Exit Print View

Oracle Secure Global Desktop Administration Guide for Version 4.6

Document Information

Preface

1.  Networking and Security

2.  User Authentication

3.  Publishing Applications to Users

4.  Configuring Applications

5.  Client Device Support

Printing

Overview of SGD Printing

Setting Up Printing

Configuring Microsoft Windows Application Servers for Printing

Configuring UNIX and Linux Platform Application Servers for Printing

Configuring an SGD Server for Printing

Configuring Printing to Microsoft Windows Client Devices

Configuring Printing to UNIX, Linux, and Mac OS X Platform Client Devices

Managing Printing

Users Cannot Print From Applications Displayed Through SGD

Troubleshooting Other Printing Problems

Client Drive Mapping

Setting Up Client Drive Mapping

Configuring UNIX and Linux Platform Application Servers for CDM

Configuring an NFS Share for CDM

Starting CDM Processes on the Application Server

Configuring Microsoft Windows Application Servers for CDM

Enabling CDM Services in SGD

Running UNIX Platform CDM With Another SMB Service

Configuring the Client Drives Available to Users

Troubleshooting Client Drive Mapping

Logging for CDM

Audio

Setting Up Audio

Configuring Microsoft Windows Application Servers for Audio

Configuring UNIX and Linux Platform Application Servers for Audio

Configuring X Applications for Audio

Enabling SGD Audio Services

Configuring Client Devices for Audio

Troubleshooting Audio in Applications

Copy and Paste

Using Copy and Paste

Controlling Copy and Paste in Applications

An Example of Using Clipboard Security Levels

Tips on Configuring Copy and Paste

Copy and Paste Troubleshooting

Smart Cards

Using Smart Cards With Windows Applications

Setting Up Access to Smart Cards

Configuring the Microsoft Windows Application Server for Smart Cards

Enabling Smart Cards in SGD

Configuring Smart Card Readers on Client Devices

How to Log In to a Microsoft Windows Application Server With a Smart Card

Troubleshooting Smart Cards

Serial Ports

Setting Up Access to Serial Ports

Configuring the Microsoft Windows Application Server

Enabling Serial Port Access in SGD

Configuring the Client Device

6.  SGD Client and Webtop

7.  SGD Servers, Arrays, and Load Balancing

A.  Global Settings and Caches

B.  Secure Global Desktop Server Settings

C.  User Profiles, Applications, and Application Servers

D.  Commands

E.  Login Scripts

F.  Third-Party Legal Notices

Glossary

Index

Audio

This section describes how to configure SGD audio services for Windows applications and X applications. Troubleshooting information for SGD audio is also included.

The following topics are covered:

Setting Up Audio

Setting up audio involves the following configuration steps:

  1. Configure the application servers for audio.

  2. Configure X application objects to use the correct audio device and audio format.

    See Configuring X Applications for Audio.

  3. Enable the SGD audio services.

    See Enabling SGD Audio Services.

  4. Configure the client device to play audio.

    See Configuring Client Devices for Audio.

Configuring Microsoft Windows Application Servers for Audio

You can only play audio if audio redirection is enabled on the Windows Terminal Server. See Configuring Microsoft Windows Terminal Services for Use With SGD for details of the Windows platforms that support audio redirection.

Configuring UNIX and Linux Platform Application Servers for Audio

To be able to hear audio in an X application, you must install and run the audio module of the SGD Enhancement Module on the UNIX or Linux platform application server.

Installing the Audio Module

See the Oracle Secure Global Desktop 4.6 Installation Guide for instructions on installing the audio module. If you did not install the audio module when you installed the SGD Enhancement Module, you must uninstall and then reinstall the SGD Enhancement Module.


Note - If you are using zones on Solaris Operating System (Solaris OS) platforms, the audio module must be installed in the global zone.


The audio module installs the SGD audio daemon and audio driver emulator. On Linux platforms, the audio driver emulator requires the soundcore module in the kernel. The audio driver emulator is an Open Sound System (OSS) emulator.


Note - As the audio module includes an audio driver emulator, the application server itself does not actually need to have a sound card.


