Installation and Configuration

Transcription

1 Installation and Configuration Sun Ray Connector forvmwareview Manager 1.1 Sun Microsystems, Inc Network Circle Santa Clara, CA U.S.A. Part No: March 2009

2 Copyright 2009 Sun Microsystems, Inc Network Circle, Santa Clara, CA U.S.A. All rights reserved. Sun Microsystems, Inc. has intellectual property rights relating to technology embodied in the product that is described in this document. In particular, and without limitation, these intellectual property rights may include one or more U.S. patents or pending patent applications in the U.S. and in other countries. U.S. Government Rights Commercial software. Government users are subject to the Sun Microsystems, Inc. standard license agreement and applicable provisions of the FAR and its supplements. This distribution may include materials developed by third parties. Parts of the product may be derived from Berkeley BSD systems, licensed from the University of California. UNIX is a registered trademark in the U.S. and other countries, exclusively licensed through X/Open Company, Ltd. Sun, Sun Microsystems, the Sun logo, the Solaris logo, the Java Coffee Cup logo, docs.sun.com, Java, and Solaris are trademarks or registered trademarks of Sun Microsystems, Inc. or its subsidiaries in the U.S. and other countries. All SPARC trademarks are used under license and are trademarks or registered trademarks of SPARC International, Inc. in the U.S. and other countries. Products bearing SPARC trademarks are based upon an architecture developed by Sun Microsystems, Inc. The OPEN LOOK and Sun TM Graphical User Interface was developed by Sun Microsystems, Inc. for its users and licensees. Sun acknowledges the pioneering efforts of Xerox in researching and developing the concept of visual or graphical user interfaces for the computer industry. Sun holds a non-exclusive license from Xerox to the Xerox Graphical User Interface, which license also covers Sun's licensees who implement OPEN LOOK GUIs and otherwise comply with Sun's written license agreements. Products covered by and information contained in this publication are controlled by U.S. Export Control laws and may be subject to the export or import laws in other countries. Nuclear, missile, chemical or biological weapons or nuclear maritime end uses or end users, whether direct or indirect, are strictly prohibited. Export or reexport to countries subject to U.S. embargo or to entities identified on U.S. export exclusion lists, including, but not limited to, the denied persons and specially designated nationals lists is strictly prohibited. DOCUMENTATION IS PROVIDED AS IS AND ALL EXPRESS OR IMPLIED CONDITIONS, REPRESENTATIONS AND WARRANTIES, INCLUDING ANY IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OR NON-INFRINGEMENT, ARE DISCLAIMED, EXCEPT TO THE EXTENT THAT SUCH DISCLAIMERS ARE HELD TO BE LEGALLY INVALID. Copyright 2009 Sun Microsystems, Inc Network Circle, Santa Clara, CA U.S.A. Tous droits réservés. Sun Microsystems, Inc. détient les droits de propriété intellectuelle relatifs à la technologie incorporée dans le produit qui est décrit dans ce document. En particulier, et ce sans limitation, ces droits de propriété intellectuelle peuvent inclure un ou plusieurs brevets américains ou des applications de brevet en attente aux Etats-Unis et dans d'autres pays. Cette distribution peut comprendre des composants développés par des tierces personnes. Certaines composants de ce produit peuvent être dérivées du logiciel Berkeley BSD, licenciés par l'université de Californie. UNIX est une marque déposée aux Etats-Unis et dans d'autres pays; elle est licenciée exclusivement par X/Open Company, Ltd. Sun, Sun Microsystems, le logo Sun, le logo Solaris, le logo Java Coffee Cup, docs.sun.com, Java et Solaris sont des marques de fabrique ou des marques déposées de Sun Microsystems, Inc., ou ses filiales, aux Etats-Unis et dans d'autres pays. Toutes les marques SPARC sont utilisées sous licence et sont des marques de fabrique ou des marques déposées de SPARC International, Inc. aux Etats-Unis et dans d'autres pays. Les produits portant les marques SPARC sont basés sur une architecture développée par Sun Microsystems, Inc. L'interface d'utilisation graphique OPEN LOOK et Sun a été développée par Sun Microsystems, Inc. pour ses utilisateurs et licenciés. Sun reconnaît les efforts de pionniers de Xerox pour la recherche et le développement du concept des interfaces d'utilisation visuelle ou graphique pour l'industrie de l'informatique. Sun détient une licence non exclusive de Xerox sur l'interface d'utilisation graphique Xerox, cette licence couvrant également les licenciés de Sun qui mettent en place l'interface d'utilisation graphique OPEN LOOK et qui, en outre, se conforment aux licences écrites de Sun. Les produits qui font l'objet de cette publication et les informations qu'il contient sont régis par la legislation américaine en matière de contrôle des exportations et peuvent être soumis au droit d'autres pays dans le domaine des exportations et importations. Les utilisations finales, ou utilisateurs finaux, pour des armes nucléaires, des missiles, des armes chimiques ou biologiques ou pour le nucléaire maritime, directement ou indirectement, sont strictement interdites. Les exportations ou réexportations vers des pays sous embargo des Etats-Unis, ou vers des entités figurant sur les listes d'exclusion d'exportation américaines, y compris, mais de manière non exclusive, la liste de personnes qui font objet d'un ordre de ne pas participer, d'une façon directe ou indirecte, aux exportations des produits ou des services qui sont régis par la legislation américaine en matière de contrôle des exportations et la liste de ressortissants spécifiquement designés, sont rigoureusement interdites. LA DOCUMENTATION EST FOURNIE "EN L'ETAT" ET TOUTES AUTRES CONDITIONS, DECLARATIONS ET GARANTIES EXPRESSES OU TACITES SONT FORMELLEMENT EXCLUES, DANS LA MESURE AUTORISEE PAR LA LOI APPLICABLE, Y COMPRIS NOTAMMENT TOUTE GARANTIE IMPLICITE RELATIVE A LA QUALITE MARCHANDE, A L'APTITUDE A UNE UTILISATION PARTICULIERE OU A L'ABSENCE DE CONTREFACON @21990

