Hello John, > provide kiosk sessions for all folks using a smart card and > NSCM sessions for folks that login without using a smart card?
I am not sure that running kiosk sessions for folks with cards and desktop sessions for those without cards is generally a good plan (your Java Web Start may be a good example of the opposite). We did use the opposite - sunrays without tokens present a kiosk session, and those with tokens present whatever config is attached to the token - a kiosk or a regular (login+desktop) session that the user can easily hotdesk by walking around with the smartcard. SRSS 4.x and maybe even 3.x allowed to configure such a mix. Note that this did need separate tokens - either kiosk OR regular can be assigned to one. Users that needed two or more options had to have several cards with stickers to denote the card's role. I can't quickly remember the incantations needed in command-line, but you can take a look at FLButselector project (on SunRay Users Wiki site), I think I wrote down the how-to as part of the project's readme. To recap, that project allows to flexibly configure different kiosk sessions and verify that a regular session's user logged in with the same username as configured for the token (or a "dtadmin" regular desktop session can be made that can log-in as anyone, subject to knowledge of the password by person carrying the card). HTH, //Jim Klimov _______________________________________________ SunRay-Users mailing list [email protected] http://www.filibeto.org/mailman/listinfo/sunray-users
