SunRay
Un article de OpenWikiBSD.
Mise à jour
Depuis le rachat de Sun par Oracle, les produits deviennent de plus en plus fermés, payants, et les licences d'usage et d'achat se réduisent comme peau de chagrin. Résultat, je ne sais même pas si on peut désormais télécharger encore SRSS.... Non, inutile de demander de laisser un SRSS 4.2 en DL par ici...
C'est assez triste ce que vous faites de ce beau produit Mr Ellison !
Sommaire |
Versions au 01/10/2009
- Solaris 10 U5 sous X86
- SRSS 4.2
- SunRay Connector for Windows OS 2.2
- Sun Desktop Client
Installation
- Il faut télécharger sur le site de sun les composants suivants :
- Solaris 10 (Ca doit marcher sous Linux, mais vous perdez le hotdesking (suivi des sessions par carte à puce) )
- [1] SRSS 4.2 : srss_4.2_solaris.zip
- Le connecteur RDP pour windows :srwc_2.2_solaris.zip
- Le client SunRay our postes lourds Windows
- http://wikis.sun.com/display/SRSS4dot2/Sun+Ray+Server+Software+4.2+Installation+and+Configuration+Guide+(Solaris)
- | Requirements
- Il faut modifier la version de java:
JRE at /usr/java is 1.5.0, need >= 1.6
- Télécharger ici
chmod +x jre-6u16-solaris-i586.sh ./jre-6u16-solaris-i586.sh mv /usr/java /tmp mv jre1.6.0_16 /usr/java
java -version java version "1.6.0_16" Java(TM) SE Runtime Environment (build 1.6.0_16-b01) Java HotSpot(TM) Server VM (build 14.2-b01, mixed mode)
Ca marche !
unzip srss_4.2_solaris.zip cd srss_4.2 cd Supplemental/Apache_Tomcat/ gzcat apache-tomcat-5.5.20.tar.gz | /usr/sfw/bin/gtar -xf - mv apache-tomcat-5.5.20 /opt/ ln -s /opt/apache-tomcat-5.5.20/ /opt/apache-tomcat cd ../../ chmod ug+x ut* ./utinstall
avec 1 modif :
- choix GUI en FR
=> /var/adm/log/utinstall.2008_10_24_17:48:37.log
sync;sync;init 6
- Vérifier que /etc/hosts contient
@IP Nom_du_serveur_SunRay (aka SRS)
/opt/SUNWut/sbin/utconfig
Tout sauf
- Enable remote server administration? (y/[n])? y
- Configure Sun Ray Kiosk Mode? (y/[n])? y
P46 : Using SRS on an LAN
-
cd /opt/SUNWut/sbin
- ifconfig -a va vous donner l'adresse et surtout l'interface réseau su SRS
-
./utadm -A 10.0.0.0
- Configuring /etc/nsswitch.conf
- Configuring Service information for Sun Ray
- Disabling Routing
Selected values for subnetwork "10.0.0.0" net mask: 255.255.255.0 no IP addresses offered auth server list: 10.0.0.50 firmware server: 10.0.0.50 Accept as is? ([Y]/N): Y
- Configuring firmware version for Sun Ray
- Successfully enabled tftp for firmware downloads
All the units served by "Solaris" on the 10.0.0.0
network interface, running firmware other than version
"4.0_48_2007.08.01.15.48" will be upgraded at their next power-on.
- Configuring Sun Ray Logging Functions
DHCP is not currently running, should I start it? ([Y]/N):
./utadm -L on
- Turning on Sun Ray LAN connection
NOTE: utrestart must be run before LAN connections will be allowed
-
./utrestart
A warm restart has been initiated... messages will be logged to /var/opt/SUNWut/log/messages.
-
./utadm -L on
- utadm lancera l'aide
Ajout des services SRWC aka Terminal server
cp /root/srwc_2.2_solaris.zip /tmp/ cd /tmp unzip srwc_2.2_solaris.zip cd srwc_2.2 ./ installer
- A la question du groupe, j'ai répondu utadmin.. A vérifier
- Si vous lancez un uttsc, ça ne marchera pas, il faut lancer les services Proxy srconnector , sinon :
No entry for connector proxy found in /etc/services, using default port 7014
- Solution : /opt/SUNWuttsc/sbin/uttscadm -c
Tips tirés de là.
