Configuration
3.2.1
Configuration Settings
The table below lists the options, their default values, and a brief explanation of each.
Table 1 – Configuration Options
Option Name Default Value Notes
Revision
Enabled
Default-Component-Type
Local-Address
Trace/Trace-Header
1
1
Citrix Web Interface
The current revision of the configuration. This is incremented each time the configuration is changed and allows the IIS 6 Module to automatically reload its configuration parameters. If you have manually changed configuration settings in the file, increment this setting by 1 so that your changes take effect.
Whether the IIS 6 Module is enabled or disabled. If disabled, does not block access, but does not intercept authentication requests – they pass through unmodified.
Default Component type to specify when connecting to an
Authentication Server.
IP address automatically detected by the install program.
If more than one IP address was detected, this value will be the IP address selected during installation.
The local IP address to be used when connecting to Authentication
Servers.
31 The tracing header fields that have been enabled. This is a bitmask constructed by adding the following values:
1
2
4
Enable the Date field
Enable the Time field
Enable the Tracing level field
8 Enable the Thread ID field
16 Enable the File field
32 Enable the Line field
Trace/Trace-Mask 0x00000000
Trace/Trace-File
Digipass Authentication for Citrix Web Interface Guide
<installation directory>\ eg. for DATE,TIME,LEVEL = 1 + 2 + 4 = 7
A value of 0 will result in no header being added to the trace output.
Hexadecimal or decimal values:
Hex
0x00000000
Decimal
0 No tracing
0x0010000E 1048590
0xFFFFFFFF 4294967295
Configuration and error messages only
All levels enabled.
The absolute path and filename of the file to which internal state tracing will be written. The file but not the path will be created by the
41
Configuration
Option Name Default Value Notes
Local-Address
Log\dpextcfg.trace
127.0.0.1
Connection-List/Load-
Balancing
Connection-List/ Connection
<number>/ Name
False
<blank>
Connection-List/ Connection
<number>/ Address
Connection-List/
Connection<number>/ Port
Connection-List/
Connection<number>/
Server-Type
IP Address entered during installation.
20003 (default) or
Port number entered during installation.
Primary
Connection-List/ Connection
<number>/
Nr-Connections
10
Connection-List/ Connection
<number>/Min-Reconnect-
Interval
30
IIS6 module if it does not exist.
If this option is blank, the IIS 6 Module will not output tracing.
The local IP address to be used when connecting to Authentication
Servers.
Whether load balancing is enabled for connections to Authentication
Servers.
Text to display in the Servers list on the Configuration.
IP Address of the Authentication Server.
Port to use in connecting to the Authentication Server
Either
Primary or Backup Authentication Server. This setting affects load-balancing.
The maximum number of concurrent connections which the IIS 6
Module may hold open to the Authentication Server.
The minimum amount of time in seconds that the IIS 6 Module will leave between attempts to reconnect to a higher-priority server after losing connection to it.
Connection-List/ Connection
<number>/Max-Reconnect-
Interval
Attribute-Group
300
<blank>
The maximum amount of time in seconds that the IIS 6 Module will leave between attempts to reconnect to a higher-priority server after losing connection to it.
The Attribute Group name to use in retrieving credentials from a
Digipass User account.
Use-Attribute-For-User-
Name
0 If this option is enabled, the IIS 6 Module will retrieve a User-Name attribute from a Digipass User account. It will replace the User ID entered during login with the attribute value before passing the request to the the web site.
0 Disabled. The User ID will not be replaced with the User attribute.
1 Enabled. The User ID will be replaced with the User-Name attribute.
Sites/Site<number>/ Name Citrix Web Interface 4.x Text to display in the Sites list on the Configuration GUI.
Sites/Site<number>/
Component-Type
Sites/Site<number>/
Login/Match-URL/URL
Citrix Web Interface
/citrix/metaframe/auth
/login.aspx
(CWI 4.0 - 4.5)
Component type to specify when connecting to an Authentication
Server for this Site.
The base URL to use in submitting a login
Digipass Authentication for Citrix Web Interface Guide 42
Configuration
Option Name Default Value
OR
/citrix/AccessPlatform/a uth /login.aspx
(CWI 4.6)
Notes
Sites/Site<number>/
Login/Match-URL/
Param<number>
Sites/Site<number>/
Login/Failed-URL/URL
Sites/Site<number>/
Login/User-Field
Sites/Site<number>/
Login/Password-Field
Sites/Site<number>/
Login/Domain-Field
<blank> password domain
Query string parameter needed in the URL.
/citrix/metaframe/auth
/login.aspx?Nfuse_Mes
sageType=Error&
Nfuse_MessageKey=In validCredentials&N fuse_LogEventID=
(CWI 4.0 - 4.5)
OR
/citrix/AccessPlatform/a uth
/login.aspx?Nfuse_Mes
sageType=Error&
Nfuse_MessageKey=In validCredentials&N fuse_LogEventID=
(CWI 4.6)
The base URL to use after a failed login attempt user Name of the field that corresponds to User.
Name of the field that corresponds to Password.
Name of the field that corresponds to Domain
Sites/Site<number>/
Login/Challenge-Template
Sites/Site<number>/
Login/Error-Message
<install directory>\ change_password\chall enge_template.html false
Location and file name of the template to use in creating a
Challenge/Response page
Specifies whether the IIS Module should pass a reason for a login failure to Citrix. Corresponds to Return Failure Reason checkbox in the Configuration GUI.
The base URL used in changing a User’s password. Sites/Site<number>/
ChgPasswd/Match-URL/URL
/citrix/metaframe/auth
/changepassword.aspx
(CWI 4.0 - 4.5)
OR
/citrix/AccessPlatform/ auth
Digipass Authentication for Citrix Web Interface Guide 43
Configuration
Option Name Default Value
/changepassword.aspx
(CWI 4.6)
Notes
Sites/Site<number>/
ChgPasswd/ Match-
URL/Param<number>
Sites/Site<number>/
ChgPasswd/Enabled
Sites/Site<number>/
ChgPasswd/ User-Field
<blank>
0 dp_user
Sites/Site<number>/
ChgPasswd/ Password-Field password
Sites/Site<number>/
ChgPasswd/ NewPassword-
Field passwordNew
Sites/Site<number>/
ChgPasswd/ PasswordConf-
Field
Sites/Site<number>/ One-
Step-CR/Match-URL/URL passwordConfirm
/citrix/metaframe/auth/l ogin.aspx
(CWI 4.0 - 4.5)
OR
/citrix/AccessPlatform/a uth/login.aspx
(CWI 4.6)
Query string parameter needed in the URL.
Whether the IIS 6 Module will capture password changes.
Name of the field that corresponds to User.
Name of the field that corresponds to Password.
Name of the field that corresponds to New Password.
Name of the field that corresponds to Confirm New Password.
The base URL to use in making a one-step challenge/response login request.
Query string parameter needed in the URL. Sites/ Site<number>/ One-
Step-CR/ Match-URL/
Param<number>
Sites/ Site<number>/ One-
Step-CR/ Enabled
<blank>
0 Whether one-step challenge/response logins are enabled.
Digipass Authentication for Citrix Web Interface Guide 44
