SunRay

Un article de OpenWikiBSD.

Mise à jour

Depuis le rachat de Sun par Oracle, les produits deviennent de plus en plus fermés, payants, et les licences d'usage et d'achat se réduisent comme peau de chagrin. Résultat, je ne sais même pas si on peut désormais télécharger encore SRSS.... Non, inutile de demander de laisser un SRSS 4.2 en DL par ici...


C'est assez triste ce que vous faites de ce beau produit Mr Ellison !


Sommaire

Versions au 01/10/2009

  • Solaris 10 U5 sous X86
  • SRSS 4.2
  • SunRay Connector for Windows OS 2.2
  • Sun Desktop Client

Installation

  • Il faut télécharger sur le site de sun les composants suivants :
    • Solaris 10 (Ca doit marcher sous Linux, mais vous perdez le hotdesking (suivi des sessions par carte à puce) )
    • [1] SRSS 4.2 : srss_4.2_solaris.zip
    • Le connecteur RDP pour windows :srwc_2.2_solaris.zip
    • Le client SunRay our postes lourds Windows
  • Il faut modifier la version de java:

JRE at /usr/java is 1.5.0, need >= 1.6

  • Télécharger ici
chmod +x  jre-6u16-solaris-i586.sh
./jre-6u16-solaris-i586.sh
mv /usr/java /tmp
mv jre1.6.0_16 /usr/java
java -version

java version "1.6.0_16"
Java(TM) SE Runtime Environment (build 1.6.0_16-b01)
Java HotSpot(TM) Server VM (build 14.2-b01, mixed mode)

Ca marche !


unzip srss_4.2_solaris.zip 
cd srss_4.2
cd Supplemental/Apache_Tomcat/
gzcat apache-tomcat-5.5.20.tar.gz | /usr/sfw/bin/gtar -xf -
mv apache-tomcat-5.5.20 /opt/
ln -s /opt/apache-tomcat-5.5.20/ /opt/apache-tomcat
cd ../../
chmod ug+x ut*
./utinstall

avec 1 modif :

  • choix GUI en FR

=> /var/adm/log/utinstall.2008_10_24_17:48:37.log

sync;sync;init 6
  • Vérifier que /etc/hosts contient

@IP Nom_du_serveur_SunRay (aka SRS)


/opt/SUNWut/sbin/utconfig 

Tout sauf

  • Enable remote server administration? (y/[n])? y
  • Configure Sun Ray Kiosk Mode? (y/[n])? y

P46 : Using SRS on an LAN

  • cd /opt/SUNWut/sbin
  • ifconfig -a va vous donner l'adresse et surtout l'interface réseau su SRS


  1. ./utadm -A 10.0.0.0
      1. Configuring /etc/nsswitch.conf
      2. Configuring Service information for Sun Ray
      3. Disabling Routing
 Selected values for subnetwork "10.0.0.0" 
   net mask:           255.255.255.0
   no IP addresses offered
   auth server list:   10.0.0.50
   firmware server:    10.0.0.50
 Accept as is? ([Y]/N): Y
      1. Configuring firmware version for Sun Ray
      2. Successfully enabled tftp for firmware downloads
       All the units served by "Solaris" on the 10.0.0.0
       network interface, running firmware other than version
       "4.0_48_2007.08.01.15.48" will be upgraded at their next power-on.
      1. Configuring Sun Ray Logging Functions


DHCP is not currently running, should I start it? ([Y]/N):


./utadm -L on
      1. Turning on Sun Ray LAN connection

NOTE: utrestart must be run before LAN connections will be allowed

  1. ./utrestart 

A warm restart has been initiated... messages will be logged to /var/opt/SUNWut/log/messages.

  1. ./utadm -L on
  • utadm lancera l'aide


Ajout des services SRWC aka Terminal server

cp /root/srwc_2.2_solaris.zip /tmp/
cd /tmp
unzip srwc_2.2_solaris.zip 
cd srwc_2.2
./ installer
  • A la question du groupe, j'ai répondu utadmin.. A vérifier
  • Si vous lancez un uttsc, ça ne marchera pas, il faut lancer les services Proxy srconnector , sinon :
No entry for connector proxy found in /etc/services, using default port 7014 
  • Solution : /opt/SUNWuttsc/sbin/uttscadm -c

Tips tirés de là.


