| Sun Ray Server Software 3 Administrator's Guide for the Solaris Operating System |    
|
| Sun Ray Server Software 3 Administrator's Guide for the Solaris Operating System |
|
| C H A P T E R 2 |
|
Command-Line Interface |
The Command-Line Interface (CLI) is the recommended interface for enabling assistive technologies.
This chapter contains the following information:
Commands that can be executed from the command line are listed in TABLE 2-1, and a few of the most important commands are documented in this chapter. For further information on executing these commands, see the man page for the command in question.
To view any of the specific commands for the Sun Ray system, type:
or type:
|
The utaction program provides a way to execute commands when a Sun Ray DTU session is connected or disconnected. |
|
|
The utadm command manages the private network, shared network, and DHCP (Dynamic Host Configuration Protocol) configuration for the Sun Ray interconnect. |
|
|
The utcapture command connects to the Authentication Manager and monitors packets sent and packets dropped between the Sun Ray server and the Sun Ray DTUs. |
|
|
The utcard command allows configuration of different types of smart cards in the Sun Ray administration database |
|
|
The utconfig command performs the initial configuration of the Sun Ray server and supporting administration framework software. |
|
|
The utcrypto command is a utility for security configuration. |
|
|
The utdesktop command allows the user to manage Sun Ray DTUs connected to the Sun Ray server that the command is run on. |
|
|
The utdetach command disconnects the current non-smart card mobile session or authenticated smart card session from its respective Sun Ray DTU. The session is not destroyed but put into a detached state. The session can be accessed if the same user token (user name) is presented to the Sun Ray server. |
|
|
The utdiskadm utility is a tool for Sun Ray mass storage administration. |
|
|
The utdssync command converts the port number for the Sun Ray Data Store service to the new default port on servers in a failover group, then forces all servers in the group to restart Sun Ray services. |
|
|
The uteject command is used to eject media from a removable storage media device. |
|
|
The utfwadm command manages firmware versions on the Sun Ray DTUs. |
|
|
The utfwload command is used primarily to force the download of new firmware to a DTU running older firmware than its server. |
|
|
The utfwsync command refreshes the firmware level on the Sun Ray DTUs to what is available on the Sun Ray servers in a failover group. It then forces all the Sun Ray DTUs within the group to restart. |
|
|
The utgroupsig command sets the failover group signature for a group of Sun Ray servers. The utgroupsig command also sets the Sun Data Store rootpw used by Sun Ray to a value based on the group signature. Although utgroupsig sets the rootpw in the utdsd.conf file, it does not set the admin password, which is a separate entity, in the Admin database. |
|
|
The utgstatus command allows the user to view the failover status information for the local server or for the named server. The information that the command displays is specific to that server at the time the command is run. |
|
|
The utinstall utility installs, upgrades, and removes Sun Ray Server Software. All software required to support the Sun Ray server is installed, including the administration framework, Solaris operating environment patches, and any patches required by the framework. |
|
|
The utkiosk script is used to import/export kiosk configuration information into the LDAP database. |
|
|
The utmhadm command provides a way to administer Sun Ray server multihead terminal groups. The information that utmhadm displays and that is editable is stored in the Sun Ray administration database. |
|
|
The utmhconfig tool allows an administrator to list, add, or delete multiheaded groups easily. |
|
|
The utmhscreen tool draws a window displaying the current session on each screen, with the current screen highlighted for easy identification. This tool is automatically launched for users during the X server startup process (session creation). |
|
|
The utmount command is used to mount a file system on a Sun Ray mass storage device. |
|
|
The utmountd command is used to perform mount and umount operations on Sun Ray mass storage devices managed by utstoraged. |
|
|
The utpolicy command sets and reports the policy configuration of the Sun Ray Authentication Manager, utauthd(1M). This command's -i and -t options were deprecated as of the 2.0 release. Please continue to use the utpolicy command for policy changes, but use the utrestart command instead of utpolicy -i, and use utreader instead of utpolicy -t. |
|
|
The utpreserve command saves existing Sun Ray Server Software configuration data to the /var/tmp/SUNWut.upgrade directory. |
|
|
The utpw command changes the Sun Ray administrator password (also known as the UT admin password) used by the Web-based and command-line administration applications. |
|
|
The utquery command collects DHCP information from the Sun Ray DTUs. |
|
|
The utrcmd program provides a way to run Sun Ray administrative commands remotely. The utrcmd program contacts the in.utrcmdd daemon on the remote hostname and executes the specified command with the specified arguments, args (if any). |
|
|
The utreader command is used to add, remove, and configure token readers. |