Ajouter à un FOG (Groupe de basculement, FailOverGroup)
Lors de l'install :
Configure this server for a failover group? (y/[n])? y
..
You have chosen to configure this server for a failover group. All servers in a failover group must share a unique signature, which is a string of 8 or more characters where at least two characters are letters and at least one is not. Enter signature:
Puis sur le premier serveur:
- Ajouter un FOG :
/opt/SUNWut/sbin/utgroupsig Enter signature: Re-enter signature:
- Sur le secondaire :
/opt/SUNWut/sbin/utreplica -s primaire
Sun Ray Core Services 4.2
Administration Failover Configuration
Converting Administration Standalone Server to Administration Secondary
Stopping Sun Ray Data Store daemon
Sun Ray Data Store daemon stopped
### updating the Datastore init file
...already configured with port 7012
### updating the SRDS config file
...done
### updating the system services file
...done
### updating the SunRay admin config file
...done
Starting Sun Ray Data Store daemon .
Thu Oct 8 17:36 : utdsd starting
Restarting Sun Ray Core Services ...
stopping authentication manager
starting session manager
starting device manager
starting printer service
starting serial service
starting authentication manager
Configuration of Failover Administration has completed.
Please check the log file, /var/adm/log/utreplica.2009_10_08_17:36:58.log, for errors.
/opt/SUNWut/sbin/utadm -L on
### Turning on Sun Ray LAN connection
NOTE: utrestart must be run before LAN connections will be allowed
/opt/SUNWut/sbin/utrestart
A warm restart has been initiated... messages will be logged to /var/opt/SUNWut/log/messages.
- Sur le primaire :
/opt/SUNWut/sbin/utreplica -p -a secondaire
Sun Ray Core Services 4.1
Administration Failover Configuration
Converting Administration Standalone Server to Administration Primary
thales.lyceenobel.org: Connexion refusée
utreplica: Warning, Unable to determine the replication status of secondary
server thales. It's possible that the secondary server is not yet configured.
Do you want to continue with configuration of this server as a primary? (y/[n])? y
### updating the SRDS config file
...done
Stopping Sun Ray Data Store daemon
Sun Ray Data Store daemon stopped
Starting Sun Ray Data Store daemon .
Thu Oct 8 17:44 : utdsd starting
Starting utpushd daemon
Restarting Sun Ray Core Services ...
stopping authentication manager
starting session manager
starting device manager
starting printer service
starting serial service
starting authentication manager
Configuration of Failover Administration has completed.
Please check the log file, /var/adm/log/utreplica.2009_10_08_17:43:36.log, for errors.
- On vérifie que tout est OK :
/opt/SUNWut/sbin/utreplica -l Sun Ray Core Services 4.2 Administration Failover Configuration thales is a secondary server The primary server is: solaris
/opt/SUNWut/sbin/utreplica -l Sun Ray Core Services 4.1 Administration Failover Configuration solaris is a primary server for: thales
Migrer un serveur SRSS
Il est beaucoup plus simple de faire la migration avec le primaire vivant....
Primaire est vivant
Primaire est mort
/opt/SUNWut/srds/lib/utldbmcat /var/opt/SUNWut/srds/dbm.ut/id2entry.dbb > /tmp/store
Regarder les deux docs suivants pour savoir comment faire si le primaire est HS !
- Ajouter le nouveau au FOG en tant que secondaire
- Mettre le secondaire en primaire et le primaire en secondaire
- Débrancher l'ancien (voire l'éteindre proprement avant, on ne sait jamais....)
