Sun Logo


Sun Ray Server Software 4.1 Administrator’s Guide for Solaris

for the Solaristrademark Operating System

820-3768



Contents

Figures

Tables

Preface

1. Sun Ray System Overview

Computing Model

The Sun Ray System

Sun Ray DTU

Multihead Displays

Firmware Module

Sun Ray Server Software

Authentication Manager

Sessions and Services

Session Manager

Xserver

Multimedia Support

Sun Management Center

CLI and Admin GUI

Data Store

Kiosk (Controlled Access) Mode

Network Components

Physical Connections

Deployment Examples

Small Deployments

Medium to Large Deployments

Failover Group Scenario

Regional Hotdesking

Security Considerations

2. Command-Line Interface

Supported Commands

procedure iconsmall spaceTo Stop Sun Ray Services

procedure iconsmall spaceTo Start Sun Ray Services

Session Redirection

procedure iconsmall spaceTo Redirect to a Different Server

procedure iconsmall spaceTo Redirect a DTU Manually

procedure iconsmall spaceTo List Available Hosts

procedure iconsmall spaceTo Select a Server with the Latest Session

Managing User Data in the Sun Ray Data Store

Changing Authentication Policies

Enabling Multiple Administration Accounts

PAM Entries

procedure iconsmall spaceTo Configure UNIX Users

procedure iconsmall spaceTo Revert to the Old admin User

Administration GUI Audit Trail

Enabling and Disabling Device Services

procedure iconsmall spaceTo Determine the Current State of Device Services

procedure iconsmall spaceTo Enable USB Service

procedure iconsmall spaceTo Disable USB Service

procedure iconsmall spaceTo Perform a Warm Restart

procedure iconsmall spaceTo Perform a Cold Restart

Configuring Interfaces on the Sun Ray Interconnect Fabric

procedure iconsmall spaceTo Configure a Private Sun Ray Network

procedure iconsmall spaceTo Configure a Second Private Sun Ray Network

procedure iconsmall spaceTo Delete an Interface

procedure iconsmall spaceTo Print the Sun Ray Private Interconnect Configuration

procedure iconsmall spaceTo Add a LAN Subnet

procedure iconsmall spaceTo Delete a LAN Subnet

procedure iconsmall spaceTo List the Current Network Configuration

procedure iconsmall spaceTo Remove All Interfaces and Subnets

Managing Firmware Versions

procedure iconsmall spaceTo Update All the DTUs on an Interface

procedure iconsmall spaceTo Update a DTU Using the Ethernet (MAC) Address

Restarting the Sun Ray Data Store (SRDS)

procedure iconsmall spaceTo Restart Sun Ray Data Store

Smart Card Configuration Files

procedure iconsmall spaceTo Load a Configuration File Into the Directory

Configuring and Using Token Readers

Token Reader Icon

procedure iconsmall spaceTo Configure a Token Reader

procedure iconsmall spaceTo Get a Token ID From a Token Reader

Using the utcapture Tool

procedure iconsmall spaceTo Start utcapture

Examining Log Files

3. Administration Tool

Login Page

Servers Tab

Sessions Tab

Desktop Units Tab

procedure iconsmall spaceTo Display Properties for a DTU

procedure iconsmall spaceTo Edit a DTU’s Properties

Multihead Groups

Token Readers

procedure iconsmall spaceTo Set Up a Token Reader

procedure iconsmall spaceTo Locate a Token Reader

procedure iconsmall spaceTo Get Information on a Token Reader

Tokens Tab

procedure iconsmall spaceTo Register a Token

procedure iconsmall spaceTo Register a Pseudo-Token

procedure iconsmall spaceTo Enable, Disable, or Delete a Token

Advanced Tab

Security Settings

System Policy

Kiosk Mode Configuration

Smart Card Probe Order

Data Store Password

Log Files Tab

4. Peripherals for Sun Ray DTUs

Device Nodes and USB Peripherals

Device Nodes

Device Links

Device Node Ownership

Hotdesking and Device Node Ownership

Mass Storage Devices

Device Nodes and Links

Mount Points

Device Ownership and Hotdesking

Mass Storage Devices and Idle Sessions

Common Disk Operations

Attached Printers

Printer Setup

procedure iconsmall spaceTo Set Up a Printer

Non-PostScript Printers

PDA Synchronization

procedure iconsmall spaceTo Set Up the PDASync Application on a Sun Ray DTU

libusb

5. Hotdesking (Mobile Sessions)

NSCM Session

Sun Ray Mobile Session Login Dialog Box

procedure iconsmall spaceTo Log In to an NSCM Session

Disconnecting an Active NSCM or RHA Session

procedure iconsmall spaceTo Disconnect the Current Session via Hot Key

procedure iconsmall spaceTo Disconnect the Current Session via utdetach

procedure iconsmall spaceTo Terminate the Current Session

procedure iconsmall spaceTo Reconfigure the Disconnect Hot Key Combination

procedure iconsmall spaceTo Customize the Short Cut for Disconnecting an NSCM Session