Ajouter à un FOG (Groupe de basculement, FailOverGroup)

Lors de l'install :

Configure this server for a failover group? (y/[n])? y

..

You have chosen to configure this server for a failover group.

All servers in a failover group must share a unique signature, 
which is a string of 8 or more characters where at least two 
characters are letters and at least one is not.
 
Enter signature: 

Puis sur le premier serveur:

  • Ajouter un FOG :
/opt/SUNWut/sbin/utgroupsig 
Enter signature: 
Re-enter signature: 
  • Sur le secondaire :
/opt/SUNWut/sbin/utreplica -s primaire

Sun Ray Core Services 4.2
Administration Failover Configuration

Converting Administration Standalone Server to Administration Secondary
Stopping Sun Ray Data Store daemon
Sun Ray Data Store daemon stopped
### updating the Datastore init file
        ...already configured with port 7012
### updating the SRDS config file
        ...done
### updating the system services file
        ...done
### updating the SunRay admin config file
        ...done
Starting Sun Ray Data Store daemon .
Thu Oct  8 17:36 : utdsd starting

Restarting Sun Ray Core Services ...
stopping authentication manager
starting session manager
starting device manager
starting printer service
starting serial service
starting authentication manager

Configuration of Failover Administration has completed.
Please check the log file, /var/adm/log/utreplica.2009_10_08_17:36:58.log, for errors.

/opt/SUNWut/sbin/utadm -L on
### Turning on Sun Ray LAN connection

NOTE: utrestart must be run before LAN connections will be allowed

/opt/SUNWut/sbin/utrestart
A warm restart has been initiated... messages will be logged to /var/opt/SUNWut/log/messages.

  • Sur le primaire :
/opt/SUNWut/sbin/utreplica -p -a secondaire

Sun Ray Core Services 4.1
Administration Failover Configuration

Converting Administration Standalone Server to Administration Primary
thales.lyceenobel.org: Connexion refusée
utreplica: Warning, Unable to determine the replication status of secondary
 server thales. It's possible that the secondary server is not yet configured.

Do you want to continue with configuration of this server as a primary? (y/[n])? y
### updating the SRDS config file
        ...done
Stopping Sun Ray Data Store daemon
Sun Ray Data Store daemon stopped
Starting Sun Ray Data Store daemon .
Thu Oct  8 17:44 : utdsd starting
Starting utpushd daemon

Restarting Sun Ray Core Services ...
stopping authentication manager
starting session manager
starting device manager
starting printer service
starting serial service
starting authentication manager

Configuration of Failover Administration has completed.
Please check the log file, /var/adm/log/utreplica.2009_10_08_17:43:36.log, for errors.

  • On vérifie que tout est OK :
 /opt/SUNWut/sbin/utreplica -l

Sun Ray Core Services 4.2
Administration Failover Configuration

thales is a secondary server
The primary server is: solaris
/opt/SUNWut/sbin/utreplica -l

Sun Ray Core Services 4.1
Administration Failover Configuration

solaris is a primary server for:
thales

Migrer un serveur SRSS

Il est beaucoup plus simple de faire la migration avec le primaire vivant....

Primaire est vivant

Primaire est mort

/opt/SUNWut/srds/lib/utldbmcat /var/opt/SUNWut/srds/dbm.ut/id2entry.dbb > /tmp/store


Regarder les deux docs suivants pour savoir comment faire si le primaire est HS !

Doc de migration/Nettoyage

Autre doc plus généraliste


  • Ajouter le nouveau au FOG en tant que secondaire
  • Mettre le secondaire en primaire et le primaire en secondaire

  • Débrancher l'ancien (voire l'éteindre proprement avant, on ne sait jamais....)
  • Sortir le nouveau du réplicat
/opt/SUNWut/sbin/utreplica -u
Sun Ray Core Services 4.2
Administration Failover Configuration

Converting Server from Administration Secondary to Administration Standalone

Restarting Sun Ray Data Store ...
Stopping Sun Ray Data Store daemon
Sun Ray Data Store daemon stopped
Starting Sun Ray Data Store daemon .
Tue Nov 17 13:17 : utdsd starting

Restarting Sun Ray Core Services ...
stopping authentication manager
starting session manager
starting device manager
starting printer service
starting serial service
starting authentication manager

Unconfiguration of Administration Failover has completed.