- Sortir le nouveau du réplicat
/opt/SUNWut/sbin/utreplica -u
Sun Ray Core Services 4.2 Administration Failover Configuration Converting Server from Administration Secondary to Administration Standalone Restarting Sun Ray Data Store ... Stopping Sun Ray Data Store daemon Sun Ray Data Store daemon stopped Starting Sun Ray Data Store daemon . Tue Nov 17 13:17 : utdsd starting Restarting Sun Ray Core Services ... stopping authentication manager starting session manager starting device manager starting printer service starting serial service starting authentication manager Unconfiguration of Administration Failover has completed. Please run /opt/SUNWut/sbin/utconfig -u to complete the process of converting it to a standalone server. Please check the log file, /var/adm/log/utreplica.2009_11_17_13:17:28.log, for errors. # /opt/SUNWut/sbin/utreplica -l Sun Ray Core Services 4.2 Administration Failover Configuration No replica context for this server
FOG BugTracking
- La redondance ne fonctionne pas
Thales utreader [PID]: [ID XXX user.info] open_connection(): Could not bind to DS server Thales - Invalid credentials
- Explication :
- Les mdp d'admin LDAP sont différents entre le primaire et le secondaire :
- Solution :
/opt/SUNWut/sbin/utpw
Enter new UT admin password:
Re-enter new UT admin password:
Enter old UT admin password:
Changing LDAP password...
Done.
Changing password file...
Done.
Note: If this server is part of a failover
configuration, please run utpw on the
remaining servers.
- La redondance ne fonctionne toujours pas
- Explication possible :
- Les politiques sont différentes entre le primaire et le secondaire :
- Solution :
/opt/SUNWut/sbin/utpolicy -a -r card -z pseudo -g
The authentication manager must be restarted for changes to take effect.
If a significant policy change has been made then a cold restart must be
initiated with the following command, note that all existing sessions
will be terminated:
/opt/SUNWut/sbin/utrestart -c
If a minor policy change was made then it is not necessary to terminate
existing sessions and a warm restart is sufficient by executing the
following command:
/opt/SUNWut/sbin/utrestart
- Seule le restart cold a marché (avé le -c)
Debug
Si vos logs se remplissent de
May 3 14:59:54 solaris utauthd: [ID 874716 user.info] WatchIO UNEXPECTED: 172.16.197.252 protocolError: networkNotAllowed May 3 14:59:54 solaris utauthd: [ID 303596 user.info] WatchIO UNEXPECTED: WatchIO.doRemove(null) May 3 14:59:58 solaris utauthd: [ID 493148 user.info] WatchIO UNEXPECTED: Connection from 172.16.198.254 is not allowed May 3 14:59:58 solaris utauthd: [ID 215981 user.info] WatchIO UNEXPECTED: 172.16.198.254 protocolError: networkNotAllowed May 3 14:59:58 solaris utauthd: [ID 303596 user.info] WatchIO UNEXPECTED: WatchIO.doRemove(null)
Vous avez un souci de connexion, dont la cause m'est ...inconnue
- Solution :
Sur le master :
/opt/SUNWut/sbin/utadm -r
/opt/SUNWut/sbin/utadm -A 172.16.0.0
### Configuring /etc/nsswitch.conf
### Configuring Service information for Sun Ray
### Disabling Routing
Selected values for subnetwork "172.16.0.0"
net mask: 255.255.0.0
no IP addresses offered
auth server list: 172.16.0.8
firmware server: 172.16.0.8
Accept as is? ([Y]/N): n
netmask: 255.255.0.0 (cannot be changed - system defined netmask)
Do you want to offer IP addresses for this subnet? (Y/[N]):
auth server list: 172.16.0.8
To read auth server list from file, enter file name:
Auth server IP address (enter <CR> to end list): 172.16.0.8
Auth server IP address (enter <CR> to end list):
If no server in the auth server list responds,
should an auth server be located by broadcasting on the network? ([Y]/N):
new firmware server: [172.16.0.8] 172.16.0.9
Selected values for subnetwork "172.16.0.0"
net mask: 255.255.0.0
no IP addresses offered
auth server list: 172.16.0.8
firmware server: 172.16.0.9
Accept as is? ([Y]/N):
### Configuring firmware version for Sun Ray
All the units served by "solaris" on the 172.16.0.0
network interface, running firmware other than version
"4.1_50_2008.09.25.12.37" will be upgraded at their next power-on.
### Configuring Sun Ray Logging Functions
### Turning on Sun Ray LAN connection
NOTE: utrestart must be run before LAN connections will be allowed
DHCP is not currently running, should I start it? ([Y]/N): n
#### DHCP daemon not started. You will need to manually start one
using "/etc/init.d/dhcp start".
# /opt/SUNWut/sbin/utrestart
A warm restart has been initiated... messages will be logged to /var/opt/SUNWut/log/messages.
