Sun Ray Software Administration Guide

Version 5.2

Copyright © 2011, 2012, Oracle and/or its affiliates. All rights reserved.

Oracle and Java are registered trademarks of Oracle and/or its affiliates. Other names may be trademarks of their respective owners.

This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws. Except as expressly permitted in your license agreement or allowed by law, you may not use, copy, reproduce, translate, broadcast, modify, license, transmit, distribute, exhibit, perform, publish or display any part, in any form, or by any means. Reverse engineering, disassembly, or decompilation of this software, unless required by law for interoperability, is prohibited.

The information contained herein is subject to change without notice and is not warranted to be error-free. If you find any errors, please report them to us in writing.

If this is software or related documentation that is delivered to the U.S. Government or anyone licensing it on behalf of the U.S. Government, the following notice is applicable:

U.S. GOVERNMENT END USERS: Oracle programs, including any operating system, integrated software, any programs installed on the hardware, and/or documentation, delivered to U.S. Government end users are “commercial computer software” pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations. As such, use, duplication, disclosure, modification, and adaptation of the programs, including any operating system, integrated software, any programs installed on the hardware, and/or documentation, shall be subject to license terms and license restrictions applicable to the programs. No other rights are granted to the U.S. Government.

This software or hardware is developed for general use in a variety of information management applications. It is not developed or intended for use in any inherently dangerous applications, including applications that may create a risk of personal injury. If you use this software or hardware in dangerous applications, then you shall be responsible to take all appropriate failsafe, backup, redundancy, and other measures to ensure its safe use. Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications.

This software or hardware and documentation may provide access to or information on content, products and services from third parties. Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content, products, and services. Oracle Corporation and its affiliates will not be responsible for any loss, costs, or damages incurred due to your access to or use of third-party content, products, or services.

Component Licensing

Oracle Virtual Desktop Client software is an included component of Oracle's Sun Ray Software and Oracle Virtual Desktop Infrastructure software products that must be separately downloaded from Oracle Software Delivery Cloud (https://edelivery.oracle.com). Use of Oracle Virtual Desktop Client is subject to the Oracle software license agreement provided with and/or applying to Sun Ray Software and Oracle Virtual Desktop Infrastructure.

E22661-15

April 2012

Abstract

This guide describes how to manage the Sun Ray Software product.

Document generated on: 2012-04-18 (revision: 882)


