

  • Logoff the sessions after timeout period

  • Use of MetaFrameLoadEvaluator, MetaFrameSession and MetaFrameServer methods/properties.

  • Advanced MFCOM Usage

  • Multi farm management

  • Create objects on the multiple remote servers

  • C/# - Activator method

  • VBScript - CreateObject(("MetaFrameCOM.MetaFrameFarm", ServerName1)

  • Event handling

  • Server, Application and Folder Events

  • Create, update (rename), move and delete

  • MetaFrameFarmEvent enum, IMetaFrameEventQueue , CreateEventQueue2 method in MetaFrameFarm

  • Extra Credit : Printing

  • List printer drivers on every server

  • Use of MetaFrameServer and MetaFramePrinterDriver Methods

  • Agenda Agenda item number 1 MFCOM Basics Start Using MFCOM Labs In Action Future and Takeaways

  • CPSSDK

  • Scalability

  • Highly scalable in large farm environment

  • Usability

  • Consolidation of interfaces and methods

  • Enhanced consistency in object behavior

  • Easy multi-farm management

  • Better .Net Support

  • .NET assembly

  • .NET versioning and generics Next-generation Presentation Server Management SDK

  • How Does CPSSDK Work ? IMACOM IMA LHC DCOM RPC SAL SAL SAL Data Store Data Collector Citrix Presentation Server Windows Machine CPSSDK Client Cached Data Chunky Calls SAL : Subsystem Access Layer
  • Work Smarter and Faster Start Using MFCOM Today !

  • Before you leave…

  • Overall conference survey is available online at www.citrixiforum.com starting Wednesday, October 24 (please provide feedback)

  • Download workshop materials from www.citrixiforum.com starting Monday, October 29

  • Leftover workshops handouts can be found at the HOT Assistance Center Desk

  • Data Type: LMRuleSchedule Start time End time Bit 15-0 Bit 31-16 Half hour Bit 4 Not used Bit 7-5 Day of week Hour (in military time format) Bit 3-0 Bit 15-8

+ vishalganeriwalavishalganeriwala, 12 months ago

Embed custom Without related presentations For WordPress.com

1343 views, 2 favs, 2 embeds more stats This is a basic presentation done at Citrix IForum more

This is a basic presentation done at Citrix IForum 2007 event. It is a good overview for anyone getting started with Citrix MFCOM less

Related Presentations

More by user

View all presentations from this user

More Info

© All Rights Reserved Go to text version

more

All embeds

less

Flagged as inappropriate Flag as inappropriate Flag as innappropriate

Select your reason for flagging this presentation as inappropriate. If needed, use the feedback form to let us know more details.

None Pornographic Copyright Violation Defamatory Illegal/Unlawful Other Terms Of Service Violation Cancel

Categories

  • Technology Automotive Books Business & Mgmt Career Design Education Entertainment Fashion & Beauty Finance Gadgets & Reviews Health & Medicine How-to & DIY Humor Investor Relations News & Politics Pets Photos Real Estate Spiritual Sports Technology Templates & Forms Travel Cancel

Tags

Search

RSS Feed

What's new?

Participate in the SlideShare World's Best Presentation Contest 2009...

© 2009 SlideShare Inc. All Rights Reserved

  • Favorited! Add tags? Cancel
  • Edit your favorites Cancel
  • Send to your Group / Event Select Group / Event Add your message Cancel

Citrix Mfcom Programming For Administrators

Posted on

Citrix Mfcom Programming For Administrators

SlideShare

Search

Citrix Mfcom Programming For Administrators

*

Flash Player 9 (or above) is needed to view presentations. We have detected that you do not have it on your computer. To install it, go here.

