You can do #2 buy doing an if/then script. We hope to get more granular
with CAM in the future, but right now it is either on or off for card
users or non-card users.
Davide Marche wrote:
Craig,
I did utinstall from the very first time, but it was somehow corrupted.
As you can imagine, i didn't change any package information myself just
to enjoy :). And the solaris installation is working fine since
november, so i think it is healthy. I think something simply didn't work
on the first time i launched utinstall, and that created all the
problems then. I just wanted to write it here, in case somebody has the
same problem. But of course if you think it was a bad idea i think some
of the admins can delete my message at all.
About CAM, i added applications without any problem (I wrote "With the
card, i see a totally dark blue screen with a menu with allowed
applications" because i added my applications already). And yes, i read
all the admin guide, but uh no pictures are there about it should look
like now, that's why i asked.
Any answer to question (2) ?
Thanks again
ps: it is a full installation of solaris
Craig Bender ha scritto:
Doesn't sound like you had a healthy Solaris server to begin with. We
recommend the minimum update versions of Solaris in the admin guide,
and we always recommend that you do a full install of Solaris.
You do know that the proper way to install Sun Ray server is to use
the utinstall script, correct? Once you download the zip file, you
unzipped, cd srss_3.1 and run utinstall. It doesn't sound like you did
that if you were doing a bunch of package adds, package removes.
You have to define that you want to run CAM when you first run
utconfig. If you don't do it, then yes you have to utconfig -u, then
rerun utconfig.
What your seeing now is CAM with no applications defined. Have you
read the admin guide at all?
You can see a lot of CAM examples here:
http://blogs.sun.com/roller/page/ThinkThin
Davide Marche wrote:
Hi everybody,
I managed to do it, so I am writing it here. Hopefully it will help
smb else, althought I think it's quite obvious for the rest of the
list :)
First of all, i have to say that the biggest problem is to have a
properly installed sun ray server (at least in my case). I had to
work a lot with packages and pgkadd and pkgrm to make it work. In my
case, pkginfo was corrupted for some of the packages of the srss, i
had to remove them by hand and reinstall them, and then install the
whole software once again. Then, i had to unconfig the srss and
config it again, with CAM enabled. Just a hint: it will work only
when everything in the setup was ok, even without warnings (this is
quite strange actually, warnings prevented the software from working
in my case, but that's it).
Now I am in this situation: no dtlogin is asked, and only card user
are allowed to use the client. With the card, i see a totally dark
blue screen with a menu with allowed applications, and I have a
couple of questions for sunray's guru:
1. is it supposed to be so ? :)
2. is there any way to decide which applications are enabled only
for some cards or some group(s) of them? I don't need a very
good control of it, basic controls will be more than enough
Thanks and hope this message can help.
D.
Davide Marche ha scritto:
Hi,
I managed to setup CAM reinstalling the software, now utconfig asks
me if i want to enable it or not, and then i can see the options
from the admin gui. The problem is that the thin client now doesn't
want to work anymore, but I did all this very fast yesterday so i
think i did something wrong, i will try again later or on monday. If
i find a solution i will make you know about it.
D.
MOULINE Kamal ha scritto:
sorry i use srss_3.1
Kamal
MOULINE Kamal a écrit :
Hi David,
me too I want to do that but still not have any idea how !!! I
don't know if we should have another soft or it's possible with
srss_1.1 ??
regards,
Kamal
Davide Marche a écrit :
Hi Mouline,
thank you :) actually i did it time ago but there was some other
problem. I found out that it was not working because the thin
client was
also the token reader (and now i can say: i was quite stupid of
me not
to think about it before). Now i have another question (maybe i will
find it out myself again, but i am not so optimistic this time).
It seems that some of the boss saw (somewhere and somewhen) a thin
client authenticating users with just a smart card (that means,
without
dtlogin) and allowed different applications for different users
(which
is card here) and probably different desktops. Now i am having a
look at
CAM, but the first problem is that the admin guide shows me an
option in
the gui that i don't have (admin->policy->Controlled access
mode). But
mostly i need to know if i am in the wrong way or not, because if
i am
in the right i think i can find a way to make it work somehow :)
thanks again to all the list :)
Davide
ps: i am using SRSS 3.1, if it helps :)
MOULINE Kamal ha scritto:
Hi David,
You have to register the smart card in order to have the sun ray
server to know it, you can do that by checking the options: let
users
register the smart card, you can have all the procedure on the
sun ray
admin guide.
Regards,
===========================================
MOULINE Kamal
Ingénieur consultant
CBI - www.cbi.ma
Divisions Informatique Grands Comptes
GSM : +212 63 47 55 88
STD : +212 22 43 71 21
FAX : +212 22 43 71 84 ===========================================
Davide Marche a écrit :
Hi everybody,
I have some questions about the smart card usage. I have a thin
client
1G and a sun ray server running on solaris 10. I am trying to
restrict
usage of the client only to users with smart card, so i went to
the
Admin gui -> Admin -> Policy and decide the policy (Users with
card:
registered users ; non card users: no access). The problem is
that when
I do so the thin client doesn't work at all, and shows me an
image, I
think it wants the smart card :) But of course the smart card
is already
in the thin client. I also added all the avaible cards from the
"smart
card" menu, but it still doesn't work (I don't know exactly
which card i
have because they bought them when i was not working in the
company yet,
but i can describe them if necessary). I also have some other
questions,
but this one is no doubt the most important for me now because
i got
this task unexpected and don't really know much about the thin
client
itself :(
Hope somebody can help me at least with hints or links,
everything will
be a good starting point for me now :)
Thanks in advance
Davide
_______________________________________________
SunRay-Users mailing list
[email protected]
http://www.filibeto.org/mailman/listinfo/sunray-users
_______________________________________________
SunRay-Users mailing list
[email protected]
http://www.filibeto.org/mailman/listinfo/sunray-users
------------------------------------------------------------------------
_______________________________________________
SunRay-Users mailing list
[email protected]
http://www.filibeto.org/mailman/listinfo/sunray-users
------------------------------------------------------------------------
_______________________________________________
SunRay-Users mailing list
[email protected]
http://www.filibeto.org/mailman/listinfo/sunray-users
------------------------------------------------------------------------
No virus found in this incoming message.
Checked by AVG Free Edition.
Version: 7.1.394 / Virus Database: 268.8.3/358 - Release Date:
07/06/2006
------------------------------------------------------------------------
_______________________________________________
SunRay-Users mailing list
[email protected]
http://www.filibeto.org/mailman/listinfo/sunray-users
------------------------------------------------------------------------
No virus found in this incoming message.
Checked by AVG Free Edition.
Version: 7.1.394 / Virus Database: 268.8.3/359 - Release Date:
08/06/2006
------------------------------------------------------------------------
_______________________________________________
SunRay-Users mailing list
[email protected]
http://www.filibeto.org/mailman/listinfo/sunray-users
_______________________________________________
SunRay-Users mailing list
[email protected]
http://www.filibeto.org/mailman/listinfo/sunray-users
_______________________________________________
SunRay-Users mailing list
[email protected]
http://www.filibeto.org/mailman/listinfo/sunray-users
_______________________________________________
SunRay-Users mailing list
[email protected]
http://www.filibeto.org/mailman/listinfo/sunray-users