Please run /opt/SUNWut/sbin/utconfig -u to complete the process of converting it to a standalone server.
Please check the log file, /var/adm/log/utreplica.2009_11_17_13:17:28.log, for errors.

# /opt/SUNWut/sbin/utreplica -l

Sun Ray Core Services 4.2
Administration Failover Configuration

No replica context for this server

FOG BugTracking

  • La redondance ne fonctionne pas
Thales utreader [PID]: [ID XXX user.info] open_connection(): Could not bind to DS server Thales - Invalid credentials
  • Explication :
    • Les mdp d'admin LDAP sont différents entre le primaire et le secondaire :
  • Solution :
/opt/SUNWut/sbin/utpw 
Enter new UT admin password: 
Re-enter new UT admin password: 
Enter old UT admin password: 

Changing LDAP password...
Done.
Changing password file...
Done.

Note: If this server is part of a failover 
      configuration, please run utpw on the 
      remaining servers.
  • La redondance ne fonctionne toujours pas
  • Explication possible :
    • Les politiques sont différentes entre le primaire et le secondaire :
  • Solution :
/opt/SUNWut/sbin/utpolicy -a -r card -z pseudo -g

The authentication manager must be restarted for changes to take effect. 
If a significant policy change has been made then a cold restart must be
initiated with the following command, note that all existing sessions 
will be terminated:

        /opt/SUNWut/sbin/utrestart -c

If a minor policy change was made then it is not necessary to terminate 
existing sessions and a warm restart is sufficient by executing the 
following command:

        /opt/SUNWut/sbin/utrestart

    • Seule le restart cold a marché (avé le -c)


Debug

Si vos logs se remplissent de

May  3 14:59:54 solaris utauthd: [ID 874716 user.info] WatchIO UNEXPECTED: 172.16.197.252 protocolError: networkNotAllowed
May  3 14:59:54 solaris utauthd: [ID 303596 user.info] WatchIO UNEXPECTED: WatchIO.doRemove(null)
May  3 14:59:58 solaris utauthd: [ID 493148 user.info] WatchIO UNEXPECTED: Connection from 172.16.198.254 is not allowed
May  3 14:59:58 solaris utauthd: [ID 215981 user.info] WatchIO UNEXPECTED: 172.16.198.254 protocolError: networkNotAllowed
May  3 14:59:58 solaris utauthd: [ID 303596 user.info] WatchIO UNEXPECTED: WatchIO.doRemove(null)

Vous avez un souci de connexion, dont la cause m'est ...inconnue

  • Solution :

Sur le master :

/opt/SUNWut/sbin/utadm -r

/opt/SUNWut/sbin/utadm -A 172.16.0.0
### Configuring /etc/nsswitch.conf
### Configuring Service information for Sun Ray
### Disabling Routing
  Selected values for subnetwork "172.16.0.0" 
    net mask:           255.255.0.0
    no IP addresses offered
    auth server list:   172.16.0.8
    firmware server:    172.16.0.8
  Accept as is? ([Y]/N): n
  netmask: 255.255.0.0 (cannot be changed - system defined netmask)
  Do you want to offer IP addresses for this subnet? (Y/[N]): 
  auth server list:     172.16.0.8
To read auth server list from file, enter file name: 
Auth server IP address (enter <CR> to end list): 172.16.0.8
Auth server IP address (enter <CR> to end list): 
If no server in the auth server list responds, 
should an auth server be located by broadcasting on the network? ([Y]/N): 
  new firmware server: [172.16.0.8] 172.16.0.9
  Selected values for subnetwork "172.16.0.0" 
    net mask:           255.255.0.0
    no IP addresses offered
    auth server list:   172.16.0.8
    firmware server:    172.16.0.9
  Accept as is? ([Y]/N): 
### Configuring firmware version for Sun Ray
        All the units served by "solaris" on the 172.16.0.0
        network interface, running firmware other than version
        "4.1_50_2008.09.25.12.37" will be upgraded at their next power-on.