Post a comment

Post a comment

Embed Video Email: Subscribe to follow-up comments Unsubscribe from followup comments Edit your comment Cancel

Notes on slide 1

2 Favorites

Tags citrix mfcom

"), CoFounder & COO at SlideShare, favorited this 11 months ago more

Citrix Mfcom Programming For Administrators - Presentation Transcript

  1. Citrix MFCOM Programming for Administrators October 2007
  2. 100 Applications 1000 Users 100,000 Clicks
  3. Introductions

  • Instructors

  • Nitin Desai

  • Vishal Ganeriwala

  • Facilitators

  • Fred Liu

  • Tom Kludy

  • Jeff Reed

  • Agenda MFCOM Basics Start Using MFCOM Labs In Action Future And Takeaways
  • Agenda Agenda item number 1 Start Using MFCOM Labs In Action Future And Takeaways MFCOM Basics

  • What is MFCOM?

  • COM-based management interface

  • Runs on every Citrix Presentation Server™ box

  • Scriptable and COM programming language support

  • Remote execution

  • Work Smarter and Faster Using MFCOM Integration with third-party software applications 3 Information reporting 2 Automate administration tasks 1
  • How Does MFCOM Work ? MFCOM IMA LHC DCOM RPC SAL SAL SAL Data Store Data Collector Citrix Presentation Server Windows Machine SAL : Subsystem Access Layer
  • Common MFCOM Objects Zones Farm Apps Servers Sessions Policies Servers Users Sessions Apps Processes VCs
  • Agenda Agenda item number 1 MFCOM Basics Labs In Action Future and Takeaways Start Using MFCOM
  • Today’s Setup For Class Demos DCOM Port 2512 Client Machine MPS SDK Lab1CPS CPS 4.5 VM Lab2CPS CPS 4.5 VM DCOM IMA Farm Name: SDKDemo Data Store: Lab1CPS Zone Data Collector: Lab1CPS Servers : Lab1CPS & Lab2CPS

  • How Can I Get Started?

  • Download SDK from: http://support.citrix.com/page.jspa?pageID=devCenter

  • Browse Script Repository http:// support.citrix.com/kb/category.jspa?categoryID =645&subCategoryID=645

  • Setting Up Client and Server Machines

  • Register the remote Citrix Presentation Server using: mfreg

  • Use dcomcnfg to change the Impersonation level from identity to impersonate on Windows XP

  • W2K3+SP1 CPS Server - Add remote MFCOM user to the DCOM Users Group

  • Make sure you have administrative privileges for the Citrix Farm

  • Sample Examples

  • MPSSDK Documentation

  • MPSSDK Help System

  • MFCOM browser

  • http:// www.jasonconger.com/ShowPost.aspx?strID =9686d808-19c0-4bad-a577-02d85f597a8d

  • Displaying Farm Name

  • Use of VBScriptTemplate.wsf to add code

  • Use of MetaFrameFarm Object and its methods

  • Navigating MFCOM …

  • New version of interfaces with different releases

  • MetaFrameFarm object : IMetaFrameFarm6 (CPS4.0) inherits from IMetaFrameFarm5 (CPS3.0)

  • Scripts connect to the latest interfaces

  • C++ - Use QueryInterface

  • Drill down to appropriate level of object.

  • MetaFrameServer Object:

  • IMetaFrameServer

  • IMetaFrameWinServer Finding the relevant interface

  • Agenda Agenda item number 1 MFCOM Basics Start Using MFCOM Future And Takeaways Labs In Action

  • What Will You Learn?

  • When and how to use MFCOM

  • Navigating the documentation

  • Using major MFCOM objects

  • Auditing the farm

  • Automating Citrix Presentation Server™ management tasks

  • Labs: Commonly Done Presentation Server Administration Tasks

  • Lab 1: Servers and Applications

  • Lab 2: Create a Load Evaluator

  • Lab 3: Take the Server Offline

  • Extra Credit:

  • Printing

  • Auditing Using Enumerations

  • Object associations as a powerful tool for auditing Zones Farm Apps Servers Sessions Sessions

  • Lab 1 : Servers and Applications

  • List servers and applications in the Farm.