Starting the Audio Module

If the audio module is installed, you start the audio service with the /opt/tta_tem/bin/tem startaudio command. You must be superuser (root) to use this command.

About the SGD Audio Daemon

When audio is enabled and the user starts an X application, the SGD login script starts the SGD audio daemon, sgdaudio, on the application server.

The audio daemon connects to an SGD audio driver emulator, sgdadem, and starts an audio device node in the /tmp/SGD/dev/sgdaudio directory. The audio daemon sets the SGDAUDIODEV, AUDIODEV, and AUDIO environment variables to the location of the audio device node. The audio device node is then used to play audio during the application session.

The audio daemon transfers the audio data to the SGD server, which then sends the data to the client.

The audio daemon supports the following audio data formats:

To play audio, the client device must also support these formats.

The audio daemon supports any sample rate from 8000 Hz to 48 kHz for one or two channels. The audio daemon uses the sample rate specified by the UNIX Audio Sound Quality attribute on the Global Settings -> Client Device tab in the Administration Console. By default, the sample rate is 22.05kHz.

The SGD audio daemon connects to the SGD server on random ports. If there is a firewall between the application server and the SGD server, the firewall must allow connections on all ports from the application server to the SGD server.

Configuring X Applications for Audio

To be able to hear audio in an X application, the X application might have to be configured to output audio using the right audio device and audio format.

Some X applications are hard-coded to use the /dev/audio or /dev/dsp devices for audio output. You can enable an SGD audio redirection library, to force the X application to use the device specified by the SGDAUDIODEV environment variable.

In the Administration Console, go to the Client Device tab for the X application and select the Audio Redirection Library check box.

Alternatively, use the following command:

$ tarantella object edit --name obj --unixaudiopreload true

As the SGD audio driver emulator is an OSS driver, the X application might have to be configured to use OSS. If your system uses the Advanced Linux Sound Architecture (ALSA), you might have to enable the ALSA OSS emulation modules in the kernel.

If the Connection Method (--method) used for the X application is SSH and the application’s Window Type (--displayusing) is Kiosk, the Session Termination (--endswhen) attribute must be set to Login Script Exit or No Visible Windows (--loginscriptnowindows).

Enabling SGD Audio Services

To be able to hear audio in Windows applications and X applications, audio services must be enabled for the SGD array.

Firewalls between SGD servers can interfere with the connections required for Windows audio, seeFirewalls Between SGD Servers.

How to Enable the SGD Windows Audio Service

Before You Begin

To be able to hear audio in a Windows application, the SGD Windows audio service must be enabled in the array. The Windows audio service is disabled by default.

  1. In the Administration Console, go to the Global Settings -> Client Device tab and select the Windows Audio check box.


    Tip - You can also use the tarantella config edit --array-audio command to enable the SGD Windows audio service.


    The audio service only takes effect for new user sessions. Users must log out of SGD and log back in again to enable audio in their current Windows Terminal Server sessions.

  2. (Optional)

    Set the audio quality.

    Select an option for Windows Audio Sound Quality.

    The default is Medium Quality Audio, using a sample rate of 22.05kHz. Only change this setting if you experience problems with audio quality.

How to Enable the SGD UNIX Audio Service

To be able to hear audio in an X application, the SGD UNIX audio service must be enabled in the array. The UNIX audio service is disabled by default.

  1. In the Administration Console, go to the Global Settings -> Client Device tab and select the Unix Audio check box.


    Tip - You can also use the tarantella config edit --array-unixaudio command to enable the SGD UNIX audio service.



    Note - The audio service only takes effect for new user sessions. Users must log out of SGD and log back in again to enable audio in their X application sessions.


  2. (Optional)

    Set the audio quality.

    Select an option for Unix Audio Sound Quality.

    The default is Medium Quality Audio, using a sample rate of 22.05kHz. Only change this setting if you experience problems with audio quality.

Configuring Client Devices for Audio

To be able to hear audio in an Windows application or X application, the client device must be capable of playing audio.