3 Contents Preface Setting up SRVC...9 System Requirements...9 Installing SRVC Configuring the Sun Ray Server for SRVC Configuring VMware View Connection Server Disabling Connection Tunneling Secure Sockets Layer (SSL) Troubleshooting...13 General Troubleshooting Key Error Messages

4 4

5 Preface Sun Ray is a certified VMware View and VMware VDM client solution. It is listed in VMware's Hardware Compatibility Guide at Sun Ray Connector for VMware View Manager (SRVC) is a software product that connects users of Sun Ray clients to Windows virtual machines via the VMware View Manager. SRVC is intended to be used as part of a virtualization solution with VMware ESX server software, VMware vcenter, VMware View Manager software, and Sun Ray Software. For further information on these products, see the Related Documentation. This document describes the installation of SRVC, and the configuration of SRVC interfacing software. For an overview of the complete virtualization solution, refer to the Sun Blueprint, Virtualizing Desktops with Sun Ray Software and VMware View Manager. Related Documentation Sun Ray Software 4 See ]a=view. Solaris Operating System (x86 or SPARC) See ]a=view. VMware ESX Server Software See VMware vcenter Software See VMware View Manager Components See 5

6 Preface RelatedThird-PartyWeb Site References Third-party URLs are referenced in this document and provide additional, related information. Note Sun is not responsible for the availability of third-party web sites mentioned in this document. Sun does not endorse and is not responsible or liable for any content, advertising, products, or other materials that are available on or through such sites or resources. Sun will not be responsible or liable for any actual or alleged damage or loss caused or alleged to be caused by or in connection with use of or reliance on any such content, goods, or services that are available on or through such sites or resources. Documentation, Support, andtraining The Sun web site provides information about the following additional resources: Documentation ( Support ( Training ( Sun Welcomes Your Comments Sun is interested in improving its documentation and welcomes your comments and suggestions. To share your comments, go to and click Feedback. Typographic Conventions The following table describes the typographic conventions that are used in this book. TABLE P 1 Typographic Conventions Typeface Meaning Example AaBbCc123 AaBbCc123 The names of commands, files, and directories, and onscreen computer output What you type, contrasted with onscreen computer output Edit your.login file. Use ls -a to list all files. machine_name% you have mail. machine_name% su Password: 6 Installation and Configuration March 2009

