Wednesday Aug 11, 2010

Change default Desktop Login Language in Oracle VDI 3.2

One of the new features in the recently released Oracle VDI 3.2 software is the addition of the Dutch language in the Oracle VDI Desktop Login screen. In this article I explain how to change the default Desktop Login language to your preferred language (I use Dutch in the examples, because I live in the Netherlands ;-) 

As soon as you connect with your Sun Ray DTU or Oracle Virtual Desktop Client (OVDC) to the Oracle VDI server you get the standard Desktop Login window. Most of the time, this window defaults to the English language (see the below picture). Through the "More Options, Language" drop-down menu you see a list of supported languages. With a few simple steps you can change the default language of the Desktop Login to your preferred language.

Oracle VDI Desktop Login Window in English Language

The Desktop Login window is launched by the Kiosk interface scripts. This is the glue between the embedded Sun Ray server software and the Oracle VDI broker software. The Kiosk interface scripts determines the language setting for the Desktop Login window through the underlying operating system. In our Solaris 10 Oracle VDI server this is done with the locale parameters.

During the Solaris 10 Operating System installation, the English version of Solaris is installed by default. Most likely you only provided information about the timezone of your server and not the information for your geographic regions and software localizations. On the Sun Developers Network website you can check a list with locale settings in the Solaris Locale Chart. To use the Dutch language in the Oracle VDI Desktop Login we need the nl_NL locale which is part of the Western European Region (WEU) in Solaris 10.

Follow the next four steps to configure your preferred language for the Oracle VDI Desktop Login window:

1. Check the installed locales on your Oracle VDI server with the following CLI-commands:

  # First check the current locales on the server (in this case it is the default)
  root@server:# locale -a

  # Or check if the Dutch locales are installed on your server
  root@server:# locale -a | grep nl

2. If your locale exists go to step 3, otherwise load your preferred locale from the Solaris 10 installation media (the Solaris 10 installation DVD or the downloaded Solaris 10 iso-file):

  # Insert Solaris 10 DVD in your drive, it will be automounted under /cdrom
  # In my example we install the nl_NL locale
  root@server:# localeadm -a nl_NL -d /cdrom/sol_10_1009_x86/

  # Use the following CLI-commands if you installed from an iso file
  # Find your iso file (in my case /stage) and mount the iso into a directory /mnt
  root@server:# mount -F hsfs -o ro `lofiadm -a /stage/sol-10-u8-ga-x86-dvd.iso` /mnt
  root@server:# localeadm -a nl_NL -d /mnt
  root@server:# umount /mnt; lofiadm -d /dev/lofi/1

3. Configure the locale in the Sun Ray Kiosk general properties settings:

  • Go to the Sun Ray sever Admin GUI (https://server:1661/) and login with root/passwd
  • Select Tab Advanced, sub-Tab Kiosk Mode and select Edit to change the properties for the Oracle Virtual Desktop Infrastructure session type. 
  • In the Locale property configure your preferred locale as shown in the below picture and save the properties

SRSS Admin GUI, Kiosk Mode properties

4. Restart your DTU session to show the new Desktop Login Language setting:

  • You can do this by selecting Quit in the Desktop Login window, or
  • You can do this with the key sequence CTRL-ALT-BS-BS.
If all went well you will see the Oracle VDI Desktop Login window in your preferred language. The below picture shows the Desktop Login window for the Dutch language.

Oracle VDI Dutch Desktop Login window

Monday Jul 19, 2010

Using Oracle Virtual Desktop Client with smart card

As you may have discovered, last week Oracle released updates for Sun Ray software and the Oracle Virtual Desktop Client (OVDC) which are described in more detail on the ThinkThin blog.

I wanted to test OVDC with the new smart card functionality to hotdesk my Desktop session between a Sun Ray DTU and the OVDC. But I encountered a small issue when using the smart-card (in fact I was to lazy to read the Release Notes :-)

Before using OVDC you have to enable access for it on the server. This is done automatically if you use the Sun Ray server software as part of the full Oracle VDI stack. But you can also do this manually via the Sun Ray Admin GUI. However, for enabling OVDC access with a smart card this option is not available yet in the Admin GUI. Below I explain what I did in my demo-server infrastructure.

I connected with OVDC on my Windows XP notebook with integrated smart card reader to the patched Sun VDI server and I did get the standard Oracle/Sun VDI Desktop Login screen. When I inserted a smart card in my Windows XP notebook, it connected to the VDI server, but it did not get the Desktop Login screen. Instead, I did get a little icon with a status code 47 in the lower right.