Table of Contents

Preface
1. Audience
2. Documentation Accessibility
3. Related Documents
4. Conventions
1. Sun Ray Software Overview
2. Admin GUI and Commands
2.1. Sun Ray Software Commands
2.1.1. How to View the Sun Ray Software Man Pages
2.2. Administration Tool (Admin GUI)
2.2.1. Administrative Name and Password
2.2.2. Admin GUI Tab Descriptions
2.3. How to Log In to the Administration Tool (Admin GUI)
2.4. How to Change the Admin GUI Locale
2.5. How to Change the Admin GUI to English Locale
2.6. How to Change the Admin GUI Timeout
2.7. How to Enable or Disable Multiple Administration Accounts (Linux)
2.7.1. How to Configure Admin GUI Privileges for UNIX Users (Linux)
2.7.2. How to Limit Admin GUI Privileges to the Admin User (Linux)
2.8. How to Enable or Disable Multiple Administration Accounts (Solaris)
2.8.1. How to Configure Admin GUI Privileges for UNIX Users (Solaris)
2.8.2. How to Limit Admin GUI Privileges to the Admin User (Solaris)
2.9. How to Audit Admin GUI Sessions
3. Sun Ray Server
3.1. Log Files
3.2. How to Start or Stop Sun Ray Services
3.2.1. How to Stop Sun Ray Services
3.2.2. How to Start Sun Ray Services (Warm Restart)
3.2.3. How to Start Sun Ray Services (Cold Restart)
3.3. How to Reboot a Sun Ray Server
3.4. How to Check and Fix Corrupted Configuration Files (Solaris)
3.5. How to Unconfigure a Sun Ray Server
3.6. How to Disconnect a Sun Ray Server From the Interconnect
3.7. User Fields in the Sun Ray Data Store
4. Failover Groups
4.1. Overview
4.2. Failover Process
4.3. Load Balancing
4.4. Using Different Sun Ray Software Versions
4.5. Authentication Requirements
4.6. Dedicated Primary Servers for Data Store
4.7. Setting Up a Failover Group
4.7.1. How to Configure a Primary Server
4.7.2. How to Add a Secondary Server
4.7.3. How to Synchronize Primary and Secondary Sun Ray Servers
4.7.4. How to Change the Group Manager Signature
4.8. Additional Failover Group Tasks
4.8.1. How to Take a Server Offline and Online
4.8.2. How to Disable Load Balancing
4.8.3. How to Show the Current Sun Ray Data Store Replication Configuration
4.8.4. How to Remove the Replication Configuration
4.8.5. How to View the Failover Group Status
4.9. Recovery Issues and Procedures
4.9.1. How to Rebuild the Primary Server's Administration Data Store
4.9.2. How to Replace the Primary Server with a Secondary Server
4.9.3. Secondary Server Recovery
4.10. Group Manager Details
4.10.1. Group Manager Configuration
5. Sessions and Tokens
5.1. Sessions
5.1.1. Authentication Manager
5.1.2. Session Manager
5.2. Tokens
5.2.1. Registering Tokens
5.2.2. How to Register a Token
5.2.3. How to Register a Pseudo-Token
5.2.4. How to Enable, Disable, or Delete a Token
5.3. Token Readers
5.3.1. How to Configure a Token Reader
5.3.2. How to Locate a Token Reader
5.3.3. How to Get a Token ID From a Token Reader
5.4. Smart Card Services
5.4.1. CCID IFD Handler v1.3.10
6. Hotdesking
6.1. Overview
6.2. Regional Hotdesking
6.2.1. Regional Hotdesking Process
6.2.2. Regional Hotdesking Site Requirements
6.2.3. Providing Site Integration Logic
6.2.4. How to Configure a Site-specific Mapping Library
6.2.5. How to Use Token Readers with Regional Hotdesking
6.2.6. How to Configure the Sample Data Store
6.3. Remote Hotdesk Authentication (RHA)
6.3.1. How to Disable Remote Hotdesk Authentication
6.3.2. How to Re-enable Remote Hotdesk Authentication
6.4. Hotdesking Without Smart Cards (Solaris)
6.4.1. Login Dialog Box
6.4.2. NSCM and Failover Groups
6.4.3. How to Enable NSCM Sessions
6.4.4. How to Log in to an NSCM Session
7. Kiosk Mode
7.1. Overview
7.2. Kiosk Mode Security and Failover Considerations
7.3. Kiosk User Accounts
7.3.1. Characteristics
7.3.2. Restrictions and Safe Guards
7.3.3. Administering the Kiosk User Pool
7.4. Session Type Components
7.4.1. Session Descriptor
7.4.2. Session Script
7.5. How to Configure Kiosk Mode
7.6. How to Configure a Kiosk Mode Session Type
7.6.1. Admin GUI Steps
7.6.2. Command Line Steps
7.7. How to Enable and Disable Kiosk Mode
7.7.1. Admin GUI Steps
7.7.2. Command-Line Steps
7.7.3. How to Enable Kiosk Mode for All Users (Smart Card and Non-Smart Card)
7.7.4. How to Allow Only Smart Card Sessions in Kiosk Mode
7.7.5. How to Enable Kiosk Mode for Smart Card Users Only
7.7.6. How to Enable Kiosk Mode for Non-Smart Card Users Only
7.7.7. How to Enable Regular Sessions for Smart Card Users and Kiosk Sessions for Non-Smart Card Users
7.7.8. How to Enable Regular Sessions for Registered Smart Cards and Kiosk Sessions for Non-Smart Card Users
7.7.9. How to Enable Kiosk Sessions for Registered Smart Cards and Regular Sessions on Registered Clients
7.7.10. How to Allow Only Card Sessions in Kiosk Mode
7.8. How to Override the Default Kiosk Mode Policy
7.8.1. Admin GUI Steps
7.8.2. Command-Line Steps
7.8.3. How to Enable Kiosk Sessions Regardless of the Kiosk Mode Policy for a Registered Smart Card
7.8.4. How to Disable Kiosk Session Regardless of the Kiosk Mode Policy for a Registered Smart Card
7.8.5. How to Disable Kiosk Sessions Regardless of the Kiosk Mode Policy for a Logical Token
7.8.6. How to Assign and Enable a Non-Default Kiosk Session
7.9. How to Add Kiosk User Accounts
7.10. Configuring the Windows Connector Kiosk Session Type
7.10.1. How to Configure a Kiosk Mode Session Type for the Windows Connector
7.11. Configuring the VMware View Connector Kiosk Session Type
7.11.1. How to Configure a Kiosk Mode Session Type for the VMware View Connector
8. Security
8.1. Overview
8.2. Encryption and Authentication
8.3. Security Modes
8.4. Client Key Management
8.5. Key Fingerprint
8.6. Displaying Security Status
8.6.1. How to Display Security Status for a Sun Ray Client
8.6.2. How to Display Security Status for All Sessions
8.7. Managing Client Keys
8.7.1. How to Confirm a Specific Client Key
8.7.2. How to Confirm All Unconfirmed Client Keys
8.7.3. How to Display a Client's Fingerprint Key from a Sun Ray Client
8.7.4. How to Display All Client Keys
8.7.5. How to Display All Keys for a Specific Client
8.7.6. How to Delete a Specific Client Key
8.7.7. How to Delete All Client Keys for a Specific Client
8.8. Managing Client Authentication
8.8.1. How to Disable Client Authentication
8.8.2. How to Force Client Authentication From All Clients
8.8.3. How to Deny Access to Clients With Unconfirmed Keys
9. Multiple Monitor Configurations
9.1. Multi-monitor
9.1.1. Hotdesking
9.1.2. Example xrandr Commands
9.2. Multihead
9.2.1. Creating a Multihead Group
9.2.2. Multihead Screen Display
9.2.3. Creating a Single Screen Across Several Monitors (Xinerama)
9.2.4. How to Create a New Multihead Group
9.2.5. How to Enable Multihead Policy
9.2.6. How to Manually Set Multihead Display Dimensions
9.2.7. How to Manually Set the Multihead Display Geometry
9.2.8. How to Disable Multihead Displays for a Session
9.2.9. How to Enable and Disable Xinerama
9.2.10. How to Disconnect a Secondary Client
10. Sun Ray Clients
10.1. Sun Ray Client Hot Keys
10.2. Using a Sun Ray Client
10.2.1. How to Change Sun Ray Client Settings (Sun Ray Settings GUI)
10.2.2. How to Redirect a Sun Ray Client Session
10.2.3. How to Manually Redirect to a Different Sun Ray Server (utswitch)
10.2.4. How to List Available Hosts
10.2.5. How to Disconnect a Sun Ray Client Session
10.2.6. How to Terminate a Sun Ray Client Session
10.2.7. How to Power Cycle a Sun Ray Client
10.2.8. How to Enable or Disable XRender
10.2.9. How to Disable Screen Blanking on a Sun Ray Client
10.2.10. How to Modify Screen Resolutions
10.3. Sun Ray Client Boot Process
10.4. Preparing Sun Ray Client Configuration Files (.parms Config)
10.4.1. How to Update the .parms Files
10.4.2. .parms Key/Value Pairs
10.5. Configuring Network Performance for Sun Ray 3 Series Clients
10.6. How to Display Sun Ray Client Information
10.6.1. Command-Line Steps
10.6.2. Admin GUI Steps
10.7. How To Identify a Hung Session
10.8. How To Kill a Hung Session
10.9. How to Tune the Java Desktop System
10.10. Configuring the Utility Hot Keys
10.10.1. How to Change Utility Hot Key Settings for All Users
10.10.2. How to Change the Utility Hot Key Settings for a Single User
10.11. How to Disable XRender for All Clients
10.12. How to Limit Administrative Privileges for Non-root Users (Linux)
10.13. Keyboard Country Codes
11. Sun Ray Client Firmware
11.1. Overview
11.2. Firmware Server Discovery
11.3. How to Update Firmware Versions on Sun Ray Clients
11.3.1. Alternate Network Configuration Examples