  • List Applications on each server.

  • List Servers for each application

  • Use of MetaFrameServer and MetaFrameApplication methods/properties.

  • Simple Administration Tasks

  • Creating new entities in the farm

  • Create an Object in MFCOM

  • Initialize the necessary data

  • SaveData – Saving data to IMA Datastore

  • Changing the configuration settings for the existing entities

  • Create an Object (CreateObject method)

  • Initialization – Initialize or set methods

  • LoadData – Loading data from IMA Datastore

  • Change the settings

  • SaveData – Save data back to IMA Datastore

  • Lab2 : Create a Load Evaluator

  • Create a Load Evaluator

  • Set the name and description

  • Create a LMRule for CPU utilization

  • Create a LMRules collection and add a rule

  • Set Load Evaluator Rules and save the data

  • Use of MetaFrameLoadEvaluator, MetaFrameLMRule and MetaFrameLMRules methods/properties.

  • Inside MFCOM

  • COM Free threading model

  • Error reporting

  • Limited error codes as HRESULT

  • Exceptions in. NET

  • MFCOM user

  • Current user vs. other user (runas)

  • MFCOM impersonates before calling IMA

  • Complex Management Tasks

  • Connecting more than one entity in the farm

  • Series of tasks with proper ordering

  • Repetitive pattern

  • Examples

  • Take the server offline

  • Migrate applications from one farm to another

  • Remove the server from N applications

  • Lab3 : Taking The Server Offline

  • How to take the server offline for maintenance purpose gracefully?

  • Steps -

  • Prevent the new connections

  • Communicate to the users

  • Let the connections drain

  • Logoff the sessions after timeout period

  • Use of MetaFrameLoadEvaluator, MetaFrameSession and MetaFrameServer methods/properties.

  • Advanced MFCOM Usage

  • Multi farm management

  • Create objects on the multiple remote servers

  • C/# - Activator method

  • VBScript - CreateObject(("MetaFrameCOM.MetaFrameFarm", ServerName1)

  • Event handling

  • Server, Application and Folder Events

  • Create, update (rename), move and delete

  • MetaFrameFarmEvent enum, IMetaFrameEventQueue , CreateEventQueue2 method in MetaFrameFarm

  • Extra Credit : Printing

  • List printer drivers on every server

  • Use of MetaFrameServer and MetaFramePrinterDriver Methods

  • Agenda Agenda item number 1 MFCOM Basics Start Using MFCOM Labs In Action Future and Takeaways

  • CPSSDK

  • Scalability

  • Highly scalable in large farm environment

  • Usability

  • Consolidation of interfaces and methods

  • Enhanced consistency in object behavior

  • Easy multi-farm management

  • Better .Net Support

  • .NET assembly

  • .NET versioning and generics Next-generation Presentation Server Management SDK

  • How Does CPSSDK Work ? IMACOM IMA LHC DCOM RPC SAL SAL SAL Data Store Data Collector Citrix Presentation Server Windows Machine CPSSDK Client Cached Data Chunky Calls SAL : Subsystem Access Layer
  • Work Smarter and Faster Start Using MFCOM Today !

  • Before you leave…

  • Overall conference survey is available online at www.citrixiforum.com starting Wednesday, October 24 (please provide feedback)

  • Download workshop materials from www.citrixiforum.com starting Monday, October 29

  • Leftover workshops handouts can be found at the HOT Assistance Center Desk *

  • Data Type: LMRuleSchedule Start time End time Bit 15-0 Bit 31-16 Half hour Bit 4 Not used Bit 7-5 Day of week Hour (in military time format) Bit 3-0 Bit 15-8

+ vishalganeriwalavishalganeriwala, 12 months ago

Embed custom Without related presentations For WordPress.com

1343 views, 2 favs, 2 embeds more stats This is a basic presentation done at Citrix IForum more

This is a basic presentation done at Citrix IForum 2007 event. It is a good overview for anyone getting started with Citrix MFCOM less

Related Presentations

More by user

View all presentations from this user

More Info

© All Rights Reserved Go to text version

more

All embeds

less

Flagged as inappropriate Flag as inappropriate Flag as innappropriate

Select your reason for flagging this presentation as inappropriate. If needed, use the feedback form to let us know more details.