No OVDC Access Icon

On the Sun Ray Wiki you can find a page with SRSS Troubleshooting Icons, where I found that status code 47 means No access for Sun Desktop Access Clients. The Release notes of OVDC helped me to find out that I can enable access for OVDC smart card sessions with the utpolicy CLI-command and the switch -u to specify the policy for card, pseudo or both (resp. smart card session, non-smart card session and both types).

I logged into my Sun VDI (or standalone Sun Ray) server as the root user and I changed the Sun Ray server policy with the following commands:

# First check the current policy on the server
root@vdiserver:# /opt/SUNWut/sbin/utpolicy
# Current Policy:
-a -z both -k both -m -u pseudo

# Change the policy (-u both) to accept card and non-card OVDC sessions
root@vdiserver:# /opt/SUNWut/sbin/utpolicy -a -z both -k both -m -u both

# Restart authentication manager (needed for policy change)
root@vdiserver:# /opt/SUNWut/sbin/utrestart -c

After the restart of the Sun Ray Server services and reconnecting OVDC to the server I could hotdesk my Virtual Desktop session between the Sun Ray DTU and the OVDC software client.

Thursday Jul 15, 2010

Updates for Sun Ray Software

A quick note about Sun Ray Software updates already posted in other blogs: my colleague Arjan posted a blog about the Oracle Sun Ray press announcement and on the ThinkThin blog two articles (more technical/functional oriented) about the updates in the Sun Ray Software and a new version of PCSC-lite software.

Tuesday Jun 08, 2010

SysAdmin access in Oracle VDI

The Oracle VDI server software is an integrated stack with a single installer. It installs several components in the Solaris server system such as the vdi-core, the embedded cluster database, the rdp-broker and last but not least, the Sun Ray server software.

Oracle VDI Desktop Login screenAfter the installation and configuration of your Oracle VDI cluster, the Sun Ray server software is by default configured in kiosk mode policy with Oracle VDI as the standard application. When you connect a Sun Ray DTU device to the network it always displays the standard Desktop Login screen as shown on the left, both for smartcard or non-smartcard access.

When you enter your user credentials you are connected to your assigned virtual desktop. Wherever you are, wherever you go, you are always connected to your own desktop. This is perfect for the end-user, but the System Administrator always has more wishes to connect to the IT-system.

The SysAdmin responsible for the Oracle VDI cluster manages the infrastructure of the virtual desktop platform with the web-based Oracle VDI GUI. With the GUI the SysAdmin manages the following components:

  • the connection to the user-directory (such as the Active Directory),
  • the connection to the virtualization platforms (Virtual Box or VMware) and the storage infrastructure,
  • the assignment of users to desktops,
  • the pools where the virtual desktops resides on the platform.

Oracle VDI Web-admin GUI

For the more advanced features the SysAdmin has the possibility to access the underlying Solaris system and use CLI-commands or inspect log-files. Most likely, the SysAdmin desktop device or laptop is connected to a management network and he logs into the Oracle VDI server using the SSH-protocol.

I always find it useful to add another access mechanism for the SysAdmin. This is typically needed when you want to support the end-user at his desk in his office and want fast access to the Oracle VDI server to troubleshoot for example. I configure a smart-card which offers me a regular Solaris desktop on the Oracle VDI server (note: this is unsupported for end-users in the VDI model, but IMHO fine for limited use for SysAdmins).

Configuring the smart-card for Solaris access is very easy to do, a few CLI- commands on the Oracle VDI server while your smart-card is inserted in the Sun Ray DTU. First you discover your smart-card tokenID with utsession -l (in my case it is MicroPayflex.500406f700130100), you register the smart-card with utuser -a in the Sun Ray server data-store and then you override the standard smart-card policy with utkioskoverride -s regular for this smart-card tokenID:

    # utsession -l
      Configuration for token ID 'MicroPayflex.500406f700130100':
    # utuser -a "MicroPayflex.500406f700130100,,,jaap,"
      Added one user.
    # utkioskoverride -s regular -r MicroPayflex.500406f700130100
      The session type has been successfully changed. Please note that changes
      will only take effect the next time a session is started for the specified
    # utsession -t MicroPayflex.500406f700130100 -k

The last CLI-command utsession kills your current Sun Ray session (the one with the Oracle VDI Desktop Login screen) and returns with a regular Solaris Desktop login as shown in the picture below.

Solaris Desktop Login screen

The utkioskoverride is a very powerful CLI-command. One of the Sun Ray engineers has written a nice blog about Using different Kiