[SOLVED] Citrix Workspace won't work, while on Debian yes

ironhak · 2026-03-15 13:39:00

I installed icaclient from aur and run the command:

mkdir -p $HOME/.ICAClient/cache
cp /opt/Citrix/ICAClient/config/{All_Regions,Trusted_Region,Unknown_Region,canonicalization,regions}.ini $HOME/.ICAClient/

Then when I try to login using my company email:

This icaclient aur package anyway works good to open .ica files, my company uses a website where I can login and download a .ica file. I've done this for years and it always worked.
But now they are decomissioning that website and we will need to use the Citrix Workspace app.

Can someone please help? I spent one whole day searching on the web without finding anything useful
Thanks a lot

Last edited by ironhak (2026-03-22 18:42:51)

seth · 2026-03-15 13:52:40

https://aur.archlinux.org/packages/icac … ent-754109 ?

ironhak · 2026-03-15 14:05:20

seth wrote:

https://aur.archlinux.org/packages/icac … ent-754109 ?

Thanks, I forgot to mention that I already tried that. It does not work.

seth · 2026-03-15 14:14:53

Check whether the thing posts more useful information to stdout/stderr - otherwise you'll have to wireshark it to see what it tries to contact and then nmap that server.
Apropos server: have you tried to enter that instead of an email address?
Which version of icaclient are/were you running on debian?

ironhak · 2026-03-15 14:29:35

On debian I'm running Version 26.01.0.150. (latest available on Citrix website)