|
|
The utreplica command configures the Sun Ray Data Store server to enable replication of administered data from a designated primary server to each secondary server in a failover group. The -z option is useful for updating the port number. |
|
|
The utresadm command allows an administrator to control the resolution and refresh rate of the video monitor signal (persistent monitor settings) produced by the Sun Ray unit. |
|
|
The utresdef command lists the monitor resolutions and refresh rates that can be applied to Sun Ray units through the utresadm command. |
|
|
The utrestart command is used to start Sun Ray services. It is highly recommended as a substitute for the old utglpolicy and utpolicy -i commands. |
|
|
The utselect command presents the output of utswitch -l in a window and allows mouse-based selection of a Sun Ray server to which the Sun Ray DTU in use is reconnected. |
|
|
The utsession command lists and manages Sun Ray sessions on the local Sun Ray server. |
|
|
The utsettings command opens a Sun Ray Settings dialog box that allows the user to view or change audio, visual, and tactile settings for the Sun Ray DTU. |
|
|
The utsunmc command adds the Sun Ray Server Software 3 module to the Sun Management Center (SunMC) and loads it to permit monitoring of Sun Ray Server Software. The utsunmc command can also remove the Sun Ray Server Software 3 module from SunMC. |
|
|
Use utsunmcinstall to install and uninstall the Sun Ray module for SunMC on a SunMC server where Sun Ray Server Software is not installed. |
|
|
The utswitch command allows switching a Sun Ray DTU among Sun Ray servers in a failover group. It can also list the existing sessions for the current token. |
|
|
The utsvc script restarts the Sun Ray Server Software and, due to its location in /etc/init.d, is executed upon startup of the actual server. Use utrestart instead of utsvc. |
|
|
The utusbadm command is used to enable or disable access to USB devices. |
|
|
The utumount command is used to unmount a file system from a Sun Ray mass storage device. |
|
|
The utuser command allows the administrator to manage Sun Ray users registered on the Sun Ray server that this command is run on. It also provides information on the currently inserted token (smart card) for a specified DTU that is configured as a token reader. |
|
|
The utwall utility sends a message or an audio file to users having an Xsun (X server unique to Sun Ray) process. The messages can be sent in email and displayed in a pop-up window. |
|
|
The utwho script assembles information about display number, token, logged-in user, etc., in a compact format. |
|
|
The utxconfig program provides X server configuration parameters for users of Sun Ray DTU sessions. |
|
|
This procedure starts Sun Ray services without clearing existing sessions.
This procedure starts Sun Ray services and clears existing sessions.
In addition to automatic redirection after a user's token has been authenticated, whether via smart card token or direct login, the utselect graphical user interface (GUI) or the utswitch command can be used to redirect the session to a different server.
|
From a shell window on the DTU, type:
The selections in the window are sorted in order of the most current to least current active sessions for the token ID.
In FIGURE 2-1, the Server column lists the servers accessible from the DTU. The Session column reports the DISPLAY variable X session number on the server if one exists. In the Status column, Up indicates that the server is available. The first server in the list is highlighted by default. Select a server from the list or enter the name of a server in the Enter server: field. If a server without an existing session is selected, a new session is created on that server.
The OK button commits the selection of the highlighted or manually entered server. The Cancel button dismisses the GUI without making any changes to the session. The Refresh button reloads the window with the most current information.
|
From a shell window on the DTU, type:
where host is the host name or IP address of the Sun Ray server to which the selected DTU is redirected, and token is the user's token ID.
|
Hosts available from the Sun Ray DTU are listed.
|
The DTU is redirected to the server with the latest session connect time.
The utglpolicy command and the utpolicy options -i and -t were deprecated in release 2.0. Consequently, please:
When a policy is set with utpolicy, the group policy is set automatically, so all that is needed at that point is to reset or restart services. This eliminates the need for utglpolicy.
|
Tip - Use the utrestart -c command instead of rebooting the server. |
All USB device access is enabled by default. To disable USB devices, the administrator must explicitly use the provided command line tool or GUI.
This configuration affects all servers in a group and all DTUs connected to that group. The devices' access can only be updated by a privileged administrator.
|
The following commands enable or disable access to USB devices. Before any change can take effect, you must restart Sun Ray services with a cold restart, which terminates all Sun Ray sessions.
Use the utusbadm command with the -e option:
|
Use the utusbadm command with the -d option:
|
Use the utrestart command with the -c option:
|
To determine whether or not USB devices are currently enabled:
This displays the ENABLED or DISABLED state of the devices.
