Configuring Solaris Trusted Extensions

A P P E N D I X A

For the Sun Ray Connector to function properly on a Solaris Trusted Extensions server, the Windows Terminal Server which is to be accessed must be made available at the desired level. Use the following procedure to configure Solaris Trusted Extensions:

1. Make a Windows Terminal Server available to the public template.

a. Start the Solaris Management Console (SMC):

# smc &

b. Make the following selections under Management Tools:

i. Select hostname:Scope=Files, Policy=TSOL.

ii. Select System Configuration->Computers and Networks
->Security Templates->public.

c. From the menu bar, select Action->Properties->Hosts Assigned to Template.

d. Select Host.

e. Enter the IP Address of the Windows Terminal Server (e.g., 10.6.100.100).

f. Click Add.

g. Click OK.

2. Configure port 7014 as a multi-level port for the uttscpd daemon

a. Select hostname:Scope=Files, Policy=TSOL.

b. Select System Configuration->Computers and Networks
->Trusted Network Zones->global.

c. From the menu bar, select Action->Properties.

d. Enable ports by clicking Add under Multilevel Ports for Zone’s IP Addresses.

e. Add 7014 as Port Number, Select TCP as Protocol, and click OK.

f. Restart network services by running the following command:

 # svcadm restart svc:/network/tnctl

g. Verify that this port is listed as a shared port by running the following command:

 # /usr/sbin/tninfo -m global

3. Create entries for the uttscpd daemon.

The /etc/services file entry for the SRWC proxy daemon is created automatically in the global zone at configuration time; however, corresponding entries need to be created in local zones.

a. Create a corresponding entry in each local zone where the Sun Ray Connector will be launched.

These entries can be created manually or by loopback-mounting the global zone /etc/services file into the local zones for read access.

b. To create this entry manually, edit the local zone file by inserting the following entry:

uttscpd      7014/tcp       # SRWC proxy daemon

4. Reboot the Sun Ray server.