$ ldd /opt/Citrix/ICAClient/selfservice
	linux-vdso.so.1 (0x00007fc787881000)
	libxml2.so.2 => /usr/lib/libxml2.so.2 (0x00007fc7862b2000)
	libpthread.so.0 => /usr/lib/libpthread.so.0 (0x00007fc787845000)
	libX11.so.6 => /usr/lib/libX11.so.6 (0x00007fc786170000)
	libdl.so.2 => /usr/lib/libdl.so.2 (0x00007fc787840000)
	librt.so.1 => /usr/lib/librt.so.1 (0x00007fc78783b000)
	libsoup-2.4.so.1 => /usr/lib/libsoup-2.4.so.1 (0x00007fc7877a1000)
	libXinerama.so.1 => /usr/lib/libXinerama.so.1 (0x00007fc78779a000)
	libuuid.so.1 => /usr/lib/libuuid.so.1 (0x00007fc787790000)
	libpng16.so.16 => /usr/lib/libpng16.so.16 (0x00007fc787755000)
	libgtk-3.so.0 => /usr/lib/libgtk-3.so.0 (0x00007fc785a00000)
	libgdk-3.so.0 => /usr/lib/libgdk-3.so.0 (0x00007fc785914000)
	libcairo.so.2 => /usr/lib/libcairo.so.2 (0x00007fc7857d7000)
	libgio-2.0.so.0 => /usr/lib/libgio-2.0.so.0 (0x00007fc785606000)
	libgobject-2.0.so.0 => /usr/lib/libgobject-2.0.so.0 (0x00007fc786111000)
	libglib-2.0.so.0 => /usr/lib/libglib-2.0.so.0 (0x00007fc7854ae000)
	libwebkit2gtk-4.0.so.37 => /usr/lib/libwebkit2gtk-4.0.so.37 (0x00007fc780000000)
	libstdc++.so.6 => /usr/lib/libstdc++.so.6 (0x00007fc77fc00000)
	libm.so.6 => /usr/lib/libm.so.6 (0x00007fc77fee2000)
	libgcc_s.so.1 => /usr/lib/libgcc_s.so.1 (0x00007fc785481000)
	libc.so.6 => /usr/lib/libc.so.6 (0x00007fc77fa0f000)
	/lib64/ld-linux-x86-64.so.2 => /usr/lib64/ld-linux-x86-64.so.2 (0x00007fc787883000)
	libz.so.1 => /usr/lib/libz.so.1 (0x00007fc787736000)
	liblzma.so.5 => /usr/lib/liblzma.so.5 (0x00007fc78544c000)
	libicuuc.so.78 => /usr/lib/libicuuc.so.78 (0x00007fc77f800000)
	libxcb.so.1 => /usr/lib/libxcb.so.1 (0x00007fc785421000)
	libgmodule-2.0.so.0 => /usr/lib/libgmodule-2.0.so.0 (0x00007fc78610a000)
	libxml2.so.16 => /usr/lib/libxml2.so.16 (0x00007fc77f6cb000)
	libsqlite3.so.0 => /usr/lib/libsqlite3.so.0 (0x00007fc77f553000)
	libpsl.so.5 => /usr/lib/libpsl.so.5 (0x00007fc77fece000)
	libbrotlidec.so.1 => /usr/lib/libbrotlidec.so.1 (0x00007fc77febf000)
	libgssapi_krb5.so.2 => /usr/lib/libgssapi_krb5.so.2 (0x00007fc77f500000)
	libXext.so.6 => /usr/lib/libXext.so.6 (0x00007fc77feab000)
	libpangocairo-1.0.so.0 => /usr/lib/libpangocairo-1.0.so.0 (0x00007fc77fe9b000)
	libpango-1.0.so.0 => /usr/lib/libpango-1.0.so.0 (0x00007fc77f495000)
	libharfbuzz.so.0 => /usr/lib/libharfbuzz.so.0 (0x00007fc77f369000)
	libpangoft2-1.0.so.0 => /usr/lib/libpangoft2-1.0.so.0 (0x00007fc77f34b000)
	libfontconfig.so.1 => /usr/lib/libfontconfig.so.1 (0x00007fc77f2fa000)
	libfribidi.so.0 => /usr/lib/libfribidi.so.0 (0x00007fc77f2da000)
	libcairo-gobject.so.2 => /usr/lib/libcairo-gobject.so.2 (0x00007fc77f2d1000)
	libgdk_pixbuf-2.0.so.0 => /usr/lib/libgdk_pixbuf-2.0.so.0 (0x00007fc77f299000)
	libatk-1.0.so.0 => /usr/lib/libatk-1.0.so.0 (0x00007fc77f273000)
	libepoxy.so.0 => /usr/lib/libepoxy.so.0 (0x00007fc77f166000)
	libXi.so.6 => /usr/lib/libXi.so.6 (0x00007fc77f153000)
	libatk-bridge-2.0.so.0 => /usr/lib/libatk-bridge-2.0.so.0 (0x00007fc77f118000)
	libcloudproviders.so.0 => /usr/lib/libcloudproviders.so.0 (0x00007fc77f100000)
	libtinysparql-3.0.so.0 => /usr/lib/libtinysparql-3.0.so.0 (0x00007fc77f02e000)
	libXfixes.so.3 => /usr/lib/libXfixes.so.3 (0x00007fc77f026000)
	libxkbcommon.so.0 => /usr/lib/libxkbcommon.so.0 (0x00007fc77efc9000)
	libwayland-client.so.0 => /usr/lib/libwayland-client.so.0 (0x00007fc77efb9000)
