I want to stress what Ottomeister stated, particularly since you appear
to be a military site and might be concerned about security.
One of the primary motivations for implementing the new "Remote Hotdesk
Authentication" policy, and making it the default, was for security.
It's bad security to allow unauthenticated personnel to terminate
anyone's session via C-A-B-B. C-A-B-B is effectively a Denial of Service
attack. In addition, desktop screen lockers can be defeated in certain
circumstances. RHA eliminates these vulnerabilities.
As Ottomeister suggested, enabling Non-SmartCard Mobility (-M option to
utpolicy) eliminates the possibility of anyone leaving a terminal
unusable by others.
As a last alternative, if you really don't care about unauthenticated
people terminating locked sessions and are willing to live with the
weaknesses of desktop screen lock security, you can disable RHA via the
-D option to utpolicy.
Regards,
Bob
Smith, Patrick CTR Navy, PAXR wrote:
This worked previously when we were running Solaris 8, however; since switching
to Solaris 10 TSOL with SRSS 4.1, ctrl-alt-backspace-backspace no longer
terminates the actual session.
What we need to be able to do, is have less than IT savvy people capable of
terminating a session for someone who leaves their terminal locked at the end
of the day.
It will reset the terminal as if it is terminating the session, but immediately
come back to the Sun Ray Session Lock screen for whoever was logged in. The
only way to kill the session is for an administrator to terminate it via the
web interface.
If this isnt an option, is there a way to have it time out the session after a
period of inactivity and kill it?
Thanks!
Patrick
------------------------------------------------------------------------
_______________________________________________
SunRay-Users mailing list
[email protected]
http://www.filibeto.org/mailman/listinfo/sunray-users
_______________________________________________
SunRay-Users mailing list
[email protected]
http://www.filibeto.org/mailman/listinfo/sunray-users
