Exit Print View

Oracle Secure Global Desktop Administration Guide for Version 4.6

Document Information

Preface

1.  Networking and Security

2.  User Authentication

3.  Publishing Applications to Users

4.  Configuring Applications

5.  Client Device Support

6.  SGD Client and Webtop

7.  SGD Servers, Arrays, and Load Balancing

A.  Global Settings and Caches

Secure Global Desktop Authentication Tab

The Authentication Wizard

Token Generation

Password Cache

Third-Party Authentication

System Authentication

Search Local Repository

Search LDAP Repository

Use Default Third-Party Identity

Use Default LDAP Profile

Use Closest Matching LDAP Profile

LDAP/Active Directory

Unix

Authentication Token

Windows Domain Controller

SecurID

Anonymous

Search Unix User ID in Local Repository

Search Unix Group ID in Local Repository

Use Default User Profile

Windows Domain

Active Directory

LDAP

Service Objects Tab

The Service Objects List Table

Name

Type

Enabled

URLs

User Name and Password

Connection Security

Active Directory Base Domain

Active Directory Default Domain

Application Authentication Tab

Password Cache Usage

Action When Password Expired

Smart Card Authentication

Dialog Display

"Save Password" Box

"Always Use Smart Card" Box

Display Delay

"Launch Details" Pane

Communication Tab

Unencrypted Connections Port

Encrypted Connections Port

AIP Keepalive Frequency

Timeout for User Session Resumability

Timeout for General Resumability

Resource Synchronization Service

User Session Idle Timeout

Performance Tab

Application Session Load Balancing

Application Load Balancing

Client Device Tab

Windows Client Drive Mapping

Unix Client Drive Mapping

Dynamic Drive Mapping

Windows Audio

Windows Audio Sound Quality

Unix Audio

Unix Audio Sound Quality

Smart Card

Serial Port Mapping

Copy and Paste

Client's Clipboard Security Level

Time Zone Map File

Editing

Printing Tab

Client Printing

Universal PDF Printer

Make Universal PDF Printer the Default

Universal PDF Viewer

Make Universal PDF Viewer the Default

Postscript Printer Driver

Security Tab

New Password Encryption Key

Timeout for Print Name Mapping

Connection Definitions

X Authorization for X Display

Monitoring Tab

Log Filter

Billing Service

Resilience Tab

Array Failover

Monitor Interval

Monitor Attempts

Find Primary Interval

Find Primary Attempts

Action When Failover Ends

Backup Primaries

Caches Tab

Passwords Tab

Description

Command Line

Tokens Tab

Description

Command Line

B.  Secure Global Desktop Server Settings

C.  User Profiles, Applications, and Application Servers

D.  Commands

E.  Login Scripts

F.  Third-Party Legal Notices

Glossary

Index

Client Device Tab

Attributes on the Client Device tab are settings for the user’s client device. This tab controls the use of client device features for applications displayed through SGD.

From the command line, use the tarantella config list command to list these settings, and the tarantella config edit command to edit these settings.

This tab contains the following sections:

Windows Client Drive Mapping

Usage: Select or deselect the check box.

Description

Whether to enable client drive mapping (CDM) for applications running on Windows application servers.

Changes to this attribute only take effect for new user sessions.

Command Line

Command option: --array-windowscdm 1 | 0

Usage: Specify 1 (true) or 0 (false).

The following example enables Windows CDM for the array.

--array-windowscdm 1

Unix Client Drive Mapping

Usage: Select or deselect the check box.

Description

Whether to enable CDM for applications running on UNIX or Linux platform application servers.

To use UNIX platform CDM, the Oracle Secure Global Desktop Enhancement Module (SGD Enhancement Module) must be installed and running on the application server.

If you enable UNIX platform CDM, CDM services only become available when you restart all SGD servers in the array. To manually start CDM services without restarting the array, run the tarantella start cdm command on all SGD servers in the array.

If you disable UNIX platform CDM, the CDM processes only stop when you restart all SGD servers in the array. To manually stop CDM services without restarting the array, run the tarantella stop cdm command on all SGD servers in the array.

Changes to this attribute only take effect for new user sessions.

Command Line

Command option: --array-unixcdm 1 | 0

Usage: Specify 1 (true) or 0 (false).

The following example enables UNIX platform CDM for the array.

--array-unixcdm 1

Dynamic Drive Mapping

Usage: Select or deselect the check box.

Description

Whether to enable dynamic drive mapping for the array. This feature enables “hot plugging” of removable storage devices, such as Universal Serial Bus (USB) drives.

By default, dynamic drive mapping is enabled for an SGD array.

To use dynamic drive mapping, CDM must be enabled for the array. This means that the Windows Client Drive Mapping or Unix Client Drive Mapping attribute must be enabled.

To use dynamic drive mapping for UNIX and Linux platform application servers, the Oracle Secure Global Desktop Enhancement Module (SGD Enhancement Module) must be installed and running on the application server.