	libwayland-cursor.so.0 => /usr/lib/libwayland-cursor.so.0 (0x00007fc77efaf000)
	libwayland-egl.so.1 => /usr/lib/libwayland-egl.so.1 (0x00007fc77fe96000)
	libXcursor.so.1 => /usr/lib/libXcursor.so.1 (0x00007fc77efa2000)
	libXdamage.so.1 => /usr/lib/libXdamage.so.1 (0x00007fc77ef9d000)
	libXcomposite.so.1 => /usr/lib/libXcomposite.so.1 (0x00007fc77ef98000)
	libXrandr.so.2 => /usr/lib/libXrandr.so.2 (0x00007fc77ef8b000)
	libfreetype.so.6 => /usr/lib/libfreetype.so.6 (0x00007fc77eebb000)
	libXrender.so.1 => /usr/lib/libXrender.so.1 (0x00007fc77eeaf000)
	libxcb-render.so.0 => /usr/lib/libxcb-render.so.0 (0x00007fc77eea0000)
	libxcb-shm.so.0 => /usr/lib/libxcb-shm.so.0 (0x00007fc77ee9b000)
	libpixman-1.so.0 => /usr/lib/libpixman-1.so.0 (0x00007fc77edec000)
	libmount.so.1 => /usr/lib/libmount.so.1 (0x00007fc77ed96000)
	libffi.so.8 => /usr/lib/libffi.so.8 (0x00007fc77ed8a000)
	libpcre2-8.so.0 => /usr/lib/libpcre2-8.so.0 (0x00007fc77ecdc000)
	libwebpmux.so.3 => /usr/lib/libwebpmux.so.3 (0x00007fc77ecd0000)
	libexpat.so.1 => /usr/lib/libexpat.so.1 (0x00007fc77eca5000)
	libjavascriptcoregtk-4.0.so.18 => /usr/lib/libjavascriptcoregtk-4.0.so.18 (0x00007fc77c800000)
	libicui18n.so.78 => /usr/lib/libicui18n.so.78 (0x00007fc77c400000)
	libsystemd.so.0 => /usr/lib/libsystemd.so.0 (0x00007fc77c2d9000)
	libjpeg.so.8 => /usr/lib/libjpeg.so.8 (0x00007fc77ec03000)
	libxslt.so.1 => /usr/lib/libxslt.so.1 (0x00007fc77ebc6000)
	liblcms2.so.2 => /usr/lib/liblcms2.so.2 (0x00007fc77c798000)
	libwoff2dec.so.1.0.2 => /usr/lib/libwoff2dec.so.1.0.2 (0x00007fc77ebb9000)
	libgcrypt.so.20 => /usr/lib/libgcrypt.so.20 (0x00007fc77c12f000)
	libgstallocators-1.0.so.0 => /usr/lib/libgstallocators-1.0.so.0 (0x00007fc77ebaf000)
	libgstapp-1.0.so.0 => /usr/lib/libgstapp-1.0.so.0 (0x00007fc77c116000)
	libgstbase-1.0.so.0 => /usr/lib/libgstbase-1.0.so.0 (0x00007fc77c092000)
	libgstreamer-1.0.so.0 => /usr/lib/libgstreamer-1.0.so.0 (0x00007fc77bf2e000)
	libgstpbutils-1.0.so.0 => /usr/lib/libgstpbutils-1.0.so.0 (0x00007fc77beeb000)
	libgstaudio-1.0.so.0 => /usr/lib/libgstaudio-1.0.so.0 (0x00007fc77be65000)
	libgsttag-1.0.so.0 => /usr/lib/libgsttag-1.0.so.0 (0x00007fc77be28000)
	libgstvideo-1.0.so.0 => /usr/lib/libgstvideo-1.0.so.0 (0x00007fc77bd4e000)
	libgstgl-1.0.so.0 => /usr/lib/libgstgl-1.0.so.0 (0x00007fc77bcbb000)
	libgstfft-1.0.so.0 => /usr/lib/libgstfft-1.0.so.0 (0x00007fc77bcb0000)
	libwebpdemux.so.2 => /usr/lib/libwebpdemux.so.2 (0x00007fc77eba6000)
	libwebp.so.7 => /usr/lib/libwebp.so.7 (0x00007fc77bc29000)
	libjxl.so.0.11 => /usr/lib/libjxl.so.0.11 (0x00007fc77b800000)
	libavif.so.16 => /usr/lib/libavif.so.16 (0x00007fc77b7ba000)
	libharfbuzz-icu.so.0 => /usr/lib/libharfbuzz-icu.so.0 (0x00007fc77c793000)
	libenchant-2.so.2 => /usr/lib/libenchant-2.so.2 (0x00007fc77b7a9000)
	libsecret-1.so.0 => /usr/lib/libsecret-1.so.0 (0x00007fc77b74b000)
	libtasn1.so.6 => /usr/lib/libtasn1.so.6 (0x00007fc77b735000)
	libhyphen.so.0 => /usr/lib/libhyphen.so.0 (0x00007fc77bc22000)
	libwayland-server.so.0 => /usr/lib/libwayland-server.so.0 (0x00007fc77b720000)
	libmanette-0.2.so.0 => /usr/lib/libmanette-0.2.so.0 (0x00007fc77b6ce000)
	libseccomp.so.2 => /usr/lib/libseccomp.so.2 (0x00007fc77b6a1000)
	libgbm.so.1 => /usr/lib/libgbm.so.1 (0x00007fc77bc1c000)
	libdrm.so.2 => /usr/lib/libdrm.so.2 (0x00007fc77b68a000)
	libicudata.so.78 => /usr/lib/libicudata.so.78 (0x00007fc779600000)