Use the utadm command to manage the Sun Ray interconnect fabric.
|
Note - If you make manual changes to your DHCP configuration, you will have to make them again whenever you run utadm or utfwadm. |
|
Tip - If you issue a <CTRL>C signal while performing utadm configuration, utadm may not function correctly the next time it is invoked. To correct this condition, type: dhtadm -R. |
|
This command configures the network interface interface_name as a Sun Ray interconnect. Specify a subnet address or use the default address, which is selected from reserved private subnet numbers between 192.168.128.0 and 192.168.254.0.
|
Note - If you choose to specify your own subnet, make sure it is not already in use. |
After an interconnect is selected, appropriate entries are made in the hosts, networks, and netmasks files. (These files are created if they do not exist.) The interface is activated.
Any valid Solaris network interface can be used. For example:
|
This command deletes the entries that were made in the hosts, networks, and netmasks files and deactivates the interface as a Sun Ray interconnect.
|
For each interface, this command displays the hostname, network, netmask, and number of IP addresses assigned to Sun Ray units by DHCP.
|
|
|
|
Use the utadm -r command to prepare for removal of the Sun Ray Server Software.
This command removes all of the entries and structures relating to all of the Sun Ray interfaces and subnets.
Use the utfwadm command to keep the firmware version in the PROM on Sun Ray DTUs synchronized with that on the server.
|
Note - If the DHCP version variable is defined, then when a new DTU is plugged in, its firmware is changed to the firmware version on the server. |
|
Note - If you make manual changes to your DHCP configuration, you will have to make them again whenever you run utadm or utfwadm. |
|
|
If you restart the Sun Ray Data Store daemon (utdsd), you must also restart the Sun Ray Authentication Manager. The Sun Ray Data Store (SRDS) daemon may need to be restarted if you change one of its configuration parameters. The following procedure shows the correct order of the steps to take if you need to restart SRDS.
|
2. Stop the Sun Ray Data Store daemon:
3. Restart the Sun Ray services:
|
Tip - Use the Administration Tool or the utcard command to add additional smart card vendor configuration files. |
Smart card configuration files are available from a variety of sources, including Sun. For more ample information on smart cards, see the latest version of the Solaris Smart Card Administration Guide.
|
Copy the vendor configuration file containing the vendor tags to the following location:
The additional vendor cards are displayed under the Available column in the Add page in the Administration Tool.
Some manufacturers print the smart card ID on the card itself, but many do not. Since all the administrative functions refer to this token ID, Sun Ray Server Software provides a way to designate one or more specific DTUs as dedicated token readers. Site administrators can use these dedicated DTUs to administer Sun Ray users. When you enable an authentication policy with registered users, be sure to specify smart card IDs.
In the example configuration in FIGURE 2-2, the second DTU acts as a token reader.
|
Note - The token reader is not used for normal Sun Ray services, so it does not need a keyboard, mouse, or monitor. |
|
The utreader command specifies a DTU for registering smart cards. When a DTU is configured as a token reader, inserting or removing a smart card does not cause session mobility to occur; instead, any session connected to the DTU remains connected to that DTU over a card movement event.
Token reader mode is useful when you want to determine the raw token ID of a smart card.For example, to configure the DTU with MAC address 0800204c121c as a token reader, issue the following utreader command:
To re-enable the DTU with MAC address 0800204c121c to recognize card movement events and perform session mobility based on the smart card inserted into the DTU:
To unconfigure all token readers on this server:
|
where Token Reader is the MAC address of the DTU containing the token (smart card) whose ID you want to read. Insert the token into the DTU and run the utuser command. This command queries the DTU for the token's ID and, if successful, displays it. For example:
# /opt/SUNWut/sbin/utuser -r 08002086e18f Insert token into token reader '08002086e18f' and press return. Read token ID 'mondex.9998007668077709' |
The utcapture tool connects to the Authentication Manager and collects data about the packets sent and packets dropped between the Sun Ray server and the DTU. The data in TABLE 2-3 is then displayed on the screen in the following format:
The following utcapture options are supported:
|
From a command line, enter one of the following commands
This command lists the help commands for the utcapture tool
This command captures data every 15 seconds from the Authentication Manager running on the local host and then writes it to stdout if there is any change in packet loss for a DTU
This command captures data every 15 seconds from the Authentication Manager that is running on the local host and then writes it to stdout.
This command captures data every 15 seconds from the Authentication Manager running on server5118.eng and then writes the output to stdout if there is any change in packet loss for the DTU with ID 080020a893cb or 080020b34231.
This command processes the raw data from the input file raw-out.txt and then writes to stdout only the data for those DTUs that had packet loss.
| Sun Ray Server Software 3 Administrator's Guide for the Solaris Operating System | 817-6806 |
|
Copyright © 2004, Sun Microsystems, Inc. All Rights Reserved.
To Stop Sun Ray Services