None Pornographic Copyright Violation Defamatory Illegal/Unlawful Other Terms Of Service Violation Cancel

Categories

  • Technology Automotive Books Business & Mgmt Career Design Education Entertainment Fashion & Beauty Finance Gadgets & Reviews Health & Medicine How-to & DIY Humor Investor Relations News & Politics Pets Photos Real Estate Spiritual Sports Technology Templates & Forms Travel Cancel

Tags

Search

RSS Feed

What's new?

Participate in the SlideShare World's Best Presentation Contest 2009...

© 2009 SlideShare Inc. All Rights Reserved

  • Favorited! Add tags? Cancel
  • Edit your favorites Cancel
  • Send to your Group / Event Select Group / Event Add your message Cancel

Quantcast

Citrix 系统的安全分析

Posted on

Citrix 系统的安全分析--欢迎访问417的博客

首页 | 博客群 | 公社 | 专栏 | 论坛 | 图片 | 资讯 | 注册 | 帮助 | 博客联播 | 随机访问

欢迎访问417的博客

特别的一晚- -| 回首页 | 2007年索引 | - -Pic-2

Citrix 系统的安全分析

关键词： Citrix

// 很久以前翻译的一篇文章，2004年发给黑防了。

编者按：虚拟工作平台已开始的从单纯的透过网页传播信息，变化到利用Internet、Interanet、Extranet的基础建设来达到合作、交易及知识管理的目的。这项新的网页环境最基本需求之一是安全的配置、重要的营业应用软件。不相容的整合导致无法即时分享重要的信息，造成时间、金钱及附加价值的损失。这是为什么成千上万个大型企业团体选择在全球具有领导地位的Citrix的主要原因。下文介绍的是Citrix中不可忽略的一个因素——安全！

Citrix 系统的安全分析 原作者/Brian Madden 翻译/417 一、介绍 Citrix系统是一款广泛流行的远程桌面控制程序，类似于 Microsoft 的 Terminal Services，但是原理不同，Microsoft Terminal Services 使用的是 RDP(Remote Desktop Protocol) 协议，而 Citrix 使用的是 ICA (Independent Computing Architecture)协议。(实际上 Microsoft 买断了 Citrix 的另一项技术 Citrix MultiWin，并使它可以与 Windows 同内核工作，以支持多用户并行会话，在 Windows 2000 操作系统中才被正式命名为RDP。Citrix 的产品和技术已被全球超过2000万的用户所采纳，其中包括世界财富100强的所有企业和公司，世界财富500强的企业中亦有85%选用 Citrix 的产品。Citrix 的客户包括 MCI Worldcom、Qantas、朗讯、北方电信、摩托罗拉、诺基亚、香港电信、JPMorgan、雀巢公司、壳牌集团、UCLA（加利福尼亚大学洛杉矶分校）、香港大学等等——译者注) 在本文中，我将简要介绍Citrix是怎样工作的，和如何更好的配置Citrix使用者权限。 要声明的是，作者是Citrix MetaFrame XP的高级技术顾问之一，但并不是Citrix的管理员，以下有些想法并不完美，不过本文的重点并不是这些，请根据具体情况。如果有错误可以联系 wirepair@roguemail.net。 二、Citrix 的工作方式 我列在这里的是几种Citrix可能被用到的解决方式： 1、Citrix MetaFrame Citrix MetaFrame 有三个不同的版本：XPs，XPa及 XPe。分别适合不同的环境使用。其中 XPe 是完全安全版，包括一些不同于其他版本的管理选项。XPa 和 XPe 则稍微少一点。在此篇文章中，我们只讨论 XPe，但是其中的大部分功能都能在其他版本上应用。Citrix 默认使用 1494 端口并且只和使用了 Citrix ICA 加密协议的客户端通信。 2、Citrix NFuse/Citrix 安全网关 Citrix NFuse 允许管理员锁定程序而只能通过 Web 浏览器通信。Citrix NFuse 默认是安装的 IIS 5.0 上的，但是在这篇文章中，我们将试着把它安装在 Apache 上。当然也许读者对在 IIS 5.0 上的安装/配置/管理 Citrix NFuse 更感性趣，我们稍后会涉及到这个问题。下面谈到的应用若没有特别指出则全部使用 SSL 128 位加密。 Citrix NFuse 默认安装情况下的远程权限规则允许管理员执行 Citrix 安全网关。如果管理员适当的配置了 NFuse，远程用户将则不能直接通过 Citrix Server。所有通过 Citrix NFuse 服务器和安全网关的连接将被过滤。如图1所示：

