Configuring Solaris Trusted Extensions for Windows Access

A P P E N D I X A

For the Sun Ray Windows Connector to function properly on a Solaris Trusted Extensions server, the Windows Terminal Server which is to be accessed must be made available at the desired level.

1. Make a Windows Terminal Server available to the public template.

a. Start the Solaris Management Console (SMC):

# smc &

b. Make the following selections under Management Tools:

i. Select hostname:Scope=Files, Policy=TSOL.

ii. Select System Configuration->Computers and Networks
->Security Templates->public.

c. From the menu bar, select Action->Properties->Hosts Assigned to Template.

d. Select Host.

e. Enter the IP Address of the Windows Terminal Server (e.g., 10.6.100.100).

f. Click Add.

g. Click OK.

2. Configure port 7014 as a shared multi-level port for the uttscpd daemon

a. If it is not already running, start the Solaris Management Console (SMC):

# smc &

b. Select hostname:Scope=Files, Policy=TSOL.

c. Select System Configuration->Computers and Networks
->Trusted Network Zones->global.

d. From the menu bar, select Action->Properties.

e. Enable ports by clicking Add under Multilevel Ports for Shared IP Addresses.

f. Add 7014 as Port Number, Select TCP as Protocol, and click OK.

g. Restart network services by running the following command:

# svcadm restart svc:/network/tnctl

h. Verify that this port is listed as a shared port by running the following command:

 # /usr/sbin/tninfo -m global

3. Create entries for the uttscpd daemon.

The /etc/services file entry for the SRWC proxy daemon is created automatically in the global zone at configuration time; however, corresponding entries need to be created in local zones.

a. Create a corresponding entry in each local zone where the Sun Ray Windows Connector will be launched.

These entries can be created manually or by loopback-mounting the global zone /etc/services file into the local zones for read access.

b. To create this entry manually, edit the local zone file by inserting the following entry:

uttscpd      7014/tcp       # SRWC proxy daemon

4. Reboot the Sun Ray server:

# /usr/sbin/reboot