SunRay community:
We have happily run a zero-administration smart card policy and NCSM on
about 30 Sunrays on a Solaris (10u6, I think) system running SRSS 4.2 (I
think) for a long time.
We now have a reason to begin to explore the use of kiosk mode. Because
I want to disrupt existing use minimally, I thought that I would start
by trying to set up one smart card to that it would be tied to a
kiosk-mode session and then locally configure our kiosk session with the
handful of applications that we want to be available in kiosk mode which
will likely include a custom Java Web Start app (that has it's own
authentication), access to the firefox browser, and maybe access to ssh.
Thus far, I've run utpolicy -k to create a collection of utku*
kiosk-mode users.
I've used a card reader to find the token ID of the smart card that I'd
like to assign to kiosk mode.
I then realized that I first need to register this smart card and then
likely use utkioskoverride to assign that smart card token to kiosk
session. Since we've always run zero-administration, I've never
actually registered a smart card in the 13 years that we've been running
Sunrays.
What I can't seem to find is proper syntax of the utuser command that
would register that smart card appropriately for kiosk use.
Is this a command-line usage that would work to tie a particular smart
card token to one of the utku* users?
utuser -a "<tokenID>,,,utku23,"
Am I also correct that in general I'd want to tie each smart card token
to a different utku* user to avoid kiosk-mode session collisions/confusion?
Or am I hopelessly confused by this kiosk-mode stuff and how to use the
utku* users?
Thanks for your consideration,
John
_______________________________________________
SunRay-Users mailing list
[email protected]
http://www.filibeto.org/mailman/listinfo/sunray-users
