Sorry, I missed something. Your policy is allowing OVDC for card connections only. Do you have a supported smart card reader + card in the client that is running OVDC?
On Jun 7, 2012, at 1:27 PM, Wolf Schwurack <[email protected]> wrote: > I haven't tried that but we don't want our Sunray DTU's on a public > interface. I just upgraded to 5.3 and notice that we could run OVDC. If > both DTU's and OVDC needs to be on the same interface then that¹s not > going to work for us. > > When we are in the office using DTU we don't want to VPN to access the > sunray server. Is seem to me that having OVDC would be when you are out of > the office and you connect a card reader to your laptop or home PC. This > way you can take your DTU session anywhere > > 0___ Wolfgang Schwurack > c/ /'_ SA/DBA - UEN > (*) \(*) 801-587-9444 > [email protected] > > > > > On 6/7/12 2:09 PM, "Craig Bender" <[email protected]> wrote: > >> If you were to point a Sun Ray at the public interface, does it connect? >> >> On 6/7/12 12:56 PM, Wolf Schwurack wrote: >>> This is set to our Sunray DTU's, its a private interface we run them on. >>> >>> thumper ~ 277 # utadm -l >>> LAN connections: On >>> Use IPv4 multicast >>> Subnetwork: 10.0.1.0 >>> Interface= ce1 (10.0.1.1) >>> Netmask= 255.255.255.0 >>> Broadcast= 10.0.1.255 >>> Router= 10.0.1.1 >>> AuthSrvr= 10.0.1.1 >>> AltAuth= 10.0.1.1 255.255.255.255 >>> FirmwareSrvr= 10.0.1.1 >>> NewTver= 11.0_49_2012.03.27.10.35 >>> IP assignment= 1/20 (10.0.1.15) >>> Thu Jun 07 13:54:04 >>> thumper ~ 278 # utadm -p >>> Interface Host Network Netmask Assigned >>> IPs >>> ce1 thumper-ce1 10.0.1.0 255.255.255.0 >>> 1/20 >>> >>> >>> >>> >>> >>> 0___ Wolfgang Schwurack >>> c/ /'_ SA/DBA - UEN >>> (*) \(*) 801-587-9444 >>> [email protected] >>> >>> >>> >>> >>> On 6/7/12 1:52 PM, "Craig Bender"<[email protected]> wrote: >>> >>>> And you did a restart after changing the policy? What is the output of >>>> utadm -l and -p? >>>> >>>> On 6/7/12 12:49 PM, Wolf Schwurack wrote: >>>>> # Current Policy: >>>>> -a -m -r card -s card -p -u card -g >>>>> >>>>> >>>>> >>>>> >>>>> 0___ Wolfgang Schwurack >>>>> c/ /'_ SA/DBA - UEN >>>>> (*) \(*) 801-587-9444 >>>>> [email protected] >>>>> >>>>> >>>>> >>>>> >>>>> On 6/7/12 1:44 PM, "Craig Bender"<[email protected]> wrote: >>>>> >>>>>> >>>>>> >>>>>> http://docs.oracle.com/cd/E25749_01/E25745/html/OVDC-Howto-Enable-Acce >>>>>> ss >>>>>> .h >>>>>> tml >>>>>> >>>>>> On 6/7/12 12:24 PM, Wolf Schwurack wrote: >>>>>>> I have Client Authentication = soft, Is that what you are asking? If >>>>>>> not >>>>>>> how do I check >>>>>>> >>>>>>> 0___ Wolfgang Schwurack >>>>>>> c/ /'_ SA/DBA - UEN >>>>>>> (*) \(*) 801-587-9444 >>>>>>> [email protected] >>>>>>> >>>>>>> >>>>>>> >>>>>>> >>>>>>> On 6/6/12 4:38 PM, "Craig Bender"<[email protected]> wrote: >>>>>>> >>>>>>>> Did you enable soft client access for your policy? >>>>>>>> >>>>>>>> On 6/6/12 2:41 PM, Wolf Schwurack wrote: >>>>>>>>> I'm trying to setup a Oracle Virtual Desktop Client for our SunRay >>>>>>>>> servers. I am unable to connect getting this in the log file: >>>>>>>>> >>>>>>>>> Jun 6 15:22:15 thumper utauthd: [ID 315837 user.info] Worker3 >>>>>>>>> NOTICE: >>>>>>>>> CLAIMED by StartxlationSession.m1 NAME: >>>>>>>>> rejectclient.MD5-21b6755cab3125e55e6e4cf0c379cffe PARAMETERS: >>>>>>>>> {savedType=pseudo, terminalIPA=140.197.241.79, type=rejectclient, >>>>>>>>> state=disconnected, cause=insert, doamgh=true, >>>>>>>>> rawId=21b6755cab3125e55e6e4cf0c379cffe, >>>>>>>>> terminalCID=MD5.21b6755cab3125e55e6e4cf0c379cffe, MTU=1500, >>>>>>>>> tokenSeq=1, >>>>>>>>> firstServer=8cc5e70c, namespace=MD5, >>>>>>>>> keyTypes=dsa-sha1-x1,dsa-sha1, >>>>>>>>> sw=Oracle:SunRayS1:Darwin:3.1.0, >>>>>>>>> id=MD5-21b6755cab3125e55e6e4cf0c379cffe, >>>>>>>>> clientRand=HYEpoq/IAFhPX3FWJkGmbn881RWVNxM5O4pIjx9ylZu, >>>>>>>>> realIP=8cc5f14f, >>>>>>>>> startRes=1024x640:1024x640, useReal=true, event=insert, >>>>>>>>> sn=21b6755cab3125e55e6e4cf0c379cffe, >>>>>>>>> savedId=21b6755cab3125e55e6e4cf0c379cffe, rawType=pseudo, >>>>>>>>> clientKeyStatus=autoconfirmed, hw=SunRayS1, initState=1, _=1} >>>>>>>>> Jun 