7 Preface TABLE P 1 Typographic Conventions (Continued) Typeface Meaning Example aabbcc123 Placeholder: replace with a real name or value The command to remove a file is rm filename. AaBbCc123 Book titles, new terms, and terms to be emphasized Read Chapter 6 in the User's Guide. A cache is a copy that is stored locally. Do not save the file. Note: Some emphasized items appear bold online. Shell Prompts in Command Examples The following table shows the default UNIX system prompt and superuser prompt for the C shell, Bourne shell, and Korn shell. TABLE P 2 Shell Prompts Shell C shell C shell for superuser Prompt machine_name% machine_name# Bourne shell and Korn shell $ Bourne shell and Korn shell for superuser # 7

8 8

9 1C HAPTER 1 Setting up SRVC Sun Ray Connector for VMware View Manager (SRVC) connects users of Sun Ray clients to Windows virtual machines via the VMware View Manager. It provides a Sun Ray kiosk session that allows users to connect to their virtual machines with their Active Directory user name and password. The user does not have to reenter their password at the Windows login screen. System Requirements A VMware virtualization environment: VMware ESX Server VMware vcenter Server VMware View Connection Server VMware View Agent (Installed on virtual machines accessed via SRVC) A Sun Ray environment: Sun Ray Software 4 (09/07) or above Solaris Operating System (x86 or SPARC) (Version is dependent on the system requirements of SRS) See the Related Documentation for more information. 9

10 Installing SRVC Installing SRVC Install the Sun Ray Connector for VMware View Manager software on the Sun Ray server using the procedure below. 1. Download the SRVC software to the Sun Ray server. The software can be found at 2. Unzip the bits: $ unzip srvc_1.1.zip 3. Become superuser: $ su Password: 4. Remove any previous installation of the software: # pkgrm SUNWkio-vdm 5. Move to the srvc_1.1 folder, that was extracted from the zip file. 6. Install the package for your architecture: x86: Sparc: # pkgadd -d Packages/Solaris_10+/i386/ # pkgadd -d Packages/Solaris_10+/sparc/ Configuring the Sun Ray Server for SRVC The following steps use the Sun Ray Software web administration to configure the Sun Ray server to present Windows desktops. 1. Log into the SRS Admin GUI at ray server>:1660 using the administrator user name and the password assigned during server setup. 2. Click on the Advanced tab, and Kiosk Mode sub-tab. Then click Edit. 3. Modify the session parameters. In the Sessions pull-down, select VMware View Manager Session. The arguments accepted are: -s <server> VMware View Connection Server hostname 10 Installation and Configuration March 2009

11 ConfiguringVMwareView Connection Server -https Use SSL connection to VMware View Connection Server (default) -http Do not use SSL connection to VMware View Connection Server -p <port number> VMware View Connection Server port number -t <seconds> The length of inactivity before the user is automatically logged out of the desktop selection dialog if no smart card is used. Default value is 3 minutes. -no-auto-login Users are automatically forwarded to their desktop if there is only one desktop. This flag disables this behavior. -d <domain> This domain name will be preselected in the login screen, if available. -- <uttsc arguments> Options to be passed to the Sun Ray Connector for Windows OS. For detailed information on these options refer to the uttsc man page: $ man -M pkginfo -r SUNWuttsc /SUNWuttsc/man uttsc 4. Instruct the server when to use Kiosk Mode for card and non-card users. Click on the System Policy sub-tab on the Advanced menu. In the dialog box, check the Enabled box for Kiosk Mode for both card and non-card users. 5. Click Save when done. 6. Restart the server: a. Click on the link in the message dialog to switch to the Servers tab. b. Select the server and click Cold Restart. Configuring VMware View Connection Server Some additional configuration of the VMware View Connection server may be required in order for SRVC to serve users their desktops. Disabling ConnectionTunneling SRVC does not support tunneled connections to VMware provided virtual machines. To switch off connection tunneling: 1. On the Configuration tab in the VMware View Connection Server web administration, select the server, and click Edit. Chapter 1 Setting up SRVC 11

