Sun Ray Software
   Next

Sun Ray Software

Administration Guide for Release 5.4.x

Oracle Legal Notices
Component Licensing

E41121-03

December 2013

Abstract

This guide describes how to install, configure, and manage Sun Ray Software 5.4.x releases.

Document generated on: 2013-12-06 (revision: 2579)

Table of Contents

Preface
1 Overview
1.1 What is Sun Ray Computing?
1.1.1 Stateless
1.1.2 Secure
1.1.3 Available
1.2 Parts of the Sun Ray Environment
1.2.1 Desktop Clients
1.2.2 Physical Network
1.2.3 Sun Ray Server
1.2.4 Desktop Environments
1.3 Management Areas
2 Planning a Sun Ray Network Environment
2.1 Using a Shared Network Configuration
2.1.1 Configuring a Shared Network
2.1.2 VPN Capability
2.1.3 IP MultiPathing (Oracle Solaris 10)
2.1.4 IPv4 and IPv6
2.1.5 Network Performance Considerations
2.2 Configuring Sun Ray Server Discovery
2.2.1 Firmware Server
2.2.2 Session Server
2.2.3 Using Domain Name Service (DNS)
3 Installing and Configuring
3.1 Product Requirements
3.1.1 Operating System Requirements
3.1.2 Sun Ray Operating Software
3.1.3 Windows Remote Desktop Support
3.1.4 Feature Differences Between Oracle Solaris and Oracle Linux Platforms
3.1.5 Differences Between Oracle Solaris 10 and Oracle Solaris 11 Platforms
3.1.6 Disk Space Requirements
3.1.7 Oracle Solaris 10 Prerequisites
3.1.8 Oracle Solaris 11 Prerequisites
3.1.9 Oracle Linux Prerequisites
3.1.10 Java Runtime Environment (JRE) Requirements
3.1.11 Sun Ray Admin GUI Web Server Requirements
3.1.12 Sun Ray Admin GUI Web Browser Requirements
3.1.13 Sun Ray Data Store Port Requirements
3.1.14 Ports and Protocols
3.2 Installing
3.2.1 Using the utsetup Command
3.2.2 Not Using the utsetup Command
3.2.3 Automating Sun Ray Software Installations
3.2.4 Installing Firmware Before Sun Ray Software Installation
3.2.5 How to Install Sun Ray Software
3.2.6 Post-Installation Configuration
3.2.7 How to Install the Windows Connector Components on a Windows System
3.2.8 How to Clone a Sun Ray Server
3.2.9 How to Install and Configure a Sun Ray Server With Default Settings
3.2.10 How to List the Current Sun Ray Software Version
3.2.11 How to Remove Sun Ray Software
3.2.12 Installation (utinstall) Error Messages
3.3 Configuring Oracle Solaris 11 Trusted Extensions
3.3.1 How to Configure Sun Ray Software on Oracle Solaris 11 Trusted Extensions
3.4 Configuring Oracle Solaris 10 Trusted Extensions
3.4.1 How to Configure a Private Network on Oracle Solaris 10 Trusted Extensions
3.4.2 How to Configure Shared Multilevel Ports (MLP) for Sun Ray Services
3.4.3 How to Increase the Number of X Server Ports
3.4.4 How to Configure the Windows Connector on Oracle Solaris Trusted Extensions
3.5 Upgrading
3.5.1 Installing Firmware Before Sun Ray Software Upgrade
3.5.2 How to Upgrade Sun Ray Software
3.5.3 Planning Upgrades Using Failover Groups
3.5.4 How to Preserve Sun Ray Software Configuration Data
4 Admin GUI and Commands
4.1 Sun Ray Software Commands
4.1.1 How to Set Up Access to the Sun Ray Software Man Pages
4.2 Administration Tool (Admin GUI)
4.2.1 Administrative Name and Password
4.2.2 Admin GUI Tab Descriptions
4.2.3 How to Log In to the Administration Tool (Admin GUI)
4.2.4 How to Change the Admin GUI Locale
4.2.5 How to Change the Admin GUI to English Locale
4.2.6 How to Change the Admin GUI Timeout
4.2.7 How to Enable or Disable Multiple Administration Accounts (Oracle Linux)