	libXau.so.6 => /usr/lib/libXau.so.6 (0x00007fc77b685000)
	libXdmcp.so.6 => /usr/lib/libXdmcp.so.6 (0x00007fc77b67d000)
	libunistring.so.5 => /usr/lib/libunistring.so.5 (0x00007fc779419000)
	libidn2.so.0 => /usr/lib/libidn2.so.0 (0x00007fc77b65b000)
	libbrotlicommon.so.1 => /usr/lib/libbrotlicommon.so.1 (0x00007fc77b638000)
	libkrb5.so.3 => /usr/lib/libkrb5.so.3 (0x00007fc779353000)
	libk5crypto.so.3 => /usr/lib/libk5crypto.so.3 (0x00007fc77b609000)
	libcom_err.so.2 => /usr/lib/libcom_err.so.2 (0x00007fc77b603000)
	libkrb5support.so.0 => /usr/lib/libkrb5support.so.0 (0x00007fc77b5f5000)
	libkeyutils.so.1 => /usr/lib/libkeyutils.so.1 (0x00007fc77b5ee000)
	libresolv.so.2 => /usr/lib/libresolv.so.2 (0x00007fc77b5dc000)
	libthai.so.0 => /usr/lib/libthai.so.0 (0x00007fc77b5cf000)
	libgraphite2.so.3 => /usr/lib/libgraphite2.so.3 (0x00007fc77b5ac000)
	libglycin-2.so.0 => /usr/lib/libglycin-2.so.0 (0x00007fc778e00000)
	libatspi.so.0 => /usr/lib/libatspi.so.0 (0x00007fc77931a000)
	libdbus-1.so.3 => /usr/lib/libdbus-1.so.3 (0x00007fc7792c7000)
	libjson-glib-1.0.so.0 => /usr/lib/libjson-glib-1.0.so.0 (0x00007fc77929d000)
	libbz2.so.1.0 => /usr/lib/libbz2.so.1.0 (0x00007fc77b597000)
	libblkid.so.1 => /usr/lib/libblkid.so.1 (0x00007fc779263000)
	libatomic.so.1 => /usr/lib/libatomic.so.1 (0x00007fc779258000)
	libwoff2common.so.1.0.2 => /usr/lib/libwoff2common.so.1.0.2 (0x00007fc779253000)
	libgpg-error.so.0 => /usr/lib/libgpg-error.so.0 (0x00007fc779227000)
	libunwind.so.8 => /usr/lib/libunwind.so.8 (0x00007fc77920c000)
	libdw.so.1 => /usr/lib/libdw.so.1 (0x00007fc778d63000)
	liborc-0.4.so.0 => /usr/lib/liborc-0.4.so.0 (0x00007fc778c67000)
	libEGL.so.1 => /usr/lib/libEGL.so.1 (0x00007fc778c55000)
	libGLX.so.0 => /usr/lib/libGLX.so.0 (0x00007fc778c24000)
	libX11-xcb.so.1 => /usr/lib/libX11-xcb.so.1 (0x00007fc779205000)
	libgudev-1.0.so.0 => /usr/lib/libgudev-1.0.so.0 (0x00007fc778c18000)
	libsharpyuv.so.0 => /usr/lib/libsharpyuv.so.0 (0x00007fc778c0f000)
	libjxl_cms.so.0.11 => /usr/lib/libjxl_cms.so.0.11 (0x00007fc778be7000)
	libhwy.so.1 => /usr/lib/libhwy.so.1 (0x00007fc778bd8000)
	libbrotlienc.so.1 => /usr/lib/libbrotlienc.so.1 (0x00007fc778b18000)
	libyuv.so => /usr/lib/libyuv.so (0x00007fc778a76000)
	libdav1d.so.7 => /usr/lib/libdav1d.so.7 (0x00007fc778892000)
	librav1e.so.0.8 => /usr/lib/librav1e.so.0.8 (0x00007fc778400000)
	libSvtAv1Enc.so.4 => /usr/lib/libSvtAv1Enc.so.4 (0x00007fc76fc00000)
	libaom.so.3 => /usr/lib/libaom.so.3 (0x00007fc76f200000)
	libtss2-esys.so.0 => /usr/lib/libtss2-esys.so.0 (0x00007fc778807000)
	libtss2-mu.so.0 => /usr/lib/libtss2-mu.so.0 (0x00007fc7787c2000)
	libtss2-rc.so.0 => /usr/lib/libtss2-rc.so.0 (0x00007fc7787b9000)
	libtss2-tctildr.so.0 => /usr/lib/libtss2-tctildr.so.0 (0x00007fc7787af000)
	libhidapi-hidraw.so.0 => /usr/lib/libhidapi-hidraw.so.0 (0x00007fc7787a7000)
	libevdev.so.2 => /usr/lib/libevdev.so.2 (0x00007fc778792000)
	libdatrie.so.1 => /usr/lib/libdatrie.so.1 (0x00007fc778789000)
	libelf.so.1 => /usr/lib/libelf.so.1 (0x00007fc77876b000)
	libzstd.so.1 => /usr/lib/libzstd.so.1 (0x00007fc77831a000)
	libGLdispatch.so.0 => /usr/lib/libGLdispatch.so.0 (0x00007fc7782a1000)
	libudev.so.1 => /usr/lib/libudev.so.1 (0x00007fc76fbb7000)
	libcrypto.so.3 => /usr/lib/libcrypto.so.3 (0x00007fc76ec00000)
	libtss2-sys.so.1 => /usr/lib/libtss2-sys.so.1 (0x00007fc778748000)