图1 三、以攻击者的角度思考问题 根据简图，我们发现使用者不能获得一个和 Citrix Server 直接的连接，但是可以通过 DMZ 到 Internal network。 在默认安装的 NFuse 并且没有安全网关配合的情况下，使用者接触到 NFuse Web Server,之后一旦发出了请求并确认，使用者将获得一个直接连接 Citrix Server 的通道，你可以看出这个有个问题，恶意使用者可以在和 Citrix Server 连接好的情况下，再进行先前的请求扫描，通过搜集请求列表之后建立自己的 .ICA 文件，里面包含了他们指定的信息。这就意味着，如果当前的情况是在网络边界，就有两个漏洞可以通过防火墙。一个是 IIS，一个是 Citrix。 .ICA 文件是一种基于文本结构的文档，包含所有的配置信息。这个文件一般是给最终用户使用，在安装完 Citrix 客户端以后，双击这个文件就可以自动连接 .ICA 文件中指定的服务器。 如果 NFuse 被使用的情况下通常就不需要 .ICA 文件了。假设 A 用户打开 Web 浏览器来到 NFuse Web 服务器，将使用他在 NT 域中的账号。如果成功登陆，A 用户将得到一张他 Citrix Farm 上有权使用的程序列表。 有多种方法可以得到运行在 Citrix 主机上的远程桌面，最近 Ian Vitek 发布了一些很有用的 PERL 脚本工具。我最常用的扫描 Citrix 请求的工具在这个可以下载： http://www.cqure.net/itools01.html 这个工具列出了远程机器上允许的请求，得到这些列表之后我们就可以通过修改 .ICA 文件中的请求信息。再这之后，你就可以尝试针对一些容易猜到的账号进行攻击，我的经验是尝试攻击一些专门用来做备份工作的账号。 （如果上面的程序在你的机器上不能很好的工作，你可以试试这个:http://sh0dan.org/files/pubappbrute.tar.gz） 假设你已经做好一切准备，只是没有好运气的话，你可以尝试 GUEST 账号，虽然通常情况下GUEST没有足够的登陆权限。 从 .ICA 文件入手来看： [WFClient] Version=2 TcpBrowserAddress=ip.ip.ip.ip

[ApplicationServers] word=

[word] Address=word InitialProgram=/#word ClientAudio=Off Compress=On TWIMode=On DesiredHRES=800 DesiredVRES=600 DesiredColor=4 TransportDriver=TCP/IP WinStationDriver=ICA 3.0