12 ConfiguringVMwareView Connection Server 2. Click on Direct Connection to Desktop in the pop-up screen. Secure Sockets Layer (SSL) If SSL is not required, the following steps describe how to configure VMware View Manager so that SRVC can connect to it without using SSL. 1. Configure VMware View Manager to accept non-ssl connections. a. Log into your VMware View Connection Server web administration, and click the Configurations tab. b. Edit the global settings to set Require SSL to Off. c. Deselect Require SSL on the pop-up screen. Enabling SSL The default SSL certificate that results from the VMware View Manager installation must be replaced in order to enable SRVC to connect to the system. The following steps assume that you have generated and stored a new certificate on the VMware View Connection server. Refer to VMware View Manager documentation for more details. 1. Export the certificate from the keystore on the VMware View Connection server, using the command: # keytool -export -keystore keys.p12 -storetype pkcs12 -file vmware.cer 2. Copy the vmware.cer file to the Sun Ray server. 3. Import the certificate into a keystore on your Sun Ray server: # keytool -import -file vmware.cer -trustcacerts -v -keystore /etc/opt/sunwkio/sessions/vdm/keystore 4. Edit the kiosk script (/etc/opt/sunwkio/sessions/vdm/vdm) and modify the line that begins with javakeystorepass= to include the password for the keystore. 5. Restart the Sun Ray server via the Admin GUI. Note The administrator may choose to import the certificate into the default keystore of the server's Java installation instead of following steps 3 and 4. If this is done, the kiosk script must be modified and all references to javakeystore and javakeystorepass should be removed. 12 Installation and Configuration March 2009

13 2 CHAPTER 2 Troubleshooting In the event the software does not work as expected, look at the log messages located in the /var/opt/sunwut/log/messages file. Error messages related to the SRVC begin with kiosk:vdm. There may also be useful information in the file /var/dt/xerrors. GeneralTroubleshooting Character input is not working with international keyboards. Cause: There are problems when typing some characters into Java 5 dialogs on Sun Ray. Solution: Install Java 6 on the Sun Ray server and modify the kiosk script to use Java 6 to execute the SRVC GUI. User not returned to SRVC login window, but instead loops at Windows login screen. Cause: The vdm-client.jar, after authenticating the user's credentials, starts the standard SRWC uttsc script. The uttsc script launches the uttsc binary in a loop which attempts to detect how and why the uttsc binary exited. If the uttsc binary exits with a 0 exit code, the uttsc script will attempt to restart it rather than exiting. This avoids unnecessary kiosk sessions teardowns/recreates. However, in the vdm case, this causes an error since the password provided originally by VDM is good for one login only and the user's normal user name and password cannot be used. Solution: Remove the looping logic from the uttsc script and add it to the vdm script so that the vdm-client.jar is relaunched inside the existing Kiosk Session. 13

14 Key Error Messages Key Error Messages Error connecting to VDM server:javax.net.ssl.sslexception:java.lang.runtimeexception:unexpected error:java.security.invalidalgorithmparameterexception:the trustanchors parameter must be non-empty Cause: The SSL certificate is not set up correctly on the Sun Ray Server. Solution: See Enabling SSL. This desktop is currently not available. Please try connecting to this desktop again later,or contact your system administrator. The desktop sources for this desktop are not responding. Please try connecting to the desktop again later, or contact your system administrator. Cause: The desktop is not set up properly, or is already in use. For example: Someone is logged into the machine (over remote desktop or via the console in VMware vcenter). The machine is powering on/off, or suspending. No free desktops exist for that user. VMware View Agent is not installed on the desktop, or is not working correctly. Check that the desktop status is available in VMware View Connection Server. Active Directory and/or DNS is not set up properly on the desktop. There is a network communication problem between VMware View Connection Server and the desktop. A Windows firewall is blocking connections to the desktop. Connection tunneling is required to connect to the desktop, but it is not supported by this client. Cause: Connection tunneling is not supported by SRVC 1.1. Solution: Disable connection tunneling. For VDM 2/2.1, open the VMware View Connection Server web administration, go to Configuration, and enable Direct Connection to Desktop. For VMware View Manager 3, open the VMware View Connection Server web administration, go to Configuration, then VDM Servers, then Edit, and enable Direct Connection to Desktop. See Configuring VMware View Connection Server. 14 Installation and Configuration March 2009

15 Key Error Messages Exception in thread "main" java.lang.noclassdeffounderror Cause: An incorrect version of Java software is in use. Solution: Install Java version 1.5 or 1.6. Desktop tries to open, but immediately disconnects Cause: Diagnose the problem further. Solution: Try to connect to the desktop manually from the Sun Ray server using the /opt/sunwuttsc/bin/uttsc desktop-ip command. A remote desktop connection to the virtual machine should open. If it fails, it can provide an error message with further information. Chapter 2 Troubleshooting 15

16 16