6 15:22:15 thumper utauthd: [ID 185685 user.info] Worker3 >>>>>>>>> NOTICE: >>>>>>>>> CONNECT MD5.21b6755cab3125e55e6e4cf0c379cffe, >>>>>>>>> rejectclient.MD5-21b6755cab3125e55e6e4cf0c379cffe, all connections >>>>>>>>> allowed >>>>>>>>> Jun 6 15:22:17 thumper utauthd: [ID 118793 user.info] Worker3 >>>>>>>>> NOTICE: >>>>>>>>> MTU >>>>>>>>> = 1500 >>>>>>>>> Jun 6 15:22:17 thumper utdtsession: [ID 702911 user.info] Add >>>>>>>>> (2,rejectclient.MD5-21b6755cab3125e55e6e4cf0c379cffe,special) >>>>>>>>> Jun 6 15:22:17 thumper utauthd: [ID 572475 user.info] Worker3 >>>>>>>>> NOTICE: >>>>>>>>> SESSION_OK rejectclient.MD5-21b6755cab3125e55e6e4cf0c379cffe >>>>>>>>> Jun 6 15:22:36 thumper utauthd: [ID 679077 user.info] Worker4 >>>>>>>>> NOTICE: >>>>>>>>> readMessage::socket looping limit exceeded.Close it. >>>>>>>>> Jun 6 15:22:36 thumper utauthd: [ID 764237 user.info] Worker4 >>>>>>>>> NOTICE: >>>>>>>>> DISCONNECT MD5.21b6755cab3125e55e6e4cf0c379cffe, >>>>>>>>> rejectclient.MD5-21b6755cab3125e55e6e4cf0c379cffe destroy >>>>>>>>> Jun 6 15:22:36 thumper utauthd: [ID 792517 user.info] Worker4 >>>>>>>>> NOTICE: >>>>>>>>> DESTROY rejectclient.MD5-21b6755cab3125e55e6e4cf0c379cffe >>>>>>>>> lifetime=21809 >>>>>>>>> Jun 6 15:22:53 thumper utauthd: [ID 927710 user.info] >>>>>>>>> SessionManager0 >>>>>>>>> NOTICE: TERMINATE: inactive session >>>>>>>>> Jun 6 15:22:53 thumper utdtsession: [ID 702911 user.info] Delete >>>>>>>>> (2,rejectclient.MD5-21b6755cab3125e55e6e4cf0c379cffe) >>>>>>>>> >>>>>>>>> I have read all of the docs, opened all of the firewall ports. >>>>>>>>> >>>>>>>>> Has anybody set up a OVDC that works? >>>>>>>>> >>>>>>>>> >>>>>>>>> >>>>>>>>> 0___ Wolfgang Schwurack >>>>>>>>> c/ /'_ SA/DBA - UEN >>>>>>>>> (*) \(*) 801-587-9444 >>>>>>>>> [email protected] >>>>>>>>> >>>>>>>>> >>>>>>>>> _______________________________________________ >>>>>>>>> SunRay-Users mailing list >>>>>>>>> [email protected] >>>>>>>>> http://www.filibeto.org/mailman/listinfo/sunray-users >>>>>>>> _______________________________________________ >>>>>>>> SunRay-Users mailing list >>>>>>>> [email protected] >>>>>>>> http://www.filibeto.org/mailman/listinfo/sunray-users >>>>>>> >>>>>>> _______________________________________________ >>>>>>> SunRay-Users mailing list >>>>>>> [email protected] >>>>>>> http://www.filibeto.org/mailman/listinfo/sunray-users >>>>>> _______________________________________________ >>>>>> SunRay-Users mailing list >>>>>> [email protected] >>>>>> http://www.filibeto.org/mailman/listinfo/sunray-users >>>>> >>>>> _______________________________________________ >>>>> SunRay-Users mailing list >>>>> [email protected] >>>>> http://www.filibeto.org/mailman/listinfo/sunray-users >>>> _______________________________________________ >>>> SunRay-Users mailing list >>>> [email protected] >>>> http://www.filibeto.org/mailman/listinfo/sunray-users >>> >>> _______________________________________________ >>> SunRay-Users mailing list >>> [email protected] >>> http://www.filibeto.org/mailman/listinfo/sunray-users >> _______________________________________________ >> SunRay-Users mailing list >> [email protected] >> http://www.filibeto.org/mailman/listinfo/sunray-users > > _______________________________________________ > SunRay-Users mailing list > [email protected] > http://www.filibeto.org/mailman/listinfo/sunray-users _______________________________________________ SunRay-Users mailing list [email protected] http://www.filibeto.org/mailman/listinfo/sunray-users
