Wednesday Nov 17, 2010

Webinar: Access to Oracle Applications with Oracle Secure Global Desktop

Please join us today at 9 AM PST as we discuss how to increase security and simplify user access to your Oracle Applications by using Oracle Secure Global Desktop.  Brad will be one of the presenters, and I'll be helping with the Q&A chat.

Get more info and register here.

Friday Sep 28, 2007

New Secure Global Desktop Blog

Found this new blog by a Sun Partner focusing on Virtual Desktops.  Looks like it is going to be a good one.

Friday May 11, 2007

SGD 4.3.1 Released

Sun Secure Global Desktop 4.3.1 has been released.  While mainly an update to fix bugs, there are some new features:

- Support for UNIX audio apps
- Support for Vista Desktop as an application (i.e. VDI)
- Support for Ubuntu as a client OS
- Changes to work better with ssh launches (should work out of box without needing ssh_config changes)
- The Mac OS X client is now a universal binary

Download SGD and give it a spin.

Tuesday Jan 30, 2007

Couple of New Think Thinners

From the SGD crowd we now have Fat Bloke and Chris joining the ranks of the Think Thin Bloggers.  Fat Bloke is currently covering his top ten favorite new features of SGD 4.3 and Chris has started a new topic which you can ask him anything.  Welcome gents!



Friday Dec 15, 2006

SGD Clients and Top 10 New Features

Over at Proponere I'm discussing the different ways you can connect to an SGD server. Part 1 is up now and should be helpful to those confused about the differences between the browser-based client, the Java client, and the native client. In the soon to be posted part 2, I will describe the new integrated client available in version 4.3.

Also, Fat Bloke is counting down his top 10 new features in SGD 4.3. My favorite of the three features he has posted so far is kind of obscure: automatic proxy detection. Believe me, as unglamorous as it sounds, it makes the end user experience much better for users who move from network to network.

Wednesday Dec 06, 2006

Sun Secure Global Desktop 4.3 released

Hot off the digital presses, Sun Secure Global Desktop Software 4.3 is now available! Go download it, or try it live in your web browser on the demo server.

I have a brief list of the major new features on the Proponere blog today, with much more information to come.

Thursday Nov 23, 2006

Ooops, no root ssh and no GUI console

    In my previous post, I talked about a change to ssh_config to allow SGD to run X apps from a locked down server. Another thing I encountered during the same install was that the root user was not allowed ssh or any access to the system outside of direct console access. And since there was no graphics card in this server, I could therefore not use the SGD GUI admin tools. Makes it a tad more difficult to add or change apps and other SGD admin tasks, particularly for those not as comfortable with command line interfaces (CLI).
    Since by default the root user of the OS is used to administer SGD, the way around this is to create another user, and add them to the 'global' group. The easiest way to do that is through the GUI interface, but since I already ruled that out, here are some CLI commands to get the job done. Login via ssh using a non-root user, then su to root in order to run the commands.
    First, create a Solaris user. In this case, I used 'sgdadmin' for this task, created as follows, although don't feel obligated to use my method:

    useradd -c "SGD Admin" -d /export/home/sgdadmin -m sgdadmin

    And now to the SGD configuration, via CLI commands. The first line adds the Solaris user 'sgdadmin' to SGD as a person object, the second adds the new person object to the 'global' group, thus allowing it to administer SGD.

    /opt/tarantella/bin/tarantella object new_person --name ".../_ens/o=organization/cn=sgdadmin" --surname none --user sgdadmin

    /opt/tarantella/bin/tarantella role add_member --role global --member ".../_ens/o=organization/cn=sgdadmin"

    The tricky part of this is the _ens format for SGD objects, used to identify the new person object. These commands are based on using the default installation directory for SGD, so modify them accordingly if you have installed SGD in a location other than the default of /opt/tarantella.
    As long as those commands executed without error, you should now be able to login to the SGD GUI as 'sgdadmin' and get access to the Configuration Wizard and Object Manager, regardless of whether you are on the SGD server or not.


    While I tend to do more with Sun Rays, I do spend some time working with Sun Secure Global Desktop (SGD). I recently did an install at a customer site where they have access to servers locked down pretty well. Basically, ssh is the primary means of access, which means SGD will encounter problems when using it's default settings for accessing X applications. A couple quick changes to /etc/ssh/ssh_config, and SGD is running X apps like a champ.

In /etc/ssh/ssh_config, uncomment the following lines, and change their value from 'no' to 'yes' :

    # ForwardAgent no

    # ForwardX11 no

Also, verify that in the /etc/ssh/sshd_config file the following is set (should be by default) :

     X11Forwarding yes

    Being that one of the key value os SGD is the secure part, I expect this configuration is more the norm than I have experienced so far.

    For more detail on using ssh with Secure Global Desktop, check out Installing and using SSH with Secure Global Desktop in the Secure Global Desktop Administration Guide.


Think Thin is a collection of bloggers that work with Oracle's Virtual Desktop portfolio of products.


« August 2016