Regarding strace I ran

strace -f -o citrix.log /opt/Citrix/ICAClient/selfservice

but the output is REALLY big and can't post it here, how can I share it?

As you suggested I tried inserting the server address, I didn't knew it so I took it from the Debian machine:

And I can successfully login, but the problem now is that it stays stuck here when I try to log into my remote machine...

As mentioned before, launching from .ica downlaoded from my company website (to be decomissioned) will connect successfully.

seth · 2026-03-15 15:11:30

https://wiki.archlinux.org/title/Wireshark - not strace.

As mentioned before, launching from .ica downlaoded from my company website (to be decomissioned) will connect successfully.

I don't quite understand the situation here, the .ica is a config file for the icaclient, it has all the correct connection data in it and apparently works, why can't you use it? How is it "decomissioned"? It's an ini style config.
How did you connect the debian client?
Are the debian and arch systems in the same network segment? (Same WAN/LAN IP range)

ironhak · 2026-03-15 15:35:56

seth wrote:

I don't quite understand the situation here, the .ica is a config file for the icaclient, it has all the correct connection data in it and apparently works, why can't you use it? How is it "decomissioned"? It's an ini style config.

I have a company website where I login and it let's me download a .ica file. When I click that file then Citrix launches directly on the remote machine. Every time I want to launch the remote machine I have to go to company website to get that .ica file. Nothing gets saved in Citrix Workspace. They plan to decomission that website and use only Citrix Workspace, so I won't be able to use this method anymore, hence why I'm trying to login into Citrix Workspace.

seth wrote:

How did you connect the debian client?
Are the debian and arch systems in the same network segment? (Same WAN/LAN IP range)

I just inserted my company email and from there a window appeared that lets me login into Citrix Workspace trough SSO. Yes the debian machine is just a VM inside my main Arch machine.
As seen before, on Arch using the company mail will throw error, whlist using the server address (like shown on prev. post) will get me to the SSO portal, where I can login to Citrix Workspace, but then I can't connect to the machine (as seen prev. post)

seth wrote:

https://wiki.archlinux.org/title/Wireshark - not strace.