通过分析看来Citrix在运行时似乎寻找了 [word] 中 InitialProgram 的数据。如果我们把这个数据修改成cmd.exe 或 explorer.exe 会怎么样？呵呵，幸运的是我们真的可以指定运行这个程序，我曾利用这个方法无数次的绕过了登陆检查。只要确定程序是有效的存在的我们就可以运行它。现在我们已经在Citrix有了一个远程 shell。如果你运行的是 explorer.exe，那么你就打开了一个真正的桌面。我希望你熟悉如何提升自己的权限，在这里我就不多说了。另外，即使我以 guest 身份进入系统，我也可以运行只有管理员才可以运行的工具。很明显，这是一个严重的漏洞，你可以在网络上发现大量的弱口令用户。 如果他们使用 NFuse 和 Citrix Secure Gateway 过滤了所有通过防火墙的连接。这样你修改 .ICA 文件就没用了。但是我们仍有很多的机会获得远程桌面。一般情况下 Citrix 管理员经常在办公室远程操作，太好了，如果你有权远程使用 excel ，做个一个 vbscript 当到启动菜单里面，就算你像我一样懒，只是用 IE 浏览网页的话，我们也可以得到 C:\winnt\explorer.exe，其他 Microsoft Word 软件都可以做到。实际上决大多数情况下，我们可以通过 帮助-->帮助主题-->跳至URL 填写 cmd.exe 你可以下载它。如果你的远程机器上有写权限，修改你的.ICA 文件，哈哈，你又可以得到一个 shell 了。 类似的方法还有很多，你可以打开进程管理器启动一个新的进程，或者利用大部分程序中 打开-->浏览 获得一个 shell,如果你可以浏览远程机器，还可以从默认的配置文件目录： NT4 ： %systemroot%\profiles\username\Application Data\ Windows 2000 ： C:\Documents and Settings\username\Application Data\ 将里面的 .ICA 文件复制过来，覆盖你相应目录下的文件，之后打开 Citrix Program Neighborhood 你会发现你有权向所有已经连接的用户发出修改密码的消息。 四、安全的Citrix 还好这里有很多资料来提醒管理员加固Citrix，我曾经花费几周的时间试图找出一个应用与安全相平衡的安全策略： 1、首先正确配置 NFuse / Citrix Secure Gateway 2、确定 IIS/Apache 已经打了最新补丁，并且在 DMZ 的保护中，或者使用 NTLM 认证 3、如果可能，要求远程用户使用 SecureID 认证方式（原有的 ICA 认证方式，被发现存在弱加密算法漏洞——译者注） 4、使用其它的浏览器取代 IE 5、建立一个组，把所有Citrix用户放到这个组里面，禁止他们访问 cmd.exe, ftp://ftp.exe/, tftp.exe, rcp.exe, net.exe,command.com, iexplorer.exe 等可能对系统有危害的权限(在安全与应用的平衡之间选择) 6、给你的Citrix打上最新的补丁 7、禁止 winhelp32 的访问，设置 Internet 选项禁止下载,禁止使用进程管理器 8、如果可能，设置 Citrix Connection Configuration—>ica-tcp—>client settings —>选择必须 五、写在最后 翻译完着篇文章发现 Citrix系统很类似现在网吧广泛应用的类似虚拟桌面的程序，在研究了应用比较广泛的几款网吧管理程序后发现，此类程序都并非建立的系统内核基础上，很容易利用 Windows 本身的机制绕过，这才是这类软件漏洞产生的根本原因。

名词解析： DMZ：De-Militarized Zone，非军事区，是防火墙的一个特性。它可以使某台特定计算机向互连网开放。有些应用程序需要开通多个TCP/IP接口。而DMZ就可以为微机实现这些功能。

【作者: 417】【访问统计: 】【2007年01月4日 星期四 20:18】【注册】【打印】

[

搜索

]() Google [

Trackback

]()

你可以使用这个链接引用该篇文章 http://publishblog.blogchina.com/blog/tb.b?diaryID=6017226

[

回复

]() 验证码： 评论内容： //////////////作者已禁止回复功能////////////// 2003-2004 BOKEE.COM All rights reserved Powered by BlogDriver 2.1