### Configuring Sun Ray Logging Functions
### Turning on Sun Ray LAN connection

NOTE: utrestart must be run before LAN connections will be allowed

DHCP is not currently running, should I start it? ([Y]/N): n

#### DHCP daemon not started.  You will need to manually start one
using "/etc/init.d/dhcp start".

# /opt/SUNWut/sbin/utrestart
A warm restart has been initiated... messages will be logged to /var/opt/SUNWut/log/messages.
# /opt/SUNWut/sbin/utadm -l
LAN connections: On
Subnetwork: 172.16.0.0
        Netmask=        255.255.0.0
        AuthSrvr=       172.16.0.8
        AltAuth=        172.16.0.8 255.255.255.255 
        FirmwareSrvr=   172.16.0.9


Sur le Slave :

/opt/SUNWut/sbin/utadm -r
### Removing Sun Ray information for subnetwork "172.16.0.0"
# /opt/SUNWut/sbin/utadm -A 172.16.0.0
### Configuring /etc/nsswitch.conf
### Configuring Service information for Sun Ray
  Selected values for subnetwork "172.16.0.0" 
    net mask:           255.255.0.0
    no IP addresses offered
    auth server list:   172.16.0.9
    firmware server:    172.16.0.9
  Accept as is? ([Y]/N): n
  netmask: 255.255.0.0 (cannot be changed - system defined netmask)
  Do you want to offer IP addresses for this subnet? (Y/[N]): 
  auth server list:     172.16.0.9
To read auth server list from file, enter file name: 
Auth server IP address (enter <CR> to end list): 172.16.0.8
Auth server IP address (enter <CR> to end list): 
If no server in the auth server list responds, 
should an auth server be located by broadcasting on the network? ([Y]/N): 
  new firmware server: [172.16.0.9] 
  Selected values for subnetwork "172.16.0.0" 
    net mask:           255.255.0.0
    no IP addresses offered
    auth server list:   172.16.0.8
    firmware server:    172.16.0.9
  Accept as is? ([Y]/N): 
### Configuring firmware version for Sun Ray
        All the units served by "Thales" on the 172.16.0.0
        network interface, running firmware other than version
        "4.2_49_2009.08.27.18.08" will be upgraded at their next power-on.

### Configuring Sun Ray Logging Functions
### Turning on Sun Ray LAN connection

NOTE: utrestart must be run before LAN connections will be allowed
/opt/SUNWut/sbin/utadm -L on
### Turning on Sun Ray LAN connection

NOTE: utrestart must be run before LAN connections will be allowed

 /opt/SUNWut/sbin/utrestart
A warm restart has been initiated... messages will be logged to /var/opt/SUNWut/log/messages.
/opt/SUNWut/sbin/utadm -l
LAN connections: On
Use IPv4 multicast
Subnetwork: 172.16.0.0
        Netmask=        255.255.0.0
        AuthSrvr=       172.16.0.8
        AltAuth=        172.16.0.8 255.255.255.255 
        FirmwareSrvr=   172.16.0.9
        NewTver=        4.2_49_2009.08.27.18.08


Accessoirement le master n'a que faire de gérer des sessions SRSS

/opt/SUNWut/sbin/utadm -L off
/opt/SUNWut/sbin/utrestart

Add-ons

Customizing

Maj Firmware

De la liste sunray-users@filibeto.org:

Pour GUI et VPN/GUI

  • /opt/SUNWut/lib/firmware_gui
  • Puis ./utfwadm -A -f ../lib/firmware_gui/CoronaP8 -e MAC_ADDRESS

The firmware is in the same directory as the other firmware, except it's prefixed with GUI_ or somewhere in the name. The SRSS Administration guide details how you need to force that GUI version down to the clients. It's not enabled by default. You need to explicitly enable the GUI firmware. look at 'man -M /opt/SUNWut/man utfwadm' For example, if you are using .parms files to configure your devices.... /opt/SUNWut/sbin/utfwadm -AaV -i /tftpboot/srconfig -f /opt/SUNWut/lib/firmware_gui This will att the contents of a simple text file called srconfig to the .parms files and also configure the GUI firmware. The srconfig file should only have one line. servers=<ip.of.server.1>,<ip.of.server.2>,<ip.of.server.3> These are the servers in your FOG.