# /opt/SUNWut/sbin/utadm -l
LAN connections: On
Subnetwork: 172.16.0.0
Netmask= 255.255.0.0
AuthSrvr= 172.16.0.8
AltAuth= 172.16.0.8 255.255.255.255
FirmwareSrvr= 172.16.0.9
Sur le Slave :
/opt/SUNWut/sbin/utadm -r
### Removing Sun Ray information for subnetwork "172.16.0.0"
# /opt/SUNWut/sbin/utadm -A 172.16.0.0
### Configuring /etc/nsswitch.conf
### Configuring Service information for Sun Ray
Selected values for subnetwork "172.16.0.0"
net mask: 255.255.0.0
no IP addresses offered
auth server list: 172.16.0.9
firmware server: 172.16.0.9
Accept as is? ([Y]/N): n
netmask: 255.255.0.0 (cannot be changed - system defined netmask)
Do you want to offer IP addresses for this subnet? (Y/[N]):
auth server list: 172.16.0.9
To read auth server list from file, enter file name:
Auth server IP address (enter <CR> to end list): 172.16.0.8
Auth server IP address (enter <CR> to end list):
If no server in the auth server list responds,
should an auth server be located by broadcasting on the network? ([Y]/N):
new firmware server: [172.16.0.9]
Selected values for subnetwork "172.16.0.0"
net mask: 255.255.0.0
no IP addresses offered
auth server list: 172.16.0.8
firmware server: 172.16.0.9
Accept as is? ([Y]/N):
### Configuring firmware version for Sun Ray
All the units served by "Thales" on the 172.16.0.0
network interface, running firmware other than version
"4.2_49_2009.08.27.18.08" will be upgraded at their next power-on.
### Configuring Sun Ray Logging Functions
### Turning on Sun Ray LAN connection
NOTE: utrestart must be run before LAN connections will be allowed
/opt/SUNWut/sbin/utadm -L on
### Turning on Sun Ray LAN connection
NOTE: utrestart must be run before LAN connections will be allowed
/opt/SUNWut/sbin/utrestart
A warm restart has been initiated... messages will be logged to /var/opt/SUNWut/log/messages.
/opt/SUNWut/sbin/utadm -l
LAN connections: On
Use IPv4 multicast
Subnetwork: 172.16.0.0
Netmask= 255.255.0.0
AuthSrvr= 172.16.0.8
AltAuth= 172.16.0.8 255.255.255.255
FirmwareSrvr= 172.16.0.9
NewTver= 4.2_49_2009.08.27.18.08
Accessoirement le master n'a que faire de gérer des sessions SRSS
/opt/SUNWut/sbin/utadm -L off /opt/SUNWut/sbin/utrestart
Add-ons
Customizing
- http://blogs.sun.com/mplona/entry/customized_sun_ray_kiosk_sessions
- more /etc/opt/SUNWkio/sessions/jds3/README
Maj Firmware
De la liste sunray-users@filibeto.org:
Pour GUI et VPN/GUI
- /opt/SUNWut/lib/firmware_gui
- Puis ./utfwadm -A -f ../lib/firmware_gui/CoronaP8 -e MAC_ADDRESS
The firmware is in the same directory as the other firmware, except it's prefixed with GUI_ or somewhere in the name. The SRSS Administration guide details how you need to force that GUI version down to the clients. It's not enabled by default. You need to explicitly enable the GUI firmware. look at 'man -M /opt/SUNWut/man utfwadm' For example, if you are using .parms files to configure your devices.... /opt/SUNWut/sbin/utfwadm -AaV -i /tftpboot/srconfig -f /opt/SUNWut/lib/firmware_gui This will att the contents of a simple text file called srconfig to the .parms files and also configure the GUI firmware. The srconfig file should only have one line. servers=<ip.of.server.1>,<ip.of.server.2>,<ip.of.server.3> These are the servers in your FOG.
