Transcript 5_CCAT- Troubleshooting Training XenDesktop v1.0x

CCAT Troubleshooting Training –
XenDesktop
April 2012
Citrix Consulting Architecture Team
Agenda
• XenDesktop 5 Architecture Overview (Logging)
• XenDesktop Common Issues – Registration, Brokering
• Key Takeaways
Brief Architecture Overview
and Logging
Services and Roles
Service Name
Description
AD Identity Service
Manages AD Computer Accounts
Broker Service
Brokers connections
Configuration Service
Stores configuration information
Host Service
Manages hosts and hypervisor connections
Machine Creation Service
Creates new virtual machines
Machine Identity Service
Manages storage of virtual machines
Citrix Confidential - Do Not Distribute
High-level Service-Oriented Architecture
Desktop Studio
Desktop Director
WinRM
(WMI)
WCF
PowerShell
Desktop Delivery Controller
Machine
Creation
Service
AD Identity
Service
Host Service
Machine
Identity
Service
Broker
Service
SQL
Server
Citrix Confidential - Do Not Distribute
Virtual Desktop
Central Config
Service
Install Logs
• Available at %temp%\Citrix\XenDesktop Installer
• “XenDesktop Installation.log” is the main log file of all components
• Individual MSI logs for each install are located in the “MSI Log
Files” directory
• Logs are NOT deleted after install unlike previous XenDesktop
versions
• Search for “Return Value 3” in the MSI logs or use the features of
WILogUtil to analyze
Citrix Confidential - Do Not Distribute
Desktop Studio Install Log
Located at
%Systemdrive%\Log\
console.txt
Useful for debugging
any console issues
and a Quick Deploy
environment
specifically
Citrix Confidential - Do Not Distribute
VDA Log
Located at Local
Settings\Temp\Citrix\
XenDesktop Installer
Useful for debugging
VDA install issues
Service Configuration Logging
• BrokerService.exe.Config - %ProgramFiles%\Citrix\Broker\Service
• Citrix.MachineCreation.SdkWcfEnpoint.exe.Config %ProgramFiles%\Citrix\MachineCreation\Service
• Citrix.MachineIdentity.SdkWcfEnpoint.exe.Config %ProgramFiles%\Citrix\MachineIdentity\Service
• Citrix.Host.SdkWcfEnpoint.exe.Config - %ProgramFiles%\Citrix\Host\Service
• Citrix.Configuration.SdkWcfEndpoint.exe.Config %ProgramFiles%\Citrix\Configuration\Service
• Citrix.ADIdentity.SdkWcfEnpoint.exe.Config %ProgramFiles%\Citrix\ADIdentity\Service
• WorkstationAgent.exe.config - %ProgramFiles%\Citrix\Virtual Desktop Agent
Citrix Confidential - Do Not Distribute
XenDesktop 5.x Communication Ports
Default Communication Ports:
• VDA = Port 80
• XML = Port 80
• WCF = Port 80
For additional Information - CTX128909
Database Activity
• Session state and registration info held in database
• One transaction per desktop for health ‘ping’
• Default period 30 seconds per desktop*
• Small number of transactions per desktop launch
• Automatic database clean-up (purge stale records)
• Broker health heartbeat
Citrix Confidential - Do Not Distribute
XenDesktop Services – Heavily Dependent on SQL
Database Role
Corresponding XenDesktop Service
ADIdentitySchema_ROLE
AD Identity Service
chr_Broker
chr_Controller
Broker Service
ConfigurationSchema_ROLE
Central Configuration Service
DesktopUpdateManagerSchema_ROLE
Desktop Update Manager Service
HostingUnitServiceSchema_ROLE
Hosting Management Service
MachinePersonalitySchema_ROLE
Machine Personality Service
Database Common Issues
• Permissions for the DDC computer accounts
(DOMAIN\COMPUTERNAME$)
• Need to run SQL script if install user is not SQL admin
• SQL transaction logs get large, need flushed (CTX126916)
Citrix Confidential - Do Not Distribute
Powershell is your Friend
Powershell commands in Desktop Studio are useful
Don’t trust it completely (it hides intermediate steps)
Powershell SDK – Command commands
•
Get-BrokerDesktop
•
Get-BrokerCatalog
•
Get-BrokerMachine
•
Get-BrokerHypervisorConnection
•
Get-BrokerDesktopGroup
•
Get-BrokerController
•
Get-BrokerSite
Common Issues
Licensing Error
Error: Can’t Find Valid License
1. Check if the installation was upgraded from XenDesktop 5
2. Database schema needs to be updated (CTX130555)
Error: Can't Get License Info (CTX129718)
1. The License Configuration Service is not running.
2. Administrator who is using Desktop Studio does not have
permission to access the License Configuration Service.
Troubleshooting XenDesktop 5 (VDA Registration)
The power state of the vda is updated in the database. The following possible
power states for the VDA are defined:
0 => Unmanaged
1 => Unknown
2 => Unavailable
3 => Off
4 => On
5 => Suspended
6 => Turning On
7 => Turning Off
8 => Suspending
9 => Resuming
XenDesktop 5 (VDA Registration Workflow)
• The Broker receives a call from the VDA on its IRegistrar WCF
service
• The Broker now has the SID for the VDA and uses it to form a string
to identify the worker (VDA)
• The Controller checks to see if the VDA machine is a valid Active Directory object
• The Broker checks to see if it can communicate with the VDA
successfully
XenDesktop 5 (VDA Registration Workflow)
• Let’s add some of the common things that cause registration to fail
•
DNS, Kerberos, Firewalls, Access this computer from network permission, etc…
Troubleshooting XenDesktop 5 (Brokering)
• The Broker receives a request from Web Interface (wpnbr.dll) XML
service & users credentials are checked for validity
• Once the users credentials have been validated the XML service
(WPNBR.dll) receives a “RequestAppData‟ enumeration request
from Web Interface
• The credentials are processed and the client IP address is obtained
• A call is made into the database via the Broker DAL to do the
enumeration. One resource was enumerated for the user
Troubleshooting XenDesktop 5 (Brokering)
• The results of the enumeration are sent back to Web Interface via a
ResponseAppData message
• User clicks on appropriate desktop & Broker begins to prepare the VDA for
session launch
• The database selects a specific VDA (worker) for the launch from the Desktop
Group
• Broker checks to see if VDA status needs to be updated and checks license
status
• VDA Launch
• A lot of bookkeeping routines happen in the background. (See Notes for the
reference internal KB article)
XenDesktop 5 – Brokering Sessions (In Depth View)
XenDesktop 5 – Services (In Depth View)
MCS uses:
• Machine Creation Service – This service is the coordinator for all
machine provisioning activities, and makes direct use of the AD
Identity service and Machine Identity service to perform the
operations required.
• AD Identity Service – This service is responsible for the
maintenance of AD computer accounts
• Machine Identity Service – This service is responsible for the
management of the virtual machine disk images.
XenDesktop 5 – Services (In Depth View)
XenDesktop 5 – Services
If you create the following catalogs, which services are used?
• Physical
• Existing
• Streamed (PVS)
XenDesktop 5 – vCenter Issues
• SSL Certificate - CTX130481
• vCenter permissions - CTX130481
Key Takeaways
Key Takeaways
• Understand the different Services and their purpose
• Understand the workflows for VDA registration, brokering
• Review the reference internal KB for other workflows