4.2.8 How to Enable or Disable Multiple Administration Accounts (Oracle Solaris 11)
4.2.9 How to Enable or Disable Multiple Administration Accounts (Oracle Solaris 10)
4.2.10 How to Audit Admin GUI Sessions
5 Sun Ray Server and Networking
5.1 Log Files
5.2 How to Start or Stop Sun Ray Services
5.2.1 How to Stop Sun Ray Services
5.2.2 How to Start Sun Ray Services (Warm Restart)
5.2.3 How to Start Sun Ray Services (Cold Restart)
5.3 How to Check and Fix Corrupted Configuration Files (Oracle Solaris 10)
5.4 How to Unconfigure a Sun Ray Server
5.5 How to Disconnect a Sun Ray Server From the Interconnect
5.6 User Fields in the Sun Ray Data Store
5.7 Network Troubleshooting
5.7.1 Network Load
5.7.2 The utcapture Utility
5.7.3 utcapture Examples
5.7.4 The utquery Command
6 Failover Groups
6.1 Failover Groups Overview
6.2 Failover Process
6.3 Load Balancing
6.4 Mixing Different Sun Ray Servers
6.5 Authentication Requirements
6.6 Dedicated Primary Servers for Data Store
6.7 Setting Up a Failover Group
6.7.1 How to Configure a Primary Server
6.7.2 How to Add a Secondary Server
6.7.3 How to Synchronize Primary and Secondary Sun Ray Servers
6.7.4 How to Change the Group Manager Signature
6.8 Additional Failover Group Tasks
6.8.1 How to Take a Server Offline and Online
6.8.2 How to Disable Load Balancing
6.8.3 How to Show the Current Sun Ray Data Store Replication Configuration
6.8.4 How to Remove the Replication Configuration
6.8.5 How to View the Failover Group Status
6.9 Recovery Issues and Procedures
6.9.1 How to Rebuild the Primary Server's Administration Data Store
6.9.2 How to Replace the Primary Server with a Secondary Server
6.9.3 Secondary Server Recovery
6.10 Group Manager Details
6.10.1 Group Manager Configuration
6.11 Load Balancing Troubleshooting
6.11.1 How Load Balancing Works
6.11.2 Verifying Load Balancing Configuration
6.11.3 Fixing Poor Load Balancing Situations
7 Sessions and Tokens
7.1 Sessions Overview
7.1.1 Authentication Manager
7.1.2 Session Manager
7.2 Managing Sessions
7.2.1 How to Redirect a Session
7.2.2 How to Disconnect a Session
7.2.3 How to Terminate a Session
7.2.4 How To Identify a Hung Session
7.2.5 How To Kill a Hung Session
7.3 Tokens
7.3.1 Registering Tokens
7.3.2 How to Register a Token
7.3.3 How to Register a Pseudo-Token
7.3.4 How to Enable, Disable, or Delete a Token
7.4 Token Readers
7.4.1 How to Configure a Token Reader
7.4.2 How to Locate a Token Reader
7.4.3 How to Get a Token ID From a Token Reader
7.5 Session Troubleshooting
7.5.1 Problem: The dtlogin daemon cannot start the Xsun or Xnewt server properly.
8 Smart Card Services
8.1 Overview
8.2 Smart Card Bus Protocol
8.3 Smart Card Configuration Files
8.4 Smart Card Probe Order
8.5 Hotdesking with Smart Cards
8.6 Configuring Smart Card Services
8.6.1 How to Configure Primary Smart Card Readers for Hotdesking and Authentication
8.6.2 How to Configure External CCID-Compliant USB Smart Card Readers for Authentication (Oracle Solaris)
8.6.3 How to Add a Smart Card Configuration File
8.6.4 How to Change the Smart Card Probe Order
8.6.5 How to Change the Smart Card Bus Protocol (Oracle Solaris)
8.7 Configuring Access to Smart Card Readers
8.7.1 Determining Smart Card Device Names
8.7.2 Smart Card Reader Access Policy Example
8.7.3 How to Add a Smart Card Reader Access Policy
8.7.4 How to Modify a Smart Card Reader Access Policy