I downlaoded it, what command should I run?

seth · 2026-03-15 16:23:58

Is the ica temporary or static (ie. do you get the same file every time or is it valid for only one login)?

I downlaoded it, what command should I run?

Nothing for the moment.

Yes the debian machine is just a VM inside my main Arch machine

So it's not the network stack (assuming you're using the hosts connection for a virtual device and not forwarding the NIC hardware)
Might be a certificate/TLS issue,

seth wrote:

Check whether the thing posts more useful information to stdout/stderr

what just means to run selfservice and icaclient from an interactive shell and see whether they print anything interesting.

Do you know whether you need https://wiki.archlinux.org/title/Citrix … ysis_(EPA) ?

cryptearth · 2026-03-15 17:08:18

@Seth
the .ica file is usually generated on the fly when the user selects the desktop or application to launch/connect to with rather short timeout (depends on how strict the security is set on the server)

the webportal is merely a landing page the user logs in into with thier regular domain credentials (and maybe a 2fa) just to get a short lived .ica link which is then used by the citrix viewer to start the connection

there's also another way to set this up: a somewhat local server-/service browser like known from multiplayer games the user can add thier link to and use it as a launch pad rather then the web page

from what i get is that OPs company wants to shutdown the web based landing page and solely rely on citrix own connection manager

this can be done in two ways:
- a sso registered with citrix (kinda like domain credentials can often be used to login into microsoft for shared services like teams, sharepoint, exchange)
- on-premise, then you need an address set by the IT

@OP
I just tested with my remote access and for me it worked by entering the very same webpage i enter in my browser - i then got asked for user, password and 2fa and was able to setup a connection in the workspace preferences

if this doesn't work for you may ask your IT guys if they can be any help - as the host shouldn't matter (and you have it working on debian in a vm)

ironhak · 2026-03-15 18:45:24

I don't need EPA, I mean on debian I installed from Ctrix website and just login with no extra steps.

The explaination from cryptearth on how the website (to be decomissioned) works is spot on, thanks.

On Debian I can login just with my email I.e. I insert my work email -> i get carried to the SSO login -> citrix workspace is active and I can login to my remote machine.
On arch I used the website address (as shown on prev. post) -> i get carried to the SSO login -> citrix workspace is active but I can't login to remote machine (see prev. post) because it hangs on loading.

On arch using the one-time .ica file connects me without problems.

So the problem now isn't anymore that I can't login (even if it would be nice to be able to login with my email rather than a website address), the problem is figuring out how to make the connection to the remote machine work.

I appreciate your help a lot guys... Really hope to get this up and running... I really don't want to switch to debian just because of this issue...

seth · 2026-03-16 14:45:57

seth wrote:

Might be a certificate/TLS issue,
seth wrote:
Check whether the thing posts more useful information to stdout/stderr
what just means to run selfservice and icaclient from an interactive shell and see whether they print anything interesting.

ironhak · 2026-03-16 23:00:06

Well.. a day has passed an now, for wathever reason, Citrix Workspace does not work anymore. I jest get a white window

No login prompt or anything... If I launch from terminal no messages appears

ironhak · 2026-03-17 00:15:14

A bit more details...
So, I made a new VM with endeavorOS with KDE Plasma Wayalnd (same as my vanilla Arch main machine). I isntalled icaclient from aur, and I could login with just my work email!!! Clearly there is something broken on my main Arch machine that prevents me from loggin in using my email.

Then on the endeavorOS VM I encountered the same problem as before (i.e. stuck on "Connectin..."). I found the solution was to install gdk-pixbuf2-noglycin from AUR, and then everything works smoothly!!!

