Solution: Security Violation

You are in luck - we just experienced and solved this exact problem!

The problem is Citrix XP has Local Time Zone Support enabled by default (a
Farm property). This needs to be disabled so all users (remote, especially)
use the terminal servers' date/time stamp for all file access.

This is not a typical license issue where you need to re-license the
Deployment server, fat client or terminal server.

The reason for the license warning message appearing is...
The JDE license checking algorithm apparently compares the date of the user
logging on with the date on the local machine. If there is a discrepancy,
the default behavior is require a new license authorization.

Of course, none of this shows up in a detailed jdedebug log.

Send me a note if you want more info.

Tony Nelipovich

Tony, this sounds like a problem we have had twice since November. Would you be so kind as to post more detail on the List so we can all benefit from this?

Sam, Marty, Tony, I've been reviewing your stated problem and fix. It sounds like what I've been experiencing, but it has only happened twice since we went live with Citrix XP in November 2002. We normally access JDE only during the normal 8-5 local business hours in any given time zone. Do any of you have more than an 8 hour operation at any of your locations? The only scenario I can envision where this fix would apply is perhaps an Asian user accesses JDE after midnight their time. The European users would have already logged in, but would have gotten security checked with a different date then the Asian,which would setup this clock snaffu.

I am assuming the solution is same as Marty's. Thanks a lot

Charles -

The problem we experienced was directly related to a new feature in Citrix
XP - the Local Time Zone Support for clients.

Citrix Metaframe 1.8 did not have this feature. I have not used NFuse, so
Local Time Zone Support may be a feature of that product. If it is not a
feature, I would say your problem is not exactly the same as the one I
described.

If your situation is different, I recommend logging a call with JDE and go
through the verbal jousting to speak to one of the application developers.
There are folks at JDE that know / understand the algorithm / process for
confirming JDE licensing when an user logs into JDE. The jdedebug log
provided no insights for me - nothing was in there pertinent to our problem.

Tony

We have users in Asia, US and other assorted locations. The upshot is we
have a 24 hour operation six days a week.

Asia users experienced the bulk of the license warning messages because they
frequently were a day ahead of the local date on the terminal server (in
US).

Certain parts of Asia do not observe Daylight savings time. That may
account for why you only saw this problem a couple of times.

For instance, in this month of FEB, Thailand 0800 tomorrow is California
1700 today.
After we spring forward, Thailand 0800 tomorrow will be California 1800
today.

Tony

Re: RE: Solution: Security Violation

Thanks, Tony. I should have specified that NFuse is the web client for Citrix XP (and 1.8). That way we don't have to install and configure Program Neighborhood on each PC, just IE. That said, I think the problem that has been described here is the one that I am having. I'll be exploring the situation with our Citrix Admins now that I have a potential solution.

We implemented this solution at the policy level for each user from Japan but did not work. I could not convince my citrix administrator to do this at the farm level because he is concerned that other applications on the farm may be affected. Where did you apply your setting at the farm level or at the policy?

Thanks

Smarchon

We have implemented this at the farm level.

Regards
Marty