Users with Solaris OS or Linux platform client devices must have read and write access to the following audio devices:

For Linux platform client devices, the Enlightened Sound Daemon, also known as ESD or EsounD, must be running on the client device.

ESD is usually started when the client device desktop session is started. Otherwise, the daemon must be autospawned by the ESD library on request. Ensure that autospawning is enabled in the ESD configuration file, /etc/esd.conf. The correct setting is auto_spawn=1.

Audio mixing on the client device is supported. On Solaris OS workstations, Microsoft Windows, and Mac OS X client devices, the client hardware performs the mixing. On Linux and SunRay client devices, ESD is required to perform mixing.

Troubleshooting Audio in Applications

The following are common problems when using audio in Windows applications and X applications:

No Audio Plays At All

If no audio is playing at all in the application session, use the following checklist to resolve the problem.

For Windows applications and X applications, you can use the following checklist.

Does the client device have an audio device?

To be able to play audio, the client device must have an audio device. If there is an audio device, check that the audio device works.

Users with Solaris OS or Linux platform client devices must also have read and write access to the following audio devices:


Note - On Solaris OS platforms, if the AUDIODEV environment variable has been set to a different device, the SGD Client attempts to use this device before using the /dev/audio device.


For Linux platform client devices, is ESD running?

For Linux platform client devices, ESD must be running.

Use the following command to check if ESD is running:

$ ps -ef | grep esd

ESD is usually started when the client device desktop session is started. If ESD is not running, check that autospawning is enabled in the ESD configuration file, /etc/esd.conf. The correct setting is auto_spawn=1.

Is the volume muted on the client device?

Check the volume control on the client device, to see whether the user has muted the volume or set the volume level too low to hear.

Is the volume muted on the application server?

Check the volume control on the application server, or in the application, to see whether the user has muted the volume or set the volume level too low to hear.

Has the audio service been enabled on the SGD server?

By default, SGD audio services are disabled for an SGD array.

See How to Enable the SGD Windows Audio Service for details of how to enable the SGD Windows audio service.

See How to Enable the SGD UNIX Audio Service for details of how to enable the SGD UNIX audio service.

Has the audio quality been changed?

By default, the SGD audio service uses Medium Quality Audio. Changing the audio quality to Low Quality Audio or High Quality Audio limits the audio formats used in the application session and might mean that the client device cannot play audio.

Reset the audio quality to Medium Quality Audio on the Global Settings -> Client Device tab in the Administration Console.

For Windows applications, is audio redirection enabled on the application server?

You can only play audio if audio redirection is enabled on the Windows Terminal Server. See Configuring Microsoft Windows Terminal Services for Use With SGD for details of the Windows platforms that support audio redirection.

Audio redirection is disabled by default on Windows Terminal Servers.

For Windows applications, is the Remote Audio attribute enabled?

The Remote Audio (--remoteaudio) attribute for a Windows application object causes audio to be played on the Windows application server, rather than the client device. This attribute is disabled by default for a Windows application object.

In the Administration Console, you disable the Remote Audio attribute on the Client Device tab for the Windows application object.

For Windows applications, is there a firewall between the SGD server hosting the user session and the SGD server hosting the application session?

For Windows applications, firewalls between SGD servers can interfere with audio connections, seeFirewalls Between SGD Servers.

For X applications, is there a firewall between the application server and the SGD server?

For X applications, the SGD audio daemon connects to the SGD server on random ports. If there is a firewall between the application server and the SGD server, the firewall must allow connections on all ports from the application server to the SGD server.

For X applications, are you running compatible versions of SGD and the SGD Enhancement Module?

UNIX audio services might not work correctly if the versions of SGD and the SGD Enhancement Module are different. For example, to play audio in X applications displayed through SGD version 4.6, Linux and UNIX platform application servers must be running version 4.6 of the Enhancement Module.

Use the following command to check the current version of the SGD Enhancement Module:

$ /opt/tta_tem/bin/tem version

Use the following command to check the current version of SGD:

$ tarantella version

See the Oracle Secure Global Desktop 4.6 Installation Guide for details of how to upgrade the SGD Enhancement Module.