SRSS Client LDAP
Commandes
Applicatives
- Session disponibles
/opt/SUNWut/sbin/utkiosk -l
session
- Applications d'une session
/opt/SUNWut/sbin/utkiosk -e session
KIOSK_SESSION=jds3 KIOSK_SESSION_TIMEOUT_DETACHED=604800 KIOSK_SESSION_APPLIST=desc:calculator:user; exec:/usr/bin/firefox:auto; exec:/usr/bin/gedit:user;U exec:/usr/bin//nautilus:user;computer:/// exec:/usr/bin/gnome-terminal:user; exec:/usr/bin/staroffice:user;
FireFox
- Installer un proxy en mode kiosk :
AJout du proxy du slis :
vi /usr/lib/firefox/defaults/pref/firefox.js
pref("network.proxy.type", 1); //Pour selectionner le reglage manuel du proxy
pref("network.proxy.http", "slis.lyceenobel.org");
pref("network.proxy.http_port", 3128);
pref("network.proxy.ssl", "slis.lyceenobel.org");
pref("network.proxy.ssl_port", 3128);
pref("network.proxy.socks", "slis.lyceenobel.org");
pref("network.proxy.socks_port", 3128);
pref("network.proxy.socks_version", 5);
pref("network.proxy.socks_remote_dns", false);
pref("network.proxy.no_proxies_on", "localhost, 127.0.0.1, 172.16.0.0, lyceenobel.org");
pref("browser.startup.homepage", "http://www.lyceenobel.org");
Face à un serveur Windows ? Trop fastoche
- Accès au serveur windows par RDP
/opt/SUNWuttsc/bin/uttsc -m -u User -d Domaine -s Monserveur
- Accès au serveur Windows en RDP avec les identifiants de la Carte à puce
/opt/SUNWuttsc/bin/uttsc -m -u $(/opt/SUNWut/sbin/utuser -p `env | grep SUN_SUNRAY_TOKEN | cut -d"=" -f2` | grep "User Name" | cut -d"=" -f2 |cut -d" " -f2) -d Domaine Serveur
- Monter la clé USB locale sur le serveur windows
Attention, ce script ne monte la clé locale sur le serveur windows distant QUE si elle a été insérée avant le début de la session rdp !
#!/bin/ksh USBDISK=`/opt/SUNWut/bin/utdiskadm -l |tail -1 | cut -d" " -f21-30` echo $USBDISK if [ "$USBDISK" != "" ] then /opt/SUNWuttsc/bin/uttsc -m -r disk:usb=$USBDISK -u $(/opt/SUNWut/sbin/utuser -p `env | grep SUN_SUNRAY_TOKEN | cut -d"=" -f2` | grep "User Name" | cut -d"=" -f2 |cut -d" " -f2) -d Domaine Serveur else /opt/SUNWuttsc/bin/uttsc -m -u $(/opt/SUNWut/sbin/utuser -p `env | grep SUN_SUNRAY_TOKEN | cut -d"=" -f2` | grep "User Name" | cut -d"=" -f2 |cut -d" " -f2) -d Domaine Serveur fi
- Reste à faire
- Ecouter un son /Serveur Windows
Add-ons
- SRWC Lockscreen Indispensable :
Verrouillage des sessions Windows lors du retrait de la carte
et là aussi
Suivre les instructions et modifier
/etc/opt/SUNWkio/sessions/uttsc.conf
KIOSK_SESSION_ARGS="-t 1800 -- -m -b -a 24 -f -r sound -u "" -d nobel pericles"
Un redémarrage des sessions plus tard et le retrait de la carte entraine un verrouillage de la session Windows.
Serveur
- Politique de session
/opt/SUNWut/sbin/utpolicy
# Current Policy: -a -m -r card -k card -g
- Pour mémoire, la politique doit être la même sur tous les serveurs d'un FOG.
- Donne l'état du groupe de failover
/opt/SUNWut/sbin/utgstatus
/opt/SUNWut/sbin/utgstatus
host flags interface flags
172.16.0.0/16
---------- -------------------
solaris TN 172.16.0.8 UA-
Thales TN 172.16.0.9 UA-
- Etat du mode kiosque
/opt/SUNWkio/bin/kioskuseradm show
Current kiosk user account settings: user name prefix: utku first account uid: 150000 number of accounts: 25 kiosk group name: utkiosk kiosk group gid: auto
- Faire du multiécran.
Nécessite un redémarrage à froid du serveur.