Changes to this attribute only take effect when you restart all the SGD servers in the array.

Command Line

Command option: --array-dyndevice 1 | 0

Usage: Specify 1 (true) or 0 (false).

The following example disables dynamic drive mapping for the array.

--array-dyndevice 0

Windows Audio

Usage: Select or deselect the check box.

Description

Whether to enable Windows audio services for the array.

To play audio for Windows applications, audio redirection must be enabled on the Windows Terminal Server.

Changes to this attribute only take effect for new user sessions.

Command Line

Command option: --array-audio 1 | 0

Usage: Specify 1 (true) or 0 (false).

The following example disables Windows audio services for the array.

--array-audio 0

Windows Audio Sound Quality

Usage: Select an option.

Description

The sample rate of the audio data.

Adjusting the audio quality increases or decreases the amount of audio data sent.

By default, SGD uses Medium Quality Audio.

The sample rates are as follows:

Command Line

Command option: --array-audio-quality low | medium | high

Usage: Specify an audio quality setting.

The following example specifies medium quality audio for Windows audio services.

--array-audio-quality medium

Unix Audio

Usage: Select or deselect the check box.

Description

Whether to enable UNIX platform audio services for the array.

UNIX platform audio is only available for X applications. The audio module of the SGD Enhancement Module must be installed and running on the application server.

Changes to this attribute only take effect for new user sessions.

Command Line

Command option: --array-unixaudio 1 | 0

Usage: Specify 1 (true) or 0 (false).

The following example disables UNIX platform audio services for the array.

--array-unixaudio 0

Unix Audio Sound Quality

Usage: Select an option.

Description

The sample rate of the audio data.

Adjusting the audio quality increases or decreases the amount of audio data sent.

By default, SGD uses Medium Quality Audio.

The sample rates are as follows:

Command Line

Command option: --array-unixaudio-quality low | medium | high

Usage: Specify an audio quality setting.

The following example specifies medium quality audio for UNIX platform audio services.

--array-unixaudio-quality medium

Smart Card

Usage: Select or deselect the check box.

Description

Whether to enable smart card services for the array.

To use smart cards, smart card device redirection must be enabled on the Windows Terminal Server.

Changes to this attribute only take effect for new user sessions.

Command Line

Command option: --array-scard 1 | 0

Usage: Specify 1 (true) or 0 (false).

The following example enables smart card services for the array.

--array-scard 1

Serial Port Mapping

Usage: Select or deselect the check box.

Description

Whether to enable access to serial ports for the array.

By default, access to serial ports is enabled.

Access to serial ports for individual users can be enabled and disabled using the Serial Port Mapping attribute for organization, organizational unit or user profile objects.

Changes to this attribute only take effect for new user sessions.

Command Line

Command option: --array-serialport 1 | 0

Usage: Specify 1 (true) or 0 (false).

The following example enables access to serial ports for the array.

--array-serialport 1

Copy and Paste

Usage: Select or deselect the check box.

Description

Whether to allow copy and paste operations for Windows and X application sessions for the array.

By default, copy and paste is allowed.

Copy and paste operations for individual users can be enabled and disabled using the Copy and Paste attribute for organization, organizational unit, or user profile objects.

Changes to this attribute only take effect for new application sessions.

Command Line

Command option: --array-clipboard-enabled 1 | 0

Usage: Specify 1 (true) or 0 (false).

The following example enables copy and paste for Windows and X application sessions.

--array-clipboard-enabled 1

Client’s Clipboard Security Level

Usage: Type a number in the field.

Description

The security level for the SGD Client.

Used to control copy and paste operations between Windows or X application sessions and applications running on the client device.

The security level can be any positive integer. The higher the number, the higher the security level. The default security level is 3.

Changes to this attribute only take effect for new application sessions.

Command Line

Command option: --array-clipboard-clientlevel num

Usage: Replace num with a positive integer that specifies the security level.

The following example specifies a client clipboard security level of 3.

--array-clipboard-clientlevel 3

Time Zone Map File

Usage: Type the file name in the field.

Description

A file that contains mappings between UNIX platform client device and Windows application server time zone names.

Command Line

Command option: --xpe-tzmapfile filename

Usage: Replace filename with the path to the time zone map file.

In the following example, a time zone map file is specified.

--xpe-tzmapfile "%%INSTALLDIR%%/etc/data/timezonemap.txt"

Editing

Usage: Select or deselect the check box.

Description

Whether to allow users to edit their own profiles for use with the SGD Client.

By default, profile editing is enabled.

If profile editing is disabled, it is disabled for all users, including SGD Administrators. However, SGD Administrators can still create and edit profiles using the Profile Editor application.

Profile editing for individual users can be enabled and disabled using the Client Profile Editing attribute for organization, organizational unit, or user profile objects.

Changes to this attribute only take effect for new user sessions.

Command Line

Command option: --array-editprofile 1 | 0

Usage: Specify 1 (true) or 0 (false).

The following example enables user profile editing for the array.

--array-editprofile 1