Exit Print View

Oracle Secure Global Desktop Administration Guide for Version 4.6

Document Information

Preface

1.  Networking and Security

2.  User Authentication

3.  Publishing Applications to Users

4.  Configuring Applications

5.  Client Device Support

6.  SGD Client and Webtop

7.  SGD Servers, Arrays, and Load Balancing

A.  Global Settings and Caches

Secure Global Desktop Authentication Tab

The Authentication Wizard

Token Generation

Description

Command Line

Password Cache

Description

Command Line

Third-Party Authentication

Description

Command Line

System Authentication

Description

Command Line

Search Local Repository

Description

Command Line

Search LDAP Repository

Description

Command Line

Use Default Third-Party Identity

Description

Command Line

Use Default LDAP Profile

Description

Command Line

Use Closest Matching LDAP Profile

Description

Command Line

LDAP/Active Directory

Description

Command Line

Unix

Description

Command Line

Authentication Token

Description

Command Line

Windows Domain Controller

Description

Command Line

SecurID

Description

Command Line

Anonymous

Description

Command Line

Search Unix User ID in Local Repository

Description

Command Line

Search Unix Group ID in Local Repository

Description

Command Line

Use Default User Profile

Description

Command Line

Windows Domain

Description

Command Line

Active Directory

Description

Command Line

LDAP

Description

Command Line

Service Objects Tab

The Service Objects List Table

Name

Type

Enabled

URLs

User Name and Password

Connection Security

Active Directory Base Domain

Active Directory Default Domain

Application Authentication Tab

Password Cache Usage

Description

Command Line

Action When Password Expired

Description

Command Line

Smart Card Authentication

Description

Command Line

Dialog Display

Description

Command Line

"Save Password" Box

Description

Command Line

"Always Use Smart Card" Box

Description

Command Line

Display Delay

Description

Command Line

"Launch Details" Pane

Description

Command Line

Communication Tab

Unencrypted Connections Port

Description

Command Line

Encrypted Connections Port

Description

Command Line

AIP Keepalive Frequency

Description

Command Line

Timeout for User Session Resumability

Description

Command Line

Timeout for General Resumability

Description

Command Line

Resource Synchronization Service

Description

Command Line

User Session Idle Timeout

Description

Command Line

Performance Tab

Application Session Load Balancing

Description

Command Line

Application Load Balancing

Description

Command Line

Client Device Tab

Windows Client Drive Mapping

Description

Command Line

Unix Client Drive Mapping

Description

Command Line

Dynamic Drive Mapping

Description

Command Line

Windows Audio

Description

Command Line

Windows Audio Sound Quality

Description

Command Line

Unix Audio

Description

Command Line

Unix Audio Sound Quality

Description

Command Line

Smart Card

Description

Command Line

Serial Port Mapping

Description

Command Line

Copy and Paste

Description

Command Line

Client's Clipboard Security Level

Description

Command Line

Time Zone Map File

Description

Command Line

Editing

Description

Command Line

Printing Tab

Client Printing

Description

Command Line

Universal PDF Printer

Description

Command Line

Make Universal PDF Printer the Default

Description

Command Line

Universal PDF Viewer

Description

Command Line

Make Universal PDF Viewer the Default

Description

Command Line

Postscript Printer Driver

Description

Command Line

Security Tab

New Password Encryption Key

Description

Command Line

Timeout for Print Name Mapping

Description

Command Line

Connection Definitions

Description

Command Line

X Authorization for X Display

Description

Command Line

Monitoring Tab

Log Filter

Description

Command Line

Billing Service

Description

Command Line

Resilience Tab

Array Failover

Description

Command Line

Monitor Interval

Description

Command Line

Monitor Attempts

Description

Command Line

Find Primary Interval

Description

Command Line

Find Primary Attempts

Description

Command Line

Action When Failover Ends

Description

Command Line

Backup Primaries

Description

Command Line

Caches Tab

Passwords Tab

Description

Adding Entries to the Password Cache

Command Line

Tokens Tab

Description

Command Line

B.  Secure Global Desktop Server Settings

C.  User Profiles, Applications, and Application Servers

D.  Commands

E.  Login Scripts

F.  Third-Party Legal Notices

Glossary

Index

Client Device Tab

Attributes on the Client Device tab are settings for the user’s client device. This tab controls the use of client device features for applications displayed through SGD.

From the command line, use the tarantella config list command to list these settings, and the tarantella config edit command to edit these settings.

This tab contains the following sections:

Windows Client Drive Mapping

Usage: Select or deselect the check box.

Description

Whether to enable client drive mapping (CDM) for applications running on Windows application servers.

Changes to this attribute only take effect for new user sessions.

Command Line

Command option: --array-windowscdm 1 | 0

Usage: Specify 1 (true) or 0 (false).

The following example enables Windows CDM for the array.

--array-windowscdm 1

Unix Client Drive Mapping

Usage: Select or deselect the check box.

Description

Whether to enable CDM for applications running on UNIX or Linux platform application servers.

To use UNIX platform CDM, the Oracle Secure Global Desktop Enhancement Module (SGD Enhancement Module) must be installed and running on the application server.

If you enable UNIX platform CDM, CDM services only become available when you restart all SGD servers in the array. To manually start CDM services without restarting the array, run the tarantella start cdm command on all SGD servers in the array.

If you disable UNIX platform CDM, the CDM processes only stop when you restart all SGD servers in the array. To manually stop CDM services without restarting the array, run the tarantella stop cdm command on all SGD servers in the array.

Changes to this attribute only take effect for new user sessions.

Command Line

Command option: --array-unixcdm 1 | 0

Usage: Specify 1 (true) or 0 (false).

