C H A P T E R  3

Administration Tool

The Sun Ray Administration Tool (Admin GUI) is organized around primary Sun Ray objects, such as servers, sessions, desktop units, and tokens.

FIGURE 3-1 Admin GUI Navigation Hierarchy


Servers Tab

Server Details

View Installed Sun Ray Packages

View Network Status

View Connected Desktop Units

View Session Details

Sessions Tab

Desktop Units Tab

New Desktop Unit

Desktop Unit Properties

Edit Desktop Unit Properties

Tokens Tab

Add New Token

Registered Tokens

Currently Used Tokens

Token Properties

Edit Token Properties

New Alias Token

Advanced Tab


System Policy

Kiosk Mode

Display Kiosk Mode details

Edit Kiosk Mode (specify session type and properties)

Card Probe Order

Edit (or Set) Card Probe Order

Data Store Password

Log Files Tab

Messages (system messages)

Authentication (Authentication Manager events)

Administration (server administration operations)

Mount (mass storage device mount messages)

Storage (mass storage device events)

The tab navigation model is easier to use than the previous navigation tree, and context-sensitive help makes it easier to manage a Sun Ray installation with little need for official documentation. Search functionality has been integrated into the main GUI tabs, and all tables can be sorted by clicking on the column headers.

Login Page

The default user name for the Admin GUI administration account is admin. The initial password is set at configuration time (see Configure Sun Ray Server Software of the Sun Ray Server Software 4.0 Installation and Configuration Guide for Linux).

To allow another user account or accounts to perform administrative functions, see Enabling Multiple Administration Accounts of this manual.

To access the Admin GUI, log in to your Sun Ray server’s console or to any DTU attached to it, start a browser, and type the following URL:


Note - If you chose a different port number when you configured the Sun Ray Server Software, substitute that number for 1660 in the URL above. If secure communication was enabled during SRSS configuration, the browser may be redirected to a secure port (default 1661).

If you get a message denying access, make sure that:

All actions performed within the Admin GUI that modify system settings are logged in an audit trail.

FIGURE 3-2 User Name Challenge Screen

Login screen shows default “admin” user and OK and Start Over buttons

To log in, enter the administrator user name admin on the user name challenge screen and click the OK button. On the password challenge screen, enter the administration password and click the OK button.

If the session is inactive for 30 minutes, you must log in again.

Note - To change the administration password, use the Advanced tab. See Data Store Password.

Servers Tab

This tab provides the capability to list all the servers in the failover group. Clicking on a server name displays additional details for the selected server and offers links to display the host group’s network connectivity status (that is, failover group status) or to list installed Sun Ray packages. It also simplifies restart options by offering buttons for warm restart or cold restart of Sun Ray services on a local or failover group-wide basis.

Note - A cold restart terminates all sessions on the selected server or servers before restarting; a warm restart does not terminate sessions.

FIGURE 3-3 Top-level Servers Tab

Warm and Cold Restart buttons can be used on any servers selected

Sessions Tab

This tab lists all the sessions, sorted by user sessions and idle sessions.

FIGURE 3-4 Sessions Tab Displays Active and Idle Sessions

Screen shows 2 card sessions, 2 non-card sessions, no idle sessions

The search functionality allows lookup of specific sessions, such as those running on a single server or sessions where a specific user is logged in. This tab also allows you to drill down for more information on any server or DTU as well as to select and terminate sessions.

Desktop Units Tab

The new desktop unit (DTU) management tab consolidates several DTU-related screens from the old Admin GUI.

FIGURE 3-5 Desktop Units Tab

This example lists Connected Desktop Units

The search drop-down menu provides access to the choices of listing all registered DTUs, listing all connected DTUs, displaying DTUs configured as token readers, or DTUs participating in multihead groups (see Multihead Groups). As on other tabs in the new Admin GUI, clicking on the identifier (MAC address) displays additional details for each DTU. All fields can be sorted by clicking their column headers.

procedure icon  To Display Properties for a DTU

single-step bullet  Click any Desktop Identifier link on the Desktop Units tab.

procedure icon  To Edit a DTU’s Properties

1. Click any Desktop Identifier link on the Desktop Units tab, then click the Edit button.

2. Enter or modify data in the text boxes, and click the OK button to save the changes to the data store.

Multihead Groups

The multihead feature allows users to control separate applications on multiple Sun Ray displays with a single keyboard and mouse, attached to the primary DTU. The multihead feature also allows users to display and control a single application, such as a spreadsheet, on multiple displays (see Chapter 9).

Token Readers

A token reader is a Sun Ray DTU that is dedicated to reading a smart card and returning the card’s ID, which you can associate with a user (card owner). Sun Ray DTUs configured as token readers display the token reader icon (see Token Reader Icons) instead of a login dialog box and do not support hotdesking when cards are inserted or removed. To manage token readers with the CLI, see Configuring and Using Token Readers.

procedure icon  To Set Up a Token Reader

1. On the Desktop Units tab, click the Identifier of the DTU you want to use as a token reader.

2. On the Desktop Unit Properties tab, click Edit.

3. On the Edit Desktop Unit Properties tab, click the Token Reader checkbox.

4. Click the OK button.

The DTU you have selected is now set up to read smart card tokens.

