Problem with RD Session Broker, Certificates, and Token Based Routing through an ACE

-

hello,

i have 2 rdp servers in farm using token based routing through cisco ace appliance.

one of rdp servers functioning session broker.

the farm dns name rdsb.domain.com

the rdp servers named rdp1.domain.com , rdp2.domain.com.

 

the issue having when assign certificate both rdp servers fqdn of rdsb.domain.com, rdp connection client machine fails. there not details of failure, no entries in logs of either server, client, nor ace.

if change certificates on rdp servers fqdn individual name (ie rdp1.domain.com has cert rdp1.domain.com) connection works fine, rdp client warns user trying connect rdsb.domain.com , getting certificate fqdn of rdp1.domain.com (or rdp2.domain.com depending on server trying connect to).

 

i've searched high , low information on how these certificates supposed setup...

is configuraiton issue rd session broker, configuration issue rd hosts, or configuraiton issue cisco ace?

 

i want client conect rdsb.domain.com , have work without warning certificate different fqdn.

thank you,

daren

naresh,

 

thank information.

we figured issue out... i'll post happened in case else encounters issue. can affect using load balancer rdp traffic , using session broker.

after investigation cisco ace appliance, found rdp1.domain.com listed being "out of service". means load balancer considered rdp1 down , not try send traffic it.

the rdp client connected rdsb.domain.com (the vip load balancer). load balancer contacted rdp2.domain.com (since rdp1 considered down in eyes of load balancer).

rdp2 contacted session broker on rdp1 find out rdp server in farm should take on new connection.

the session broker said rdp1 take new connection. response packaged token sent load balancer (we using token based routing our rdp farm). load balancer unable route traffic rdp1 because thought rdp1 down... connection failed, no specific error message , no logs on of servers.

after getting ace configuration resolved... , session broker on rdp1 communicating ace properly, issues resolved. able use our certificate rdsb.domain.com without issue , connections being brokered correctly.

this different having rdp session broker fail, or rdp1 fail because had actual failure, none of other rdp servers in farm able contact rdp session broker , work independently... , load balancer route traffic correctly using vip.

 

i hope helps in future, strange issue , being windows engineer, don't have lot of experience cisco ace appliance load balancer.



Windows Server  >  Remote Desktop Services (Terminal Services)



Comments

Post a Comment

Popular posts from this blog

Error: 0x800f080c - Feature name NetFX3 is unknown

-
i trying install .net framework 3.5 on windows server 2012 standard using command below: ps c:\users\administrator> dism.exe /online /enable-feature /featurename:netfx3 /source:f:\sources deployment image servicing , management tool result: version: 6.2.9200.16384 image version: 6.2.9200.16384 error: 0x800f080c feature name netfx3 unknown. a windows feature name not recognized. use /get-features option find name of feature in image , try command again. the dism log file can found @ c:\windows\logs\dism\dism.log option install .net framework not appear in server manager. how can .net framework 3.5 install? seems impossible install .net framework 3.5 have tried suggested solutions dism /online /cleanup-image /restorehealth, without success.  have run get-windowsfeature , .net framework 3.5 not appear: display name                                ...
Read more

Checkedlist box

-
hi all, i tired creating checkedlistbox allow users selecting multiple inputs simultaneously. trying perform on check/check activity starting displaying selected item user. below sample code created. code not working believe have not selected correct onclick activity. great if can suggest me correction. $colourlistbox = new-object system.windows.forms.checkedlistbox $colourlistbox.location = new-object system.drawing.size(1,20) $colourlistbox.size = new-object system.drawing.size(140,50) $colourlistbox.sorted = $true $colourlistbox.backcolor = "lightgray" $colourlistbox.forecolor = "blue" $colourlistbox.checkonclick = $true $colourlistbox.height = 50                                         [void] $colourlistbox.items.add("red")   ...
Read more

schannel

-
que tal. checando nuevamente en mi visor de sueceso e aparece el siguiente error: el certificado recibido del servidor remoto fue emitido por una autoridad certificadora de confianza. debido esto, ninguno de los datos contenidos en el certificado puede ser validado. la solicitud de conexión ssl ha fallado. los datos adjunto contiene el certificado de servidor. tengo un server 2003 alguien me puede ayudar para saber de donde proviene este error. gracias debes describir la situación, acá no podemos adivinar cómo, cuándo, con qué sistema, qué aplicación, cuando haces qué, etc. etc.   guillermo delprato - buenos aires, argentina mvp-mct-mcse-mcsa mcitp: enterprise/server administrator mcts: active directory/network/applications configuration este mensaje se proporciona "como está" sin garantías de ninguna clase. usted asume todos los riesgos. ...
Read more