/opt/SUNWut/sbin/utmhadm -a BocalMulti -g 2x1 -p 00144fc30003 -l 00144fc30003,00144fa6392a
Crée une matrice d'écran
- de 2 écrans de large par 1 de haut (maxi 16 écrans)
- La console maitresse est : 00144fc30003
- L'écran de gauche est celui connecté au premier DTU : 00144fc30003
- L'écran de droite est celui connecté au second DTU : 00144fa6392a
1 Group for multihead added.
- Etat du groupe multiécran
/opt/SUNWut/sbin/utmhadm BocalMulti
Multihead Group Geometry CIDs
------------------ ------------------ --------------------------------
BocalMulti geometry=1x2 IEEE802.00144fa6392a
IEEE802.00144fc30003 (P)
- Etat du réseau vers chacun des DTU
/opt/SUNWut/sbin/utcapture -r
TERMINALID TIMESTAMP TOTAL PACKET TOTAL LOSS BYTES SENT PERCENT LOSS LATENCY 00144fa6392a 20081205090052 0 0 0 0.000 0.876 00144fa7f013 20081205090052 4214 3 5704678 0.000 0.672 00144fc30003 20081205090052 4072 0 5548720 0.000 0.849 00144fc30aeb 20081205090052 1148 0 332864 0.000 0.823 00144fc30b01 20081205090052 4092 2 5560724 0.000 0.896 00144fc30b0c 20081205090052 4214 3 5704678 0.000 0.908 ^C
A ma connaissance, seul les deux dernières colonnes sont nécessaires pour vérifier la qualité de la liaison.
Gestion des utilisateurs
Liste
- Liste des utilisateurs et leur mode
/opt/SUNWut/sbin/utuser -L
Token ID Server Port User Name Session Type Other Info ------------------------------ --------------- ----- ------------------------------ --------------- --------------- Payflex.501336df00130100 0 polyp kiosk 001 . . 10 tokens total.
- Liste des utilisateurs actuellement connectés
/opt/SUNWut/sbin/utuser -L -g
Token ID Server Name User Name ------------------------------ ------------------------------ ------------------------------ pseudo.00144fa9f013 solaris ??? 4 users currently logged in.
- Donne les caractéristiques d'un token particulier
/opt/SUNWut/sbin/utuser -Li Payflex.501076df00130100 Token ID Server Port User Name Session Type Other Info ------------------------------ --------------- ----- ------------------------------ --------------- --------------- Payflex.501336df00130100 0 polyp kiosk 001 1 token total.
- Toutes les infos sur l'utilisateur d'un token
/opt/SUNWut/sbin/utuser -p Payflex.501076df00130100 Current Properties: User Name = polyp Other Info = 001 Server Name = Server Port = 0 Logical Token = user.12227955-7053 User Created = 11/10/2008 15:39:15 Session Type = kiosk Token Enabled? ---------------------------------------- -------- Payflex.501076df00130100 Yes
/opt/SUNWut/sbin/utdesktop -l -c
Desktop ID MHGroup Token User Location ------------ ------------- --------------------- --------- -------------------- 00144fa6392a S:BocalMulti IEEE802.00144fa6392a - Bocal2 00144fa7f013 - ??? - 104 00144fc30003 P:BocalMulti ??? - Bocal 00144fc30aeb - ??? - 117 00144fc30b01 - ??? - 00144fc30b0c - ??? - CDI 6 desktops currently connected.
MHGroup montre que Bocal2 est l'écran secondaire (voir Multiécran) de la console primaire Bocal.
- Envoyer un message à tous les utilisateurs
/opt/SUNWut/sbin/utwall -a /usr/demo/SOUND/sounds/gong.au -t 'salut' -m 'sujet' ALL
- Envoyer un message à un utilisateur
/opt/SUNWut/sbin/utwall -a /usr/demo/SOUND/sounds/gong.au -t 'salut' -m 'sujet' -v polyp
USER ACTION utwall: error, unknown username 'polyp' mail Total: 0 annunciate Total: 0
Ecrire
/opt/SUNWut/sbin/utwall -a /usr/demo/SOUND/sounds/gong.au -d polyp < /tmp/toto
utwall: error, unknown username 'polyp'
Modifier
- J'ajoute 45 compte au mode kiosk
/opt/SUNWkio/bin/kioskuseradm extend -c 45 Validating new user ids. Validating new user accounts. Configuring new kiosk user accounts: ............................................. 70 users configured
Si jamais l'erreur suivante apparait:
/opt/SUNWkio/bin/kioskuseradm extend -c 45 Validating new user ids. Some requested user ids are in use. - polyp (uid=150025) - Validating new user accounts.