11.4. How to Enable and Disable the Configuration GUI on All Sun Ray Clients
11.4.1. Alternate Network Configuration Examples
11.5. How to Modify a Sun Ray Client's Local Configuration (Configuration GUI)
11.5.1. Configuration GUI Menu Descriptions
11.5.2. How to Load Remote Configuration Files
11.6. VPN Support
11.6.1. How to Configure VPN Using Cisco Hybrid Authentication
11.7. How to Display Firmware Versions for All Currently Connected Sun Ray Clients
11.8. How to Display the Firmware Version from a Sun Ray Client
11.9. How to Synchronize the Sun Ray Client Firmware
11.10. How to Disable All Firmware Updates
12. Sun Ray Client Peripherals
12.1. Overview
12.2. USB Headsets
12.2.1. Tested USB Headsets
12.2.2. Tested Applications
12.2.3. Important Notes
12.3. Device Nodes and USB Peripherals
12.4. Device Node Paths
12.5. Device Links
12.6. Device Node Ownership
12.7. Hotdesking and Device Node Ownership
12.8. Enabling and Disabling Device Services
12.9. Mass Storage Devices
12.9.1. Device Nodes and Links (Solaris)
12.9.2. Device Nodes and Links (Linux)
12.9.3. Mount Points
12.9.4. Device Ownership and Hotdesking
12.9.5. Mass Storage Devices and Idle Sessions
12.9.6. Commands for Common Disk Operation (Solaris)
12.9.7. Commands for Common Disk Operation (Linux)
12.10. How to Determine the Current State of Device Services
12.11. How to Enable or Disable USB Services
12.12. How to Unmount a Mass Storage Device From a Client
12.13. Setting Up Printers
12.13.1. How to Set Up an Attached PostScript Printer (Solaris)
12.13.2. How to Set Up an Attached PostScript Printer (Linux)
12.13.3. How to Set Up an Attached Non-PostScript Printer
12.14. How to Set Up Serial Attached Devices
12.15. How to Enable Applications to Access USB Devices
13. Sun Ray Client Troubleshooting Icons
13.1. Overview
13.2. Types of Troubleshooting Icons
13.3. Troubleshooting Icon Quick Reference
13.4. DHCP State Codes
13.5. Power LED
13.6. (1) Sun Ray Client Startup Icon
13.7. (2) Firmware Download in Progress Icon
13.8. (3) Updating Firmware Icon
13.9. (4) Firmware Download Diagnostics Icon
13.9.1. Firmware Download Error Codes and Messages
13.10. (15) Session Refused Icon
13.11. (16) Bus Busy Icon
13.12. (21) Network Connection Verified Icon
13.13. (22) Waiting to Connect to Authentication Manager Icon
13.14. (23) No Ethernet Signal Icon
13.15. (25) Redirection Icon
13.16. (26) Wait for Session Icon
13.17. (27) DHCP Broadcast Failure Icon
13.18. (28) Establishing VPN Connection Icon
13.19. (29) VPN Connection Established Icon
13.20. (30) VPN Connection Error
13.21. (31-34) Ethernet Address Icon
13.22. (46) No Access to Server Icon
13.23. (47) No Access for Oracle Virtual Desktop Clients Icon
13.24. (48) No Access: Registration Required Icon
13.25. (49) No Access: Key Rejected Icon
13.26. (50) No Access: Security Policy Violation Icon
13.27. (60) Insert Card Icon
13.28. (61) Waiting for Primary Sun Ray Client Icon
13.29. (62) Token Reader Icon
13.30. (63) Card Error Icon
13.31. (64) Waiting For Access Icon
14. Oracle Virtual Desktop Clients
14.1. Overview
14.2. How to Enable Access for Oracle Virtual Desktop Clients
14.2.1. Admin GUI Steps
14.2.2. Command Line Steps
14.3. Client ID Differences Between Oracle Virtual Desktop Clients and Sun Ray Clients
14.4. How to Display Client ID Information
14.5. How to Change the Keyboard Country Code
15. Windows Connector
15.1. Overview
15.2. Requirements
15.3. Features
15.4. Using the Windows Connector
15.4.1. How to Start a Windows Session
15.4.2. How to Start a Windows Session Within Java Desktop System (JDS)
15.4.3. How to Lock a Windows Session
15.4.4. How to Set Up Access to uttsc Command
15.4.5. How to Set Up a Desktop Shortcut to Start a Windows Session
15.5. Audio Input
15.5.1. Enabling Audio Input on Windows 7 Enterprise
15.6. Video Acceleration
15.6.1. Adobe Flash Acceleration (Windows 7 and 2008 R2)
15.6.2. Multimedia Redirection (Windows XP and 2003)
15.6.3. Adobe Flash Acceleration (Windows XP and 2003)
15.7. USB Device Redirection
15.7.1. Device Access
15.7.2. Supported Configurations
15.7.3. Tested USB Devices
15.7.4. Important Notes
15.7.5. How to Add USB Drivers to a Virtual Machine
15.7.6. How to Verify that USB Redirection is Active
