Gateway

Populate RDP URLs based on LDAP attribute

January 8, 2024

Contributed by:

You can configure a Citrix Gateway appliance to retrieve a list of RDP servers (IP/FQDN) from an LDAP server attribute. Based on the retrieved list, the appliance displays the RDP URLs for the servers that can be accessed by a user.

To populate RDP URLs based on the LDAP attribute by using the CLI

At the command prompt, type:

add rdpclientprofile <Name> –rdpUrlLinkAttribute <string>

add rdpclientprofile clientProfileName –rdpUrlLinkAttribute rdpServerAttribute

<!--NeedCopy-->

In the previous example, rdpServerAttribute corresponds to the RDP server details for a given user on the LDAP server.

Note: To fetch the LDAP attribute details from the LDAP server, the LDAP action must be configured with the same string that is configured with pUrlLinkAttribute as follows.

add authentication ldapAction dnpg_ldap -serverIP <IP address>-ldapBase <"domain name"> -ldapBindDn <username> -ldapLoginName sAMAccountName -ldapbindDnpassword <password>

add authentication ldapAction dnpg_ldap -serverIP 10.102.39.101 -ldapBase "dc=dnpg-blr,dc=com" -ldapBindDn sqladmin@dnpg-blr.com -ldapLoginName sAMAccountName -ldapbindDnpassword xxxx

add authentication ldapPolicy dnpg_ldap_pol ns_true dnpg_ldap

bind vpn vs vserver<name> -pol dnpg_ldap_pol

set ldapaction dnpg_ldap -attributes "rdpServerAttribute"

set rdpclientprofile ldap -rdpLinkAttribute rdpServerAttribute
<!--NeedCopy-->

LDAP server configuration

On the LDAP server, perform the following steps:

Navigate to a particular User.
In AD users and computers, click View, and click Detail.
Right-click user name and click Attribute Editor.
Change the required attribute (displayName) value and click OK.

To populate RDP URLs based on the LDAP attribute by using the GUI

Navigate to Citrix Gateway > Policies > RDP.
On the RDP Profiles and Connections page, click the Client Profiles tab and select the client profile where you want to configure the RDP link attribute.
In the Configure RDP Client Profile page, in RDP Link Attribute, enter the LDAP attribute name.

Note: The LDAP attribute value can be a comma separated list.

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Populate RDP URLs based on LDAP attribute

January 8, 2024

Contributed by:

January 8, 2024

Contributed by:

Populate RDP URLs based on LDAP attribute

To populate RDP URLs based on the LDAP attribute by using the CLI

LDAP server configuration

To populate RDP URLs based on the LDAP attribute by using the GUI

In this article