SRSS Client LDAP

Client LDAP

Commandes

Applicatives

  • Session disponibles
/opt/SUNWut/sbin/utkiosk -l 

session

  • Applications d'une session
/opt/SUNWut/sbin/utkiosk -e session
KIOSK_SESSION=jds3
KIOSK_SESSION_TIMEOUT_DETACHED=604800
KIOSK_SESSION_APPLIST=desc:calculator:user;
exec:/usr/bin/firefox:auto;
exec:/usr/bin/gedit:user;U
exec:/usr/bin//nautilus:user;computer:///
exec:/usr/bin/gnome-terminal:user;
exec:/usr/bin/staroffice:user;

FireFox

  • Installer un proxy en mode kiosk :


AJout du proxy du slis :

vi /usr/lib/firefox/defaults/pref/firefox.js


pref("network.proxy.type", 1);   //Pour selectionner le reglage manuel du proxy
pref("network.proxy.http", "slis.lyceenobel.org");
pref("network.proxy.http_port", 3128);
pref("network.proxy.ssl", "slis.lyceenobel.org");
pref("network.proxy.ssl_port", 3128);
pref("network.proxy.socks", "slis.lyceenobel.org");
pref("network.proxy.socks_port", 3128);
pref("network.proxy.socks_version", 5);
pref("network.proxy.socks_remote_dns", false);
pref("network.proxy.no_proxies_on", "localhost, 127.0.0.1, 172.16.0.0, lyceenobel.org");
pref("browser.startup.homepage", "http://www.lyceenobel.org");


Face à un serveur Windows ? Trop fastoche

  • Accès au serveur windows par RDP
/opt/SUNWuttsc/bin/uttsc -m -u User -d Domaine -s Monserveur 
  • Accès au serveur Windows en RDP avec les identifiants de la Carte à puce
/opt/SUNWuttsc/bin/uttsc -m -u $(/opt/SUNWut/sbin/utuser -p `env | grep SUN_SUNRAY_TOKEN | cut -d"=" -f2` |
 grep "User Name" | cut -d"=" -f2 |cut -d" " -f2) -d Domaine Serveur
  • Monter la clé USB locale sur le serveur windows

Attention, ce script ne monte la clé locale sur le serveur windows distant QUE si elle a été insérée avant le début de la session rdp !

#!/bin/ksh
USBDISK=`/opt/SUNWut/bin/utdiskadm -l |tail -1 | cut -d" " -f21-30`
echo $USBDISK
if [ "$USBDISK" != "" ]
 then
/opt/SUNWuttsc/bin/uttsc -m -r disk:usb=$USBDISK  -u $(/opt/SUNWut/sbin/utuser -p `env | grep SUN_SUNRAY_TOKEN |
 cut -d"=" -f2` | grep "User Name" | cut -d"=" -f2 |cut -d" " -f2) -d Domaine Serveur
else
/opt/SUNWuttsc/bin/uttsc -m -u $(/opt/SUNWut/sbin/utuser -p `env | grep SUN_SUNRAY_TOKEN | cut -d"=" -f2` |
 grep "User Name" | cut -d"=" -f2 |cut -d" " -f2) -d Domaine Serveur
fi
  • Reste à faire
    • Ecouter un son /Serveur Windows


Add-ons
  • SRWC Lockscreen Indispensable :

Verrouillage des sessions Windows lors du retrait de la carte

et là aussi

Suivre les instructions et modifier

/etc/opt/SUNWkio/sessions/uttsc.conf
KIOSK_SESSION_ARGS="-t 1800 -- -m -b -a 24 -f -r sound -u "" -d nobel pericles"

Un redémarrage des sessions plus tard et le retrait de la carte entraine un verrouillage de la session Windows.

Serveur

  • Politique de session
/opt/SUNWut/sbin/utpolicy
# Current Policy:
-a -m -r card -k card -g
  • Pour mémoire, la politique doit être la même sur tous les serveurs d'un FOG.
  • Donne l'état du groupe de failover
/opt/SUNWut/sbin/utgstatus
/opt/SUNWut/sbin/utgstatus
host flags    interface     flags
              172.16.0.0/16      
----------    -------------------
solaris TN    172.16.0.8      UA-
Thales  TN    172.16.0.9      UA-


  • Etat du mode kiosque
/opt/SUNWkio/bin/kioskuseradm show
Current kiosk user account settings:
  user name prefix:   utku
  first account uid:  150000
  number of accounts: 25
  kiosk group name:   utkiosk
  kiosk group gid:    auto


  • Faire du multiécran.

Nécessite un redémarrage à froid du serveur.