8.7.5 How to List Access Policies for Smart Card Readers
8.7.6 How to Disable a Smart Card Reader Access Policy
8.7.7 How to Disable Access to a Smart Card Reader
8.8 Troubleshooting Smart Card Services
8.8.1 Smart Card Transaction Problems
8.9 CCID IFD Handler for External USB Smart Card Readers (Oracle Solaris)
8.9.1 How to Install CCID IFD Handler
8.9.2 How to Uninstall CCID IFD Handler
8.9.3 Known Issues
9 Hotdesking
9.1 Hotdesking Overview
9.2 Hotdesking Without Smart Cards
9.2.1 NSCM and Failover Groups
9.2.2 How to Enable NSCM Sessions
9.2.3 How to Log in to an NSCM Session
9.3 Regional Hotdesking
9.3.1 Regional Hotdesking Process
9.3.2 Regional Hotdesking Site Requirements
9.3.3 Providing Site Integration Logic
9.3.4 How to Configure a Site-specific Mapping Library
9.3.5 How to Use Token Readers with Regional Hotdesking
9.3.6 How to Configure the Sample Data Store
9.4 Remote Hotdesk Authentication (RHA)
9.4.1 How to Disable Remote Hotdesk Authentication
9.4.2 How to Re-enable Remote Hotdesk Authentication
10 Kiosk Mode
10.1 Kiosk Overview
10.2 Kiosk Mode Security and Failover Considerations
10.3 Kiosk User Accounts
10.3.1 Characteristics
10.3.2 Restrictions and Safe Guards
10.3.3 Administering the Kiosk User Pool
10.4 Session Type Components
10.4.1 Session Descriptor
10.4.2 Session Script
10.5 How to Configure Kiosk Mode and User Accounts
10.6 How to Add Kiosk User Accounts
10.7 How to Configure a Kiosk Mode Session Type
10.8 How to Enable and Disable Kiosk Mode
10.8.1 Unconfiguring Kiosk Mode Disables Kiosk Policy
10.9 How to Override the Default Kiosk Mode Policy
10.10 Configuring the Windows Connector Kiosk Session Type
10.10.1 How to Configure a Kiosk Mode Session Type for the Windows Connector
10.11 Configuring the VMware View Connector Kiosk Session Type
11 Client-Server Security
11.1 Client-Server Security Overview
11.2 Encryption and Authentication
11.2.1 Security Modes
11.2.2 How to Force Encryption
11.2.3 How to Force Server Authentication
11.2.4 How to Disable Client Authentication
11.2.5 How to Force Client Authentication From All Clients
11.3 Managing Client Keys
11.3.1 Key Fingerprint
11.3.2 How to Deny Access to Clients With Unconfirmed Keys
11.3.3 How to Confirm a Specific Client Key
11.3.4 How to Confirm All Unconfirmed Client Keys
11.3.5 How to Display a Client's Fingerprint Key from a Sun Ray Client
11.3.6 How to Display All Client Keys
11.3.7 How to Display All Keys for a Specific Client
11.3.8 How to Delete a Specific Client Key
11.3.9 How to Delete All Client Keys for a Specific Client
11.4 Displaying Security Status
11.4.1 How to Display Security Status for a Sun Ray Client
11.4.2 How to Display Security Status for All Sessions
11.5 Authentication Troubleshooting
11.5.1 Error Messages
12 Multiple Monitor Configurations
12.1 Multi-Monitor
12.1.1 How to Set a Sun Ray Client's Multi-Monitor Configuration With Optimal Settings
12.1.2 How to Set a Sun Ray Client's Multi-Monitor Configuration With Customized Settings
12.2 Multihead Groups
12.2.1 Creating a Multihead Group
12.2.2 Multihead Group Screen Indicator
12.2.3 Creating a Single Screen Across Several Monitors (Xinerama)
12.2.4 How to Create a New Multihead Group
12.2.5 How to Enable the Multihead Group Policy
12.2.6 How to Manually Set Multihead Group Screen Dimensions
12.2.7 How to Manually Set Multihead Group Geometry