Now the only issue is figuring out why I can't login using my mail from my main Arch machine

seth · 2026-03-17 08:10:50

You might need more of the noglycin stuff, particularly librsvg: https://aur.archlinux.org/packages?O=0&K=noglycin
If you install the noglycin packages on arch, can you login using the url/domain as before?

Clearly there is something broken on my main Arch machine that prevents me from loggin in using my email.

Firewall?

ironhak · 2026-03-17 09:31:47

seth wrote:

Firewall?

On EndeavorOS I see there is some kind of firewall pre-defined, but on my Arch machine I did not ever touched firewall at all

ironhak · 2026-03-17 09:34:34

Anyway it's quite strange that in order to launch remote desktop from Citrix Workspace I need noglycin, while launching using the .ica file works well even without noglycin...

seth · 2026-03-18 16:00:55

Does the noglycin version have any impact on arch or only on EOS?

seth wrote:

If you install the noglycin packages on arch, can you login using the url/domain as before?

It's related to gdk-pixbuf2 and image loading and will typically fail for any kind of hardening because it drags https://wiki.archlinux.org/title/Bubblewrap (which requires extensive permissions) into every process.
The big one is unprivileged_userns_clone but it's also incompatible w/ things like firejail, apparmor or client-side sandboxes (like in browsers)

cryptearth · 2026-03-18 16:50:15

just checked - for pixbuf got pulled in by steam and lutris - but it's not a dependency of icaclient
so could be the issue that the aur pkgbuild maybe missing a depency?

ironhak · 2026-03-18 17:03:52

Using gdk-pixbuf2-noglycin still can't login using my email.
I can't use the website address because it can change randomly and email is the only reliable way. I don't understand why email works on every system I tried but not on my Arch.

seth · 2026-03-18 20:51:11

@cryptearth, https://archlinux.org/packages/extra/x8 … k-pixbuf2/ is a dependency for gtk*

@ironhak

still can't login using my email

That wasn't the question.
I wanted to know whether it had any impact on the situation of #5

And I can successfully login, but the problem now is that it stays stuck here when I try to log into my remote machine...

or is completely irrelevant on arch.

I don't understand why email works on every system I tried but not on my Arch.

If the citrix client offers no traffic debug you'll have to wireshark it - ideally when entering the mail on a working system as well, so we can see what it's supposed to talk to.
Wireshark comes w/ a GUI, you click the record button and try to connect to the citrix server.
nb. that the traffic data will contain hints about the involved servers, certificates, possibly your mail address.

My money is on either ipv4 ./. ipv6 or some SSL issue - unfortunately the error dialog is utterly use- and meaningless.

twelveeighty · 2026-03-19 15:00:49

Jumping in late into this - sorry if this was attempted already, I scanned the posts but couldn't find anything about log collection for Citrix - does the following still work in Citrix to enable debug logging: https://docs.citrix.com/en-us/citrix-wo … ction.html?

ironhak · 2026-03-19 22:29:24

twelveeighty wrote:

Jumping in late into this - sorry if this was attempted already, I scanned the posts but couldn't find anything about log collection for Citrix - does the following still work in Citrix to enable debug logging: https://docs.citrix.com/en-us/citrix-wo … ction.html?

Strange enough... I click on collect logs, try to login using my mail, and when I export them it shows only logs from 3 days ago.

I tried uninstalling, deleting the .ICAclient folder, cache, tmp and everything but still when I reinstall and launch it still does this.

(will try wiresharks in the next few days and report here)

Edit: by the way this is what happens when I launch citrix from terminal and try to login using mail

$    /opt/Citrix/ICAClient/selfservice 2>&1 | tee /tmp/citrix-debug.log
Failed to open /etc/systeminfo file
Failed to open /etc/tzagent/info file
Failed to open /setup/terminal.ini
double free or corruption (!prev)
double free or corruption (!prev)

(Wfica:453776): Gdk-CRITICAL **: 23:39:18.238: gdk_x11_window_get_xid: assertion 'GDK_IS_X11_WINDOW (window)' failed

Last edited by ironhak (2026-03-19 22:40:33)

seth · 2026-03-20 09:46:34

Errr… does it work in an X11 session?

ironhak · 2026-03-20 11:08:11

seth wrote:

Errr… does it work in an X11 session?