NSCM and Failover Groups

Configuring the Authentication Manager for NSCM Sessions

procedure iconsmall spaceTo Enable NSCM Sessions From the Admin GUI

procedure iconsmall spaceTo Enable NSCM Sessions From a Command Line

Regional Hotdesking

Functional Overview

Site Requirements

Providing Site Integration Logic

procedure iconsmall spaceTo Configure a Site-specific Mapping Library

Token Readers with Regional Hotdesking

procedure iconsmall spaceTo Configure the Sample Data Store

procedure iconsmall spaceTo Disable Regional Hotdesking

Remote Hotdesk Authentication (RHA)

procedure iconsmall spaceTo Disable or Re-enable RHA Using the Admin GUI

procedure iconsmall spaceTo Disable RHA from a Command Line

procedure iconsmall spaceTo Re-enable RHA from a Command Line

6. Encryption and Authentication

Introduction

Security Configuration

Security Mode

Session Security

Security Status

7. Deployment on Shared Networks

Sun Ray DTU Initialization Requirements

DHCP Basics

DHCP Parameter Discovery

DHCP Relay Agent

Network Topology Options

Directly-Connected Dedicated Interconnect

Directly-Connected Shared Subnet

Remote Shared Subnet

Network Configuration Tasks

Preparing for Deployment

Deployment on a Directly-Connected Dedicated Interconnect

Directly-Connected Dedicated Interconnect: Example

Deployment on a Directly-Connected Shared Subnet

Directly-Connected Shared Subnet: Example 1

Directly-Connected Shared Subnet: Example 2

Deployment on a Remote Subnet

Remote Shared Subnet: Example 1

Remote Shared Subnet: Example 2

Network Performance Requirements

Packet Loss

Latency

Out-of-Order Packets

Encapsulated Options

Troubleshooting Tools

utcapture

utquery

OSD Icons

Remote Configuration

Firmware

Generic DHCP Parameters

.parms Lookup

Routerless VPN Capability

Pop-up GUI

Access Control

Features and Usage

Remote Loading of Configuration Data

Ports and Protocols

8. Monitoring the Sun Ray System

Sun Management Center (SunMC) Software Features

Additional Sun Management Center Modules

Setting Up the Monitoring Environment

procedure iconsmall spaceTo Set Up the Monitoring Environment

procedure iconsmall spaceTo Create an Object

Setting Alarms

procedure iconsmall spaceTo Set an Alarm

procedure iconsmall spaceTo Start Monitoring

Setting Monitoring Guidelines

Sun Ray System Panel

procedure iconsmall spaceTo Display the Sun Ray System Panel

procedure iconsmall spaceTo Refresh the Sun Ray System Panel

procedure iconsmall spaceTo Set Alarms

Sun Ray Services Panel

Failover Group Panel

Interconnect Panel

procedure iconsmall spaceTo Set an Alarm for Running Out of Addresses

Desktops Panel

procedure iconsmall spaceTo Add a DTU to Be Monitored

procedure iconsmall spaceTo Delete a DTU to Exclude Monitoring

Using Other Monitoring Programs

Removing the Sun Ray Module from SunMC

procedure iconsmall spaceTo Remove the Sun Ray Module

9. Multihead Administration

Multihead Groups

Multihead Screen Configuration

Multihead Screen Display

Multihead Administration Tool

procedure iconsmall spaceTo Enable Multihead Policy From the Command Line

procedure iconsmall spaceTo Enable Multihead Policy Using the Admin GUI

procedure iconsmall spaceTo Create a New Multihead Group

XINERAMA

Session Groups

Authentication Manager

10. Kiosk Mode

Enabling Kiosk Mode

Enabling Kiosk Mode Using the CLI

procedure iconsmall spaceTo Enable Kiosk Mode for All Users (Card and Non-card)

procedure iconsmall spaceTo Allow Only Card Sessions in Kiosk Mode

procedure iconsmall spaceTo Enable Kiosk Mode for Card Users Only

procedure iconsmall spaceTo Enable Kiosk Mode for Non-card Users Only

procedure iconsmall spaceTo Enable Regular Sessions for Card Users and Kiosk Sessions for Non-Card Users

procedure iconsmall spaceTo Enable Regular Sessions for Registered Cards and Kiosk Sessions for Non-Card Users

procedure iconsmall spaceTo Enable Kiosk Sessions for Registered Cards and Regular Sessions on Registered DTUs