For X applications, have you installed the audio module of the SGD Enhancement Module?

To be able to play sound in X applications, you must install and run the audio module of the SGD Enhancement Module on the application server.

See the Oracle Secure Global Desktop 4.6 Installation Guide for details of how to install the SGD Enhancement Module.


Note - If you are using zones on Solaris OS platforms, the audio module only works if it is installed in the global zone.


Use the following command to check that UNIX audio processes are running:

$ /opt/tta_tem/bin/tem status

You start the UNIX audio module with the following command:

# /opt/tta_tem/bin/tem startaudio

You must be superuser (root) to use this command.

Is the X application hard-coded to use either the /dev/audio or the /dev/dsp device?

If an application is hard-coded to use either the /dev/audio or the /dev/dsp device, you might have to enable the SGD audio redirection library to ensure that the SGD audio driver emulator is used by the application. See Configuring X Applications for Audio.

Is the X application outputting sound in the right format?

The SGD audio driver emulator is an OSS driver. The X application might have to be configured to use OSS. If your system uses ALSA, you might have to enable the ALSA OSS emulation modules in the kernel.

For UNIX or Linux platform application servers, is the SGD audio driver loaded in the kernel?

When you install the SGD Enhancement Module on the application server, you install the SGD audio driver, sgdadem. Check that the audio driver is loaded in the kernel.

If the audio driver is installed but not loaded, you can try to load the module manually, as follows:

If loading the audio driver manually produces any errors, try to correct those errors and load the driver again.

If the SGD audio driver is not listed, check the audio module installation log for any errors. The installation log is /opt/tta_tem/var/log/tem_unixaudio_inst.log. If the log reports any errors, try to correct those errors and load the driver again.

If the audio driver does not load into the kernel, contact Oracle Support.

For X applications, is the SGD audio daemon running on the application server?

There is an SGD audio daemon, called sgdaudio, running for each X application accessed through SGD. Use the following command to see the instances of the audio daemon:

$ ps -ef | grep -i sgdaudio

If the user does not have an audio daemon, check the audio daemon log files for any errors. The SGD audio daemon logs all fatal errors to the /opt/tta_tem/var/log/sgdaudioPID.log file.

For X applications, is there an SGD audio device node?

If the SGD audio daemon is running, it starts an audio device node in the /tmp/SGD/dev/sgdaudio directory.

In the X application session, check the value of the user’s SGDAUDIODEV, AUDIODEV and AUDIO environment variables. These must be set to the location of the SGD audio device node.

If the environment variables are set correctly, check that the device file is present in the /tmp/SGD/dev/sgdaudio directory.

For X applications, does audio debug logging show any errors with the application?

Enable UNIX audio debug logging on the application server and check the log files for errors.

See Enabling UNIX Audio Debug Logging for more details.

Audio Is Muffled or Distorted

If audio is muffled or distorted, adjust the audio quality and audio compression settings to see if this improves the audio. You can adjust the following:


Note - The net gain of compressing audio data, which is precompressed, is limited.


Not All Users Require Audio

If you enable audio on the Windows application server and enable the SGD audio service, all users can play audio in their Windows Terminal Services session. However, playing audio increases the amount of network bandwidth used and so you might want to restrict its use. Currently, the only way to do this is to disable audio for groups of users on the Windows application server. To do this you have to disable the Allow audio redirection setting for the group policy object, at Computer Configuration\Administrative Templates\Windows Components\Terminal Services\Client Server Redirection.

Changes to this setting only apply to new Windows Terminal Server sessions.

Enabling UNIX Audio Debug Logging

To enable UNIX audio debug logging, log in as superuser (root) on the application server and edit the /etc/sgdtem.conf file. Change the value of the SGDUNIXAUDIODEBUG environment variable in this file, as follows:

SGDUNIXAUDIODEBUG=1; export SGDUNIXAUDIODEBUG

To obtain debug logging output, the user must start a new instance of the application. Suspending and resuming the application does not generate any output, as this does not start a new instance of the SGD audio daemon.

The debug logging output goes to the /opt/tta_tem/var/log/sgdaudioPID.log file.