/opt/SUNWut/sbin/utmhadm -a BocalMulti -g 2x1 -p 00144fc30003 -l 00144fc30003,00144fa6392a 

Crée une matrice d'écran

    • de 2 écrans de large par 1 de haut (maxi 16 écrans)
    • La console maitresse est : 00144fc30003
    • L'écran de gauche est celui connecté au premier DTU : 00144fc30003
    • L'écran de droite est celui connecté au second DTU : 00144fa6392a
1 Group for multihead added.
    • Etat du groupe multiécran
/opt/SUNWut/sbin/utmhadm BocalMulti

Multihead Group    Geometry           CIDs                            
------------------ ------------------ --------------------------------
BocalMulti         geometry=1x2       IEEE802.00144fa6392a 
                                      IEEE802.00144fc30003 (P)


  • Etat du réseau vers chacun des DTU
/opt/SUNWut/sbin/utcapture -r 
 TERMINALID      TIMESTAMP TOTAL PACKET   TOTAL LOSS   BYTES SENT PERCENT LOSS      LATENCY
00144fa6392a 20081205090052            0            0            0        0.000        0.876
00144fa7f013 20081205090052         4214            3      5704678        0.000        0.672
00144fc30003 20081205090052         4072            0      5548720        0.000        0.849
00144fc30aeb 20081205090052         1148            0       332864        0.000        0.823
00144fc30b01 20081205090052         4092            2      5560724        0.000        0.896
00144fc30b0c 20081205090052         4214            3      5704678        0.000        0.908
^C

A ma connaissance, seul les deux dernières colonnes sont nécessaires pour vérifier la qualité de la liaison.

Gestion des utilisateurs

Liste
  • Liste des utilisateurs et leur mode
/opt/SUNWut/sbin/utuser -L
Token ID                       Server          Port  User Name                      Session Type    Other Info
------------------------------ --------------- ----- ------------------------------ --------------- ---------------
Payflex.501336df00130100                               0           polyp                       kiosk           001
.
.
10 tokens total.
  • Liste des utilisateurs actuellement connectés
   /opt/SUNWut/sbin/utuser -L -g
Token ID                       Server Name                    User Name                     
------------------------------ ------------------------------ ------------------------------
pseudo.00144fa9f013            solaris                        ???                           

4 users currently logged in.
  • Donne les caractéristiques d'un token particulier
/opt/SUNWut/sbin/utuser -Li Payflex.501076df00130100

Token ID                       Server          Port  User Name                      Session Type    Other Info
------------------------------ --------------- ----- ------------------------------ --------------- ---------------
Payflex.501336df00130100                           0 polyp                           kiosk           001

1 token total.
  • Toutes les infos sur l'utilisateur d'un token
/opt/SUNWut/sbin/utuser -p Payflex.501076df00130100 
Current Properties:
  User Name          = polyp
  Other Info         = 001
  Server Name        = 
  Server Port        = 0
  Logical Token      = user.12227955-7053
  User Created       = 11/10/2008 15:39:15
  Session Type       = kiosk

  Token                                     Enabled?
  ----------------------------------------  --------
  Payflex.501076df00130100                  Yes


/opt/SUNWut/sbin/utdesktop -l -c
Desktop ID   MHGroup       Token                 User      Location
------------ ------------- --------------------- --------- --------------------
00144fa6392a S:BocalMulti  IEEE802.00144fa6392a  -         Bocal2
00144fa7f013 -             ???                   -         104
00144fc30003 P:BocalMulti  ???                   -         Bocal
00144fc30aeb -             ???                   -         117
00144fc30b01 -             ???                   -         
00144fc30b0c -             ???                   -         CDI

6 desktops currently connected.

MHGroup montre que Bocal2 est l'écran secondaire (voir Multiécran) de la console primaire Bocal.


  • Envoyer un message à tous les utilisateurs
 /opt/SUNWut/sbin/utwall -a /usr/demo/SOUND/sounds/gong.au -t 'salut' -m 'sujet' ALL
  • Envoyer un message à un utilisateur
/opt/SUNWut/sbin/utwall -a /usr/demo/SOUND/sounds/gong.au -t 'salut' -m 'sujet' -v polyp
USER       ACTION
utwall: error, unknown username 'polyp'
mail       Total:    0
annunciate Total:    0


Ecrire
  • /opt/SUNWut/sbin/utwall -a /usr/demo/SOUND/sounds/gong.au -d polyp < /tmp/toto 
utwall: error, unknown username 'polyp'


Modifier
  • J'ajoute 45 compte au mode kiosk
/opt/SUNWkio/bin/kioskuseradm extend -c 45
Validating new user ids.
Validating new user accounts.
Configuring new kiosk user accounts:
.............................................
70 users configured

Si jamais l'erreur suivante apparait:

/opt/SUNWkio/bin/kioskuseradm extend -c 45
Validating new user ids.
Some requested user ids are in use.
- polyp (uid=150025) - 
Validating new user accounts.