12.2.8 How to Disable Multihead Group for a Session
12.2.9 How to Enable and Disable Xinerama
12.2.10 How to Disconnect a Secondary Client
13 Desktop Clients
13.1 Managing Desktop Clients
13.1.1 Client ID Differences Between Oracle Virtual Desktop Clients and Sun Ray Clients
13.1.2 Dynamic Session Resizing
13.1.3 How to List Available Sun Ray Servers
13.1.4 How to List the Available Clients
13.1.5 How to Display Sun Ray Client Information
13.1.6 How to Configure a Client's Location and Information
13.1.7 Audio Output Troubleshooting (Oracle Solaris 10 and Oracle Linux 5)
13.1.8 Audio Output Troubleshooting (Oracle Solaris 11 and Oracle Linux 6)
13.2 Sun Ray Clients
13.2.1 How to Centralize Sun Ray Client Configurations (.parms)
13.2.2 Sun Ray Client Hot Keys
13.2.3 How to Change Sun Ray Client Audio and Display Settings (Sun Ray Settings GUI)
13.2.4 How to Modify Screen Resolutions
13.2.5 How to Power Cycle a Sun Ray Client
13.2.6 How to Enable or Disable XRender
13.2.7 How to Configure Screen Rotation
13.2.8 How to Disable Screen Blanking on a Sun Ray Client
13.2.9 How to Enable the NumLock Key for All Sun Ray Sessions
13.2.10 Keyboard Country Codes
13.2.11 Sun Ray Client Boot Process
13.3 Oracle Virtual Desktop Clients
13.3.1 Oracle Virtual Desktop Clients Overview
13.3.2 Using External Devices on the Client Computer
13.3.3 How to Enable Access for Oracle Virtual Desktop Clients
13.3.4 How to Enable the Clipboard Service for Oracle Virtual Desktop Clients
13.3.5 Oracle Virtual Desktop Client Troubleshooting
14 Sun Ray Client Firmware
14.1 Firmware Overview
14.2 Firmware Server Discovery
14.3 How to Update Firmware on Sun Ray Clients
14.4 How to Enable and Disable the Configuration GUI on All Sun Ray Clients
14.5 How to Modify a Sun Ray Client's Local Configuration (Configuration GUI)
14.5.1 Security Configuration Repository
14.5.2 Configuration GUI Menu Descriptions
14.5.3 How to Load a Remote Configuration File
14.6 VPN Support
14.6.1 How to Configure VPN Using Cisco Hybrid Authentication
14.7 IPsec
14.8 802.1x Authentication
14.8.1 How to Configure and Enable 802.1x Authentication on a Sun Ray Client
14.9 How to Display Firmware Versions for All Currently Connected Sun Ray Clients
14.10 How to Display the Firmware Version from a Sun Ray Client
14.11 How to Synchronize the Sun Ray Client Firmware
14.12 How to Downgrade Firmware on a Sun Ray Client
14.13 How to Disable All Sun Ray Client Firmware Updates
15 Peripherals
15.1 Peripherals Overview
15.2 Enabling and Disabling Device Services
15.2.1 How to Determine the Current State of Device Services
15.2.2 How to Enable or Disable USB Device Services
15.3 Device Availability Per Session
15.4 Accessing Serial Devices and USB Printers
15.4.1 Device Links
15.4.2 Device Nodes
15.4.3 Device Node Ownership
15.4.4 Hotdesking and Device Node Ownership
15.4.5 Setting Up Serial Devices
15.4.6 Setting Up USB Printers
15.5 Accessing USB Mass Storage Devices
15.5.1 Device Nodes and Links (Oracle Solaris)
15.5.2 Device Nodes and Links (Oracle Linux)
15.5.3 Mount Points
15.5.4 Device Ownership and Hotdesking
15.5.5 Mass Storage Devices and Idle Sessions
15.5.6 Commands for Common Disk Operation (Oracle Solaris)
15.5.7 Commands for Common Disk Operation (Oracle Linux)
15.5.8 How to Unmount a Mass Storage Device From a Client
15.5.9 Troubleshooting Mass Storage Devices