Yes I already tried running in a x11 session and nothing different. Also please not the EndeavorOS test was done on KDE Plasma Wayland (same as my main Arch machine)

seth · 2026-03-20 15:03:52

Do you get

(Wfica:453776): Gdk-CRITICAL **: 23:39:18.238: gdk_x11_window_get_xid: assertion 'GDK_IS_X11_WINDOW (window)' failed

on EOS as well?

Then we need to look into

it shows only logs from 3 days ago

Why are you getting logs from back then at all?

Click wfica and change the logging level for winstation driver to Verbose.

Are there any stale wfica processes?
The critical assertion there usually means that the process crashes, what if you

export GDK_BACKEND=x11; /opt/Citrix/ICAClient/selfservice

?
And what do the logs from three days ago look like?

Arch Linux

#1 2026-03-15 13:39:00

[SOLVED] Citrix Workspace won't work, while on Debian yes

#2 2026-03-15 13:52:40

Re: [SOLVED] Citrix Workspace won't work, while on Debian yes

#3 2026-03-15 14:05:20

Re: [SOLVED] Citrix Workspace won't work, while on Debian yes

#4 2026-03-15 14:14:53

Re: [SOLVED] Citrix Workspace won't work, while on Debian yes

#5 2026-03-15 14:29:35

Re: [SOLVED] Citrix Workspace won't work, while on Debian yes

#6 2026-03-15 15:11:30

Re: [SOLVED] Citrix Workspace won't work, while on Debian yes

#7 2026-03-15 15:35:56

Re: [SOLVED] Citrix Workspace won't work, while on Debian yes

#8 2026-03-15 16:23:58

Re: [SOLVED] Citrix Workspace won't work, while on Debian yes

#9 2026-03-15 17:08:18

Re: [SOLVED] Citrix Workspace won't work, while on Debian yes

#10 2026-03-15 18:45:24

Re: [SOLVED] Citrix Workspace won't work, while on Debian yes

#11 2026-03-16 14:45:57

Re: [SOLVED] Citrix Workspace won't work, while on Debian yes

#12 2026-03-16 23:00:06

Re: [SOLVED] Citrix Workspace won't work, while on Debian yes

#13 2026-03-17 00:15:14

Re: [SOLVED] Citrix Workspace won't work, while on Debian yes

#14 2026-03-17 08:10:50

Re: [SOLVED] Citrix Workspace won't work, while on Debian yes

#15 2026-03-17 09:31:47

Re: [SOLVED] Citrix Workspace won't work, while on Debian yes

#16 2026-03-17 09:34:34

Re: [SOLVED] Citrix Workspace won't work, while on Debian yes

#17 2026-03-18 16:00:55

Re: [SOLVED] Citrix Workspace won't work, while on Debian yes

#18 2026-03-18 16:50:15

Re: [SOLVED] Citrix Workspace won't work, while on Debian yes

#19 2026-03-18 17:03:52

Re: [SOLVED] Citrix Workspace won't work, while on Debian yes

#20 2026-03-18 20:51:11

Re: [SOLVED] Citrix Workspace won't work, while on Debian yes

#21 2026-03-19 15:00:49

Re: [SOLVED] Citrix Workspace won't work, while on Debian yes

#22 2026-03-19 22:29:24

Re: [SOLVED] Citrix Workspace won't work, while on Debian yes

#23 2026-03-20 09:46:34

Re: [SOLVED] Citrix Workspace won't work, while on Debian yes

#24 2026-03-20 11:08:11

Re: [SOLVED] Citrix Workspace won't work, while on Debian yes

#25 2026-03-20 15:03:52

Re: [SOLVED] Citrix Workspace won't work, while on Debian yes

Board footer