C'est que vous avez créé des comptes APRES la mise en place du mode kiosk et il y a eu collision d'UID.
Pour corriger :
vi /etc/passwd
Changer l'UID du compte fautif
pwconv chown -R uid /home/compte
Gestion des comptes utilisateurs en mode kiosk
Export des données
- Récupération des données de l'annuaire
SRSS fait tourner sa base d'infos sur un annuaire au format LDAP
ldapsearch -x -p 7012 -h 172.16.0.10 -v -b 'utname=users,utname=solaris,o=v1,o=utdata' "(objectClass=*)"
Moi, je m'en sert pour importer automatiquement (crontab) les users dans l'annuaire du se3, groupe sunray, qui sert à son tour pour créer automatiquement les comptes dans la liste des utilisateurs.
Gestion des DTU (Station Sunray)
- Paramètres d'une DTU
/opt/SUNWut/sbin/utquery -d 172.16.197.254
terminalID=00144fd358e1
terminalIPA=172.16.197.254
model=SunRayP8
currentAuth=172.16.0.8
currentFW=4.2_49_2009.08.27.18.08
currentBarrier=420
currentBarrierLevel=420
currentMTU=1500
Subnet=255.255.0.0
Router=172.16.0.5
MTU=1500
LeaseTim=60000
DHCPServer=172.16.0.2
INFORMServer=172.16.0.9
AuthSrvr=172.16.0.9
AuthPort=7009
LogHost=172.16.0.9
FwSrvr=172.16.0.9
NewTVer=4.2_49_2009.08.27.18.08
FWservType=FWSrvr
speed=100F
parmsVersion=4.2_49_2009.08.27.18.08
parmsBarrier=420
configMTU=1500
AltAuth=172.16.0.9
dnsList=172.16.0.5,193.49.64.5
dname=lyceenobel.org
stopqon=0
bandwidth=100000000
Que faut-il sauvegarder ?
Infos supplementaires
Réseau
A configurer sur les switches Cisco
Tiré de la liste sunray-users@filibeto.org :
One thing I learned about Cisco switches long ago, do a "set port host" on all ports not connected to other Cisco equipment. Cisco switches do Channel and Trunk arbitration before anything else, and during the time the switch port spends on channel and trunk arbitration, the attached equipment is attempting to, and failing, at speed and duplex arbitration. The end result is that one end of the link is doing half, while the other end is doing full. Not a pretty sight.
Impression
Installing Follow-Me printing support - 0.3 ...
NOTE If you are using the the built-in Sun Ray Connector session, you
will need to add '-r printer:SR-Default' to the Arguments field
of the Sun Ray Admin GUI so that new sessions will forward the
printer
If you are using the ICA-Kiosk-session add on component, your
printer will be forwarded automatically for new sessions.
Please assign your desktops a default printer by adding the print
queue name to the 'Other Info' field of the selected desktop in the
Sun Ray Admin GUI.
See /opt/SRSS-Addons/FollowMe/README for mor information.
Références
Promo SUN Matching Grant
Tarifs Sun éducation. En gros: 1 machine achetée plein pot, l'autre identique offerte. Sauf les baies de stockage à 50%.
Valable jusqu'au 20 Mai 2009
Image:MATCHING GRANT FY09H2 EURO ENDUSER 03FEB09.pdf
Un sale petit voleur
Il n'a jamais pris la peine de demander la permission de faire du copier/coller de cette doc. Dommage, car le reste de la doc est sympa...sauf si elle a été piquée ailleurs également sans aucun respect !
Marrant la page d'accueil :
Copyright © 2004-2009, Eric Cantin (www.cants.org), tous droits réservés. Protégé par les lois du copyright des États-Unis et du Canada et par des traités internationaux. Cants, Lévis, Québec 15 juin 2009.
Bravo !