15.6 USB Headsets
15.6.1 Tested USB Headsets
15.6.2 Tested Applications
15.6.3 Additional Notes
15.7 USB Device Operations Failing After Idle Timeout Limit
16 Troubleshooting Icons
16.1 On-Screen Display (OSD) Icons
16.2 Server Policy Icons
16.3 Troubleshooting Icon Quick Reference
16.4 DHCP State Codes
16.5 Encryption and Authentication States
16.6 Power LEDs
16.7 (1) Sun Ray Client Startup Icon
16.8 (2) Firmware Download in Progress Icon
16.9 (3) Updating Firmware Icon
16.10 (4) Firmware Download Diagnostics Icon
16.11 (11-14) Network Status Icons
16.12 (15) Session Refused Icon
16.13 (16) Bus Busy Icon
16.14 (20) 802.1x Authentication Icon
16.15 (21) Network Connection Verified Icon
16.16 (22) Waiting to Connect to Authentication Manager Icon
16.17 (23) No Ethernet Signal Icon
16.18 (25) Redirection Icon
16.19 (26) Wait for Session Icon
16.20 (27) DHCP Broadcast Failure Icon
16.21 (28) Establishing VPN Connection Icon
16.22 (29) VPN Connection Established Icon
16.23 (30) VPN Connection Error
16.24 (31-34) Network Status Icons
16.25 (41-44) Network Status Icons
16.26 (46) No Access to Server Icon
16.27 (47) No Access for Oracle Virtual Desktop Clients Icon
16.28 (48) No Access: Registration Required Icon
16.29 (49) No Access: Key Rejected Icon
16.30 (50) No Access: Security Policy Violation Icon
16.31 (51-54) Network Status Icons
16.32 (60) Insert Card Icon
16.33 (61) Waiting for Primary Sun Ray Client Icon
16.34 (62) Token Reader Icon
16.35 (63) Card Error Icon
16.36 (64) Waiting For Access Icon
17 Windows Connector
17.1 Windows Connector Overview
17.2 Requirements
17.3 Using the Windows Connector
17.3.1 How to Start a Windows Session
17.3.2 How to Start a Windows Session Within Java Desktop System (Oracle Solaris 10)
17.3.3 How to Lock a Windows Session
17.3.4 How to Set Up Access to the uttsc Command
17.3.5 How to Set Up a Desktop Shortcut to Start a Windows Session
17.3.6 How to Separate Settings for Session Locale and Keyboard Layout
17.4 Audio Input
17.4.1 Enabling Audio Input on Windows 7 and Windows Server 2008 R2
17.5 Video Acceleration
17.5.1 Video Acceleration Requirements
17.5.2 Videos Accelerated
17.5.3 Audio Accelerated
17.5.4 Additional Notes
17.5.5 How to Enable Video Redirection on Windows Server 2008 R2
17.5.6 Video Acceleration Troubleshooting
17.6 USB Device Redirection
17.6.1 Device Access
17.6.2 Supported Configurations
17.6.3 Tested USB Devices
17.6.4 Additional Notes
17.6.5 How to Add USB Drivers to a Virtual Machine
17.6.6 USB Redirection Troubleshooting
17.7 Hotdesking
17.7.1 Hotdesking Behavior
17.7.2 Location Awareness
17.8 Session Directory
17.9 Network Security
17.9.1 Built-in RDP Network Security
17.9.2 Enhanced Network Security
17.10 Automatic Reconnection
17.11 Compression
17.11.1 How to Disable Compression
17.12 Licensing
17.12.1 Per-user Mode Versus Per-device Mode
17.13 Smart Cards
17.13.1 How to Enable Smart Card Readers on a Windows System
17.13.2 How to Set Up Smart Card Login for Windows
17.14 Multi-Monitor Support
17.15 Dynamic Session Resizing
17.16 Printing
17.16.1 How to Set Up Print Queues (Oracle Solaris 10)
17.16.2 How to Set Up Print Queues (Oracle Linux)
17.16.3 How to Make Sun Ray Printers Available to a Windows Session
17.16.4 How to Manage Printer Configurations for Users
17.16.5 Printers Troubleshooting
17.17 Accessing Serial Devices