The following example enables UNIX platform CDM for the array.

--array-unixcdm 1

Dynamic Drive Mapping

Usage: Select or deselect the check box.

Description

Whether to enable dynamic drive mapping for the array. This feature enables “hot plugging” of removable storage devices, such as Universal Serial Bus (USB) drives.

By default, dynamic drive mapping is enabled for an SGD array.

To use dynamic drive mapping, CDM must be enabled for the array. This means that the Windows Client Drive Mapping or Unix Client Drive Mapping attribute must be enabled.

To use dynamic drive mapping for UNIX and Linux platform application servers, the Oracle Secure Global Desktop Enhancement Module (SGD Enhancement Module) must be installed and running on the application server.

Changes to this attribute only take effect when you restart all the SGD servers in the array.

Command Line

Command option: --array-dyndevice 1 | 0

Usage: Specify 1 (true) or 0 (false).

The following example disables dynamic drive mapping for the array.

--array-dyndevice 0

Windows Audio

Usage: Select or deselect the check box.

Description

Whether to enable Windows audio services for the array.

To play audio for Windows applications, audio redirection must be enabled on the Windows Terminal Server.

Changes to this attribute only take effect for new user sessions.

Command Line

Command option: --array-audio 1 | 0

Usage: Specify 1 (true) or 0 (false).

The following example disables Windows audio services for the array.

--array-audio 0

Windows Audio Sound Quality

Usage: Select an option.

Description

The sample rate of the audio data.

Adjusting the audio quality increases or decreases the amount of audio data sent.

By default, SGD uses Medium Quality Audio.

The sample rates are as follows:

Command Line

Command option: --array-audio-quality low | medium | high

Usage: Specify an audio quality setting.

The following example specifies medium quality audio for Windows audio services.

--array-audio-quality medium

Unix Audio

Usage: Select or deselect the check box.

Description

Whether to enable UNIX platform audio services for the array.

UNIX platform audio is only available for X applications. The audio module of the SGD Enhancement Module must be installed and running on the application server.

Changes to this attribute only take effect for new user sessions.

Command Line

Command option: --array-unixaudio 1 | 0

Usage: Specify 1 (true) or 0 (false).

The following example disables UNIX platform audio services for the array.

--array-unixaudio 0

Unix Audio Sound Quality

Usage: Select an option.

Description

The sample rate of the audio data.

Adjusting the audio quality increases or decreases the amount of audio data sent.

By default, SGD uses Medium Quality Audio.

The sample rates are as follows:

Command Line

Command option: --array-unixaudio-quality low | medium | high

Usage: Specify an audio quality setting.

The following example specifies medium quality audio for UNIX platform audio services.

--array-unixaudio-quality medium

Smart Card

Usage: Select or deselect the check box.

Description

Whether to enable smart card services for the array.

To use smart cards, smart card device redirection must be enabled on the Windows Terminal Server.

Changes to this attribute only take effect for new user sessions.

Command Line

Command option: --array-scard 1 | 0

Usage: Specify 1 (true) or 0 (false).

The following example enables smart card services for the array.

--array-scard 1

Serial Port Mapping

Usage: Select or deselect the check box.

Description

Whether to enable access to serial ports for the array.

By default, access to serial ports is enabled.

Access to serial ports for individual users can be enabled and disabled using the Serial Port Mapping attribute for organization, organizational unit or user profile objects.

Changes to this attribute only take effect for new user sessions.

Command Line

Command option: --array-serialport 1 | 0

Usage: Specify 1 (true) or 0 (false).

The following example enables access to serial ports for the array.

--array-serialport 1

Copy and Paste

Usage: Select or deselect the check box.

Description

Whether to allow copy and paste operations for Windows and X application sessions for the array.

By default, copy and paste is allowed.

Copy and paste operations for individual users can be enabled and disabled using the Copy and Paste attribute for organization, organizational unit, or user profile objects.

Changes to this attribute only take effect for new application sessions.

Command Line

Command option: --array-clipboard-enabled 1 | 0

Usage: Specify 1 (true) or 0 (false).

The following example enables copy and paste for Windows and X application sessions.

--array-clipboard-enabled 1

Client’s Clipboard Security Level

Usage: Type a number in the field.

Description

The security level for the SGD Client.

Used to control copy and paste operations between Windows or X application sessions and applications running on the client device.

The security level can be any positive integer. The higher the number, the higher the security level. The default security level is 3.

Changes to this attribute only take effect for new application sessions.

Command Line

Command option: --array-clipboard-clientlevel num

Usage: Replace num with a positive integer that specifies the security level.

The following example specifies a client clipboard security level of 3.

--array-clipboard-clientlevel 3

Time Zone Map File

Usage: Type the file name in the field.

Description

A file that contains mappings between UNIX platform client device and Windows application server time zone names.

Command Line

Command option: --xpe-tzmapfile filename

Usage: Replace filename with the path to the time zone map file.

In the following example, a time zone map file is specified.

--xpe-tzmapfile "%%INSTALLDIR%%/etc/data/timezonemap.txt"

Editing

Usage: Select or deselect the check box.

Description

Whether to allow users to edit their own profiles for use with the SGD Client.

By default, profile editing is enabled.

If profile editing is disabled, it is disabled for all users, including SGD Administrators. However, SGD Administrators can still create and edit profiles using the Profile Editor application.

Profile editing for individual users can be enabled and disabled using the Client Profile Editing attribute for organization, organizational unit, or user profile objects.

Changes to this attribute only take effect for new user sessions.

Command Line

Command option: --array-editprofile 1 | 0

Usage: Specify 1 (true) or 0 (false).

The following example enables user profile editing for the array.

--array-editprofile 1