Hi Patrick,
I know this problem. ;)
Assuming that the release notes/install guide steps for PCSC-Lite 1.2
were followed (i.e. you removed all packages it defines prior to
installing the new packages)...
In various situations the ICA client has trouble discerning the MAC
address of the Sun Ray. This can be due to a number of reasons based on
the way Citrix detects the MAC and different network configs. I don't
know exactly how they detect the MAC, but when I've talked to their
developers when this first came up, they said they found the method I
suggested to be unreliable.
In Kiosk Mode it can be because the sessions isn't connect when the ICA
client does the connection. Simple fix there is to test whether your
Sun Ray is connected
http://blogs.sun.com/ThinkThin/entry/determining_wether_your_session_is
Some Sun Rays are NAT'd and there are some issues with that and querying
the $UTDEVROOT structure.
Same problem whether NAT'd or not can be said for the Sun Desktop Access
Client.
And then you have TX, which I'm not anywhere near qualified as an expert
on but suffice to say has many things in it from a network security
standpoint that could cause something like this to happen.
For the last two scenarios, if you open up a terminal in the same
labeled zone that you are trying to run the Citrix Client in can you see
the $UTDEVROOT variable? If so, what happens if `cd $UTDEVROOT`
If that fails try one of the three following with the first being preferred:
Note: The MYDISP and SRMAC variables are all on one line in case any
line wrapping occurs in this message
1) Create a routine to get the MAC without needing UTDEVROOT and use
that as the client name for wfica
MYDISP=`echo $DISPLAY | awk -F: '{print $2}' | awk -F. '{print $1}'`
SRMAC=`grep TERMINAL /tmp/SUNWut/config/dispinfo/$MYDISP | awk -F.
'{print $2}'`
/usr/lib/ICAClient/wfica <args> -clientname $SRMAC
2) Create a routine that gets the MAC without need UTDEVROOT and creates
a symlink that creates links the logical units directory portion of the
$UTDEVROOT back to physical units directory
MYDISP=`echo $DISPLAY | awk -F: '{print $2}' | awk -F. '{print $1}'`
SRMAC=`grep TERMINAL /tmp/SUNWut/config/dispinfo/$MYDISP | awk -F.
'{print $2}'`export MYDISP SRMAC
ln -s /tmp/SUNWut/units/IEEE802.$SRMAC /tmp/SUNWut/sessions/$MYDISP/unit
The soft client case is a bit different as there is no physical unit and
you'd have to make a directory that pointed to
/tmp/SUNWut/units/IEEE802.$SRMAC before you make the symlink but a
non-root user (i.e. a normal or kiosk user) only has r-x rights (that's
a good thing).
3) Contact Citrix support. There's a final work-around but it has
implications on both Citrix licensing and MS WTS CAL allotment so they
need to ensure that you have the right number of licenses in place
before they give it to you.
Regards,
CB
This is a Citrix support issue that has implications on their licensing.
I know this scenario can come up a co
Patrick Smith wrote:
Craig and all,
Thanks for the input. I have updated from PCS-lite 1.1 to 1.2 and followed the
instructions on the page you linked to install it.
It appears I've had some measure of success, I'm able to register the token now
when I insert it.
When I try to connect to the citrix server with the smart card inserted, I get:
"Citrix ICA Client Error
Cannot get SunRay host id"
If I try to connect without the smart card, it connects as normal (except of
course the whole not being able to use my smart card thing)
Thanks for your help!
Patrick
-----Original Message-----
From: [email protected] on behalf of [email protected]
Sent: Fri 7/9/2010 9:51 AM
To: SunRay-Users mailing list
Cc: [email protected]
Subject: Re: [SunRay-Users] Smart Card Issue
Hi Patrick,
SUNWsrcbp is old. Starting with SRSS 4.0 you need to use PCSC-Lite.
With 4.1 or later you need to use the 1.2 version
http://wikis.sun.com/display/SRS/PCSC-lite+1.2+Release+Notes
On Jul 9, 2010, at 6:07 AM, Patrick Smith <[email protected]> wrote:
Hello All!
I'm running Solaris 10 Trusted Extensions with Sun Ray Server 4.1. I
have the pc sc lite package and the SUNWsrcbp packages installed for
smart card use.
I'm trying to use the smartcard via a citrix session to a Windows
server that is using middleware called Gemalto Access Client v5.4.
They know this software works as it is used in other places fine.
I've setup a successful citrix connection to it and enabled the
"Allow Smart Card Logon" option. When I connect with my smart card
all I get is the 'Ctrl-Alt-Del' dialog box.
To further troubleshoot this, I went into the Sunray Admin GUI to
the Tokens tab to try to add a new smart card with a card inserted
into my reader and get this error when trying to read the token:
"Unable to Read Token Identifier
An internal error occurred."
When I try to do it from the command line, I get the following:
./utuser -r <MAC Address of the Sun Ray>
"Insert token into token reader '<MAC Address>' and press return."
"Error: Could not get the server name to which the token reader
'<MAC Address>' is connected to.
Please make sure this desktop is currently up.
I'm confident I'm using the right MAC so that's not the issue.
Anyone have any ideas? Cant find much help with this anywhere.
Thanks!
Patrick Smith
_______________________________________________
SunRay-Users mailing list
[email protected]
http://www.filibeto.org/mailman/listinfo/sunray-users
___________________
This email has been scanned for all viruses by Webroot Email
Security System.
___________________
------------------------------------------------------------------------
_______________________________________________
SunRay-Users mailing list
[email protected]
http://www.filibeto.org/mailman/listinfo/sunray-users
_______________________________________________
SunRay-Users mailing list
[email protected]
http://www.filibeto.org/mailman/listinfo/sunray-users