15.8. Hotdesking
15.9. Session Directory
15.10. Network Security
15.10.1. Built-in RDP Network Security
15.10.2. Enhanced Network Security
15.11. Auto-reconnect
15.12. Compression
15.12.1. How to Disable Compression
15.13. Licensing
15.13.1. Per-user Mode Versus Per-device Mode
15.14. Smart Cards
15.14.1. How to Enable Smart Card Redirection on a Per-Connection Basis
15.14.2. How to Set Up Smart Card Login for Windows
15.15. Multi-Monitor Support
15.16. Printing
15.16.1. How to Set Up Print Queues (Solaris)
15.16.2. How to Set Up Print Queues (Linux)
15.16.3. How to Make Sun Ray Printers Available to a Windows Session
15.16.4. How to Maintain the Printer Cache File
15.16.5. How to Set Up Follow-Me Printing
16. VMware View Connector
16.1. Overview
16.2. Requirements
16.3. Configuring the VMware View Connector Session Type
16.4. Disabling Connection Tunneling
16.5. Configuring VMware View Manager to Accept Non-SSL Connections
16.6. Enabling SSL
17. Alternate Network Configurations
17.1. Overview
17.2. Updating the Default /etc/inet/hosts File Before Configuring Sun Ray Network (Linux)
17.3. Using a Shared Network Configuration Without External DHCP Services
17.3.1. Shared Network Configuration Worksheet
17.3.2. How to Configure a Sun Ray Server on a Shared Network to Provide DHCP Services
17.3.3. How to List the Current Network Configuration
17.3.4. How to Delete a LAN Subnet
17.3.5. Example Shared Network Setups
17.4. Using a Private Network Configuration
17.4.1. Private Network Configuration Worksheet
17.4.2. How to Configure a Sun Ray Server in a Private Network
17.4.3. How to List the Current Network Configuration
17.4.4. How to Print a Private Network Configuration
17.4.5. How to Delete an Interface
17.4.6. Example Private Network Setup
17.5. Sun Ray Client Initialization Requirements Using DHCP
17.5.1. DHCP Basics
17.5.2. DHCP Parameter Discovery
17.5.3. DHCP Relay Agent
17.5.4. Simplifying DHCP Configuration of Remote Sun Ray Clients
17.5.5. Standard DHCP Parameters
17.5.6. Vendor-specific DHCP Options
17.5.7. Encapsulated Options
17.6. Failover Groups
17.6.1. Network Topologies
17.6.2. Setting Up IP Addressing
17.6.3. Sun Ray Server Failover Group Worksheet
18. Troubleshooting and Tuning
18.1. Log Files
18.2. Windows Connector Troubleshooting
18.2.1. uttsc Error Messages
18.2.2. General Troubleshooting
18.2.3. Video Acceleration Troubleshooting
18.2.4. USB Redirection Troubleshooting
18.2.5. Printers Troubleshooting
18.3. VMware View Connector Troubleshooting
18.3.1. Error Messages
18.4. Sun Ray Client Troubleshooting Icons
18.5. Oracle Virtual Desktop Client Troubleshooting
18.5.1. Connection Problems When Using a VPN or WAN
18.5.2. Screen Rendering Problems
18.5.3. How to Set the Logging Level
18.5.4. How to Change the Log File Location
18.5.5. How to Use On-Screen Displays to Diagnose Connection Problems
18.6. Audio Output Troubleshooting
18.6.1. Tracking Audio Sessions
18.6.2. Audio Device Emulation
18.6.3. Problem: Audio is not working.
18.6.4. Problem: Audio is not working with Firefox.
18.6.5. Problem: An application ignores the $AUDIODEV environment variable.
18.7. Troubleshooting USB Storage
18.7.1. Problem: Device nodes are not created.
18.7.2. Problem: The device is not automatically mounted.
18.7.3. Problem: The device is not automatically unmounted.
18.8. Server and Client Authentication Troubleshooting
18.8.1. Error Messages
18.9. Login Troubleshooting
18.9.1. Problem: The dtlogin daemon cannot start the Xsun server properly.
18.10. Network Troubleshooting
18.10.1. Performance Issues
18.10.2. The utcapture Utility
18.10.3. utcapture Examples
18.10.4. The utquery Command
18.11. Performance Tuning
18.11.1. Configuring Network Performance for Sun Ray 3 Series Clients
18.11.2. Excessive Disk Swapping
18.11.3. Screensaver Resource Consumption
18.11.4. Network Switches
18.11.5. Improving Sun Ray Client Start-Up Time by Disabling Spanning Tree Protocol on the Network Switch
18.11.6. Network Load
18.11.7. Applications
19. Glossary
19.1. A
19.2. B
19.3. C
19.4. D
19.5. E
19.6. F
19.7. G
19.8. H
19.9. I
19.10. K
19.11. L
19.12. M
19.13. N
19.14. O
19.15. P
19.16. R
19.17. S
19.18. T
19.19. U
19.20. V
19.21. W
19.22. X
19.23. Y