17.18 uttsc Error Messages
17.18.1 General Troubleshooting
18 VMware View Connector
18.1 VMware View Connector Overview
18.2 Requirements
18.3 Configuring the VMware View Environment
18.3.1 How to Disable Secure Tunnel Connections to View Desktops
18.3.2 How to Enable Non-SSL Connections to the View Connection Server
18.3.3 How to Enable SSL Connections to the View Connection Server
18.4 Configuring the VMware View Connector Kiosk Session Type
18.4.1 How to Configure a Kiosk Mode Session Type for the VMware View Connector
18.5 VMware View Connector Troubleshooting
18.5.1 Error Messages
18.5.2 Desktop tries to open, but immediately disconnects
19 Alternate Network Configurations
19.1 Alternate Network Configurations Overview
19.2 Updating the Default /etc/hosts File Before Configuring Sun Ray Network (Oracle Linux)
19.3 Using a Shared Network Configuration Without External DHCP Services
19.3.1 Shared Network Configuration Worksheet
19.3.2 How to Configure a Sun Ray Server on a Shared Network to Provide DHCP Services
19.3.3 How to List the Current Network Configuration
19.3.4 How to Delete a LAN Subnet
19.3.5 Example Shared Network Setups
19.4 Using a Private Network Configuration
19.4.1 Private Network Configuration Worksheet
19.4.2 How to Configure a Sun Ray Server in a Private Network
19.4.3 How to List the Current Network Configuration
19.4.4 How to Print a Private Network Configuration
19.4.5 How to Delete an Interface
19.4.6 Example Private Network Setup
19.5 Sun Ray Client Initialization Requirements Using DHCP
19.5.1 DHCP Basics
19.5.2 DHCP Parameter Discovery
19.5.3 DHCP Relay Agent
19.5.4 Simplifying DHCP Configuration of Remote Sun Ray Clients
19.5.5 Standard DHCP Parameters
19.5.6 Vendor-specific DHCP Options
19.5.7 Encapsulated Options
19.6 Failover Groups
19.6.1 Network Topologies
19.6.2 Setting Up IP Addressing
19.6.3 Sun Ray Server Failover Group Worksheet
20 Performance Tuning
20.1 How to Gain Network Performance for Sun Ray 3 Series Clients
20.2 How to Improve Network Performance by Disabling CPU Binding (Oracle Solaris 11)
20.3 How to Improve Sun Ray Client Performance by Decreasing Buffering on the Network Switch (Oracle Solaris)
20.4 Improving Sun Ray Client Start-Up Time by Disabling Spanning Tree Protocol on the Network Switch
20.5 Applications
20.6 Tuning the Java Desktop System
20.7 Excessive Disk Swapping
20.8 Screensaver Resource Consumption
20.8.1 How to Disable Screensavers (Oracle Solaris 10)
A IPsec Support
A.1 Overview
A.2 IKE Configuration
A.2.1 remote Directive
A.2.2 sainfo Directive
A.2.3 Example IKE Configuration Files
A.3 IPsec Configuration GUI Menu
A.4 IPsec Configuration Examples
A.4.1 Oracle Linux 5 Pre-Shared Key
A.4.2 Oracle Linux 5 Certificates
A.4.3 Oracle Linux 6 Pre-Shared Key
A.4.4 Oracle Linux 6 Certificates
A.4.5 Oracle Solaris Pre-Shared Key
A.4.6 Oracle Solaris Certificates
A.4.7 Sun Ray Client Configuration
A.4.8 IPsec Verification
B Admin GUI Help
B.1 Servers Tab
B.1.1 Server Details
B.2 Sessions Tab
B.3 Desktop Units Tab
B.3.1 Desktop Units Properties
B.4 Tokens Tab
B.4.1 Token Properties
B.5 Advanced Tab
B.5.1 Security
B.5.2 System Policy
B.5.3 Kiosk Mode
B.5.4 Card Probe Order
B.5.5 Data Store Password
B.6 Log Files Tab
C Third Party Licenses
Glossary
   Next
   Preface
Oracle logo

Copyright © 2013, Oracle and/or its affiliates. All rights reserved. Legal Notices