C'est que vous avez créé des comptes APRES la mise en place du mode kiosk et il y a eu collision d'UID.

Pour corriger :

vi /etc/passwd

Changer l'UID du compte fautif

pwconv
chown -R uid /home/compte

Gestion des comptes utilisateurs en mode kiosk

Export des données

  • Récupération des données de l'annuaire

SRSS fait tourner sa base d'infos sur un annuaire au format LDAP

 ldapsearch -x -p 7012 -h 172.16.0.10 -v -b 'utname=users,utname=solaris,o=v1,o=utdata' "(objectClass=*)"

Moi, je m'en sert pour importer automatiquement (crontab) les users dans l'annuaire du se3, groupe sunray, qui sert à son tour pour créer automatiquement les comptes dans la liste des utilisateurs.


Gestion des DTU (Station Sunray)

  • Paramètres d'une DTU
/opt/SUNWut/sbin/utquery -d 172.16.197.254
terminalID=00144fd358e1
        terminalIPA=172.16.197.254
        model=SunRayP8
        currentAuth=172.16.0.8
        currentFW=4.2_49_2009.08.27.18.08
        currentBarrier=420
        currentBarrierLevel=420
        currentMTU=1500
        Subnet=255.255.0.0
        Router=172.16.0.5
        MTU=1500
        LeaseTim=60000
        DHCPServer=172.16.0.2
        INFORMServer=172.16.0.9
        AuthSrvr=172.16.0.9
        AuthPort=7009
        LogHost=172.16.0.9
        FwSrvr=172.16.0.9
        NewTVer=4.2_49_2009.08.27.18.08
        FWservType=FWSrvr
        speed=100F
        parmsVersion=4.2_49_2009.08.27.18.08
        parmsBarrier=420
        configMTU=1500
        AltAuth=172.16.0.9
        dnsList=172.16.0.5,193.49.64.5
        dname=lyceenobel.org
        stopqon=0
        bandwidth=100000000

Que faut-il sauvegarder ?

Infos supplementaires

Réseau

A configurer sur les switches Cisco

Tiré de la liste sunray-users@filibeto.org :

One thing I learned about Cisco switches long ago, do a "set port host" on all ports not connected to other Cisco equipment. Cisco switches do Channel and Trunk arbitration before anything else, and during the time the switch port spends on channel and trunk arbitration, the attached equipment is attempting to, and failing, at speed and duplex arbitration. The end result is that one end of the link is doing half, while the other end is doing full. Not a pretty sight.

Impression

Suit l'user

Installing Follow-Me printing support - 0.3 ...
NOTE  If you are using the the built-in Sun Ray Connector session, you
      will need to add '-r printer:SR-Default' to the Arguments field
      of the Sun Ray Admin GUI so that new sessions will forward the
      printer

      If you are using the ICA-Kiosk-session add on component, your
      printer will be forwarded automatically for new sessions.

Please assign your desktops a default printer by adding the print
queue name to the 'Other Info' field of the selected desktop in the
Sun Ray Admin GUI.

See /opt/SRSS-Addons/FollowMe/README for mor information.


Références


Promo SUN Matching Grant

Tarifs Sun éducation. En gros: 1 machine achetée plein pot, l'autre identique offerte. Sauf les baies de stockage à 50%.

Valable jusqu'au 20 Mai 2009

Image:MATCHING GRANT FY09H2 EURO ENDUSER 03FEB09.pdf


Un sale petit voleur

Il n'a jamais pris la peine de demander la permission de faire du copier/coller de cette doc. Dommage, car le reste de la doc est sympa...sauf si elle a été piquée ailleurs également sans aucun respect !

Marrant la page d'accueil  :

Copyright © 2004-2009, Eric Cantin (www.cants.org), tous droits réservés. Protégé par les lois du copyright des États-Unis et du Canada et par des traités internationaux. Cants, Lévis, Québec 15 juin 2009.

Bravo !