5. Restart Sun Ray services.

The DTU is now a token reader.

FIGURE 3-6 Setting Up a Token Reader

Use the check box to specify a token reader

procedure icon  To Locate a Token Reader

single-step bullet  On the Desktop Units tab, select Token Readers from the drop-down list and click the Search button.

The default is to search for all possible matches. You may specify other search criteria in the Search text box.

procedure icon  To Get Information on a Token Reader

single-step bullet  Click the Token Readers Identifier link after searching for token readers on the Desktop Units tab.

Tokens Tab

The Admin GUI manages tokens associated with users and pseudo-tokens associated with DTUs through the Tokens tab. Smart cards can be registered to specific users, considered as token owners. Alias tokens allow a token owner to use more than one token for access to the same session.

FIGURE 3-7 Tokens Tab

If no tokens are currently registered, search displays “No tokens registered”

Note - The Tokens tab is not used to administer token readers, which are DTUs set up to read smart cards and retrieve their token IDs. See Token Readers.

The Edit Token Properties page (see FIGURE 3-8) and the Add New Token page (see FIGURE 3-9) can be used to enable session types, such as Kiosk or regular desktop sessions, to control what type of desktop is displayed for each user token or class of user token.

FIGURE 3-8 Edit Token Properties

procedure icon  To Register a Token

1. Click on any token on the Tokens tab to display that token’s properties (see FIGURE 3-8).

2. To register a token, click the New button on the Tokens tag to display its properties (see FIGURE 3-9).

You can now enter an identifier or select a token reader.

FIGURE 3-9 Add New Token Page

Specify new token details and session type (default, Kiosk, regular)

procedure icon  To Register a Pseudo-Token

1. Click on any Identifier on the Desktop Units tab to view properties for that DTU.

2. On the Desktop Unit Properties page, click View Token Details.

3. Click the Edit button to enter details such as ownership and to specify a session type: Default, Kiosk, or Regular (see FIGURE 3-10).

FIGURE 3-10 Pseudo-token Properties

Specify new pseudo-token details and session type

procedure icon  To Enable, Disable, or Delete a Token

1. Click the check box next to the token’s identifier on the Token Properties page.

2. Click the Enable, Disable, or Delete button.

Advanced Tab

This tab provides sub-tabs for group-wide settings, described below.

FIGURE 3-11 The Security Tab

Settings for encryption and authentication plus device options

Security Settings

Security settings include encryption of communication between DTU and server, server authentication, security mode, and device access, as shown in FIGURE 3-11.

All Sun Ray device services are enabled by default. Sun Ray device services include USB devices connected through USB ports, internal serial ports, and internal smart card readers on the Sun Ray DTU. To enable or disable these services, use the utdevadm command line tool (see Enabling and Disabling Device Services) or the Admin GUI as shown in this section.

For a description of encryption and authentication options, see Encryption and Authentication. For devices, see Peripherals for Sun Ray DTUs.

System Policy

Use this tab to regulate authentication manager policy settings, such as access for card users and non-card users, and enabling Kiosk mode and the multihead feature, for each Sun Ray server, or system.

FIGURE 3-12 System Policy Tab

Card user and multihead policy settings

Kiosk Mode Configuration

To use Kiosk Mode, enable it on the System Policy tab (see FIGURE 3-12) and use the Kiosk Mode tab for setup. For a more detailed description, see Kiosk Mode of this manual

FIGURE 3-13 Kiosk Mode Tab

This screen shot shows a “before” image of the Edit Kiosk Mode tab

Smart Card Probe Order

The information provided about smart cards is extracted from vendor-supplied configuration files. These configuration files are located in the directory: /etc/opt/SUNWut/smartcard. Configuration files must be formatted correctly, and file names must end with a .cfg suffix, such as acme_card.cfg.

FIGURE 3-14 Edit Smart Card Probe Order

Add or remove smart cards and change their probe order

Smart cards are probed in the order in which they appear in this list. As you add more cards, you can move those used most often to the top of the list.

Data Store Password

The administrator’s password allows you to use the Administration Tool to access and change Sun Ray administration data.

FIGURE 3-15 Use the Data Store Password Tab to Change the Admin Password

Use this screen to change the admin password

The Data Store Password tab allows you to change the password for the admin account. The password was set at configuration time (see Configure Sun Ray Server Software of the Sun Ray Server Software 4.0 Installation and Configuration Guide for Linux).

This tab does not allow you to change UNIX user passwords.

Note - Every server in a failover group must use the same password for the admin account.

The layout of the data store is described in Managing User Data in the Sun Ray Data Store. To allow other UNIX accounts to perform administrative functions, see Enabling Multiple Administration Accounts.

Log Files Tab

This tab provides sub-tabs for displaying the various log files recording events such as system messages, authentication logs, server administration events, mount logs, and storage related actions. To locate Sun Ray log files from the command line, see Examining Log Files.

FIGURE 3-16 Sample Administration Log

Sample admin log. Various logs are available for inspection.