procedure iconsmall spaceTo Allow Only Card Sessions in Kiosk Mode

Enabling Kiosk Mode Using the Admin GUI

procedure iconsmall spaceTo Enable Kiosk Mode Using the Admin GUI

Overriding Kiosk Mode Policy

procedure iconsmall spaceTo Override Kiosk Mode Policy Using the CLI

procedure iconsmall spaceTo Override Kiosk Mode Policy Using the Admin GUI

Building the Kiosk Mode Environment

procedure iconsmall spaceTo Configure Kiosk Mode Settings

procedure iconsmall spaceTo Add an Application

Security and Failover Considerations

11. Failover Groups

Overview

Setting Up IP Addressing

Setting Up Server and Client Addresses

Server Addresses

Configuring DHCP

Coexistence of the Sun Ray Server With Other DHCP Servers

Administering Other Clients

procedure iconsmall spaceTo Set Up IP Addressing on Multiple Servers, Each with One Sun Ray Interface

Group Manager

Redirection

Group Manager Configuration

procedure iconsmall spaceTo Restart the Authentication Manager

Load Balancing

procedure iconsmall spaceTo Turn Off the Load Balancing Feature

Setting Up a Failover Group

Primary Server

procedure iconsmall spaceTo Specify a Primary Server

procedure iconsmall spaceTo Specify a Dedicated Primary Server

Secondary Server

procedure iconsmall spaceTo Specify Each Secondary Server

procedure iconsmall spaceTo Add Additional Secondary Servers

Removing Replication Configuration

procedure iconsmall spaceTo Remove the Replication Configuration

Viewing Administration Status

procedure iconsmall spaceTo Show Current SRDS Replication Configuration

procedure iconsmall spaceTo View Network (Failover Group) Status

Recovery Issues and Procedures

Primary Server Recovery

procedure iconsmall spaceTo Rebuild the Primary Server’s Administration Data Store

procedure iconsmall spaceTo Replace the Primary Server with a Secondary Server

Secondary Server Recovery

Setting Up a Group Signature

procedure iconsmall spaceTo Change the Group Manager Signature

Taking Servers Offline

procedure iconsmall spaceTo Take a Server Offline

procedure iconsmall spaceTo Bring a Server Online

A. User Settings

Supported Devices and Libraries

Supported Mass Storage Devices

Sun Ray DTU Settings

procedure iconsmall spaceTo Change the Sun Ray Settings

Monitor Settings

Non-Sun Keyboard Settings

Hot Key Preferences

Hot Key Values

procedure iconsmall spaceTo Change the Hot Key for the Settings GUI

procedure iconsmall spaceTo Change the Hot Key Used to Detach NSCM Sessions

procedure iconsmall spaceTo Change the Hot Key Setting for a Single User

Power Cycling a Sun Ray DTU

procedure iconsmall spaceTo Power Cycle a Sun Ray DTU

procedure iconsmall spaceTo Perform a Soft Reset

procedure iconsmall spaceTo Kill a User’s Session

B. Troubleshooting and Tuning Tips

Understanding OSD

OSD Icon Topography

Sun Ray Desktop Unit Startup

procedure iconsmall spaceIf this icon stays on for more than 10 seconds

procedure iconsmall spaceIf this icon stays on for more than 10 seconds

procedure iconsmall spaceActions to Take

procedure iconsmall spaceIf the icon displays for more than a few seconds or if the DTU continues to reset after the icon is displayed

Wait Icon Cursor for Default Session Type

procedure iconsmall spaceTo Identify a Hung Session

procedure iconsmall spaceTo Kill a Hung Session

procedure iconsmall spaceActions to Take

procedure iconsmall spaceActions to Take

Session Connection Failures

procedure iconsmall spaceActions to Take

Firmware Download Diagnostics

Firmware Download OSD

procedure iconsmall spaceActions to Take

procedure iconsmall spaceActions to Take

Token Reader Icons

procedure iconsmall spaceActions to Take

Authentication Manager Errors

Troubleshooting USB Mass Storage Devices

Device Nodes Are Not Created

Device Is Not Automatically Mounted

Device Is Not Automatically Unmounted

Audio

Audio Device Emulation

Audio Malfunction

procedure iconsmall spaceTo Activate the Redirection Library

PDA Synchronization Issues

Multihead Video

Performance Tuning

Applications

Sluggish Performance

JDS Tuning

Screensaver Resource Consumption

procedure iconsmall spaceTo Disable Screensaver Hacks on Solaris Systems

Network Switches

Multihead Displays

Monitor Display Resolution Defaults to 640 x 480

procedure iconsmall spaceTo Correct or Reset the Screen Resolution

Old Icons (Hourglass with Dashes Underneath) Appear on Display

Port Currently Owned by Another Application

Design Tips

Troubleshooting the Sun Management Center

No Sun Ray Object

procedure iconsmall spaceTo Load the Sun Ray Module

No Sun Ray Module

procedure iconsmall spaceTo Activate the Sun Ray Module

Glossary

Index