DTU requires cards.
OVDC doesn't require a card.
Be nice to be able to log into our Sun Ray servers in our other office remotely.
On Fri, Jul 1, 2011 at 4:51 AM, Jörg Barfurth joerg.barfu...@oracle.com wrote:
Aaron Wilson schrieb:
Our default setup requires smart cards to get a login prompt
You can get what you desire by requiring registered mode for non-card
access and *not* allowing self registration. The users can open a
support request with their client ID and the adminstrator can register
it for them, and capture all the real details of who/what/where that
OVDC is
On 07/ 6/11 11:18 AM, James Kissler wrote:
Aaron, I can understand where you are coming from. I have a good
number of Sunrays deployed. We require the use of smartcard and pin
for authentication on both PCs and Sunrays (used for terminal
services). This is a hard requirement for all users,
Our smart card use isn't really for security. It forces users to be
mobile. Not every user has their own dedicated DTU and they share.
If we didn't force smart card use then people would login, forget to
logout and then the screensaver would kick on and lock the screen and
I'd be killing sessions
I guess you use Linux. If you used Solaris, you'd have the benefit of
Non-SmartCard Mobility policy, which allows mobility based on your username
upon login. It's on our to-do list for Linux.
For your use scenario (smartcards for mobility only), you *could* use a
registered-card policy and
Aaron Wilson schrieb:
Our default setup requires smart cards to get a login prompt on a DTU.
We want to keep that the way it is.
I'd like to make it so OVDC connections don't require a smart card.
Which options need to be enabled/setup in the Admin GUI to do this?
This is not supported by Sun
Hi,
you need to configure the non-card settings in the GUI for your needs
(registered, selfregistration etc..)
Then I think you are looking for the command line policy option -u pseudo.
check your current policy with /opt/SUNWut/sbin/utpolicy.
'add' the -u pseudo to this policy.
Restart sun ray
Here's the utpolicy output:
[root@slosunray01 ~]# /opt/SUNWut/sbin/utpolicy
# Current Policy:
-a -m -r card -s card -p -g
Here I tried adding -u pseudo but got an error.
[root@slosunray01 ~]# /opt/SUNWut/sbin/utpolicy -a -m -r card -s card
-p -g -u pseudo
ERROR: unreasonable policy:
Our default setup requires smart cards to get a login prompt on a DTU.
We want to keep that the way it is.
I'd like to make it so OVDC connections don't require a smart card.
Which options need to be enabled/setup in the Admin GUI to do this?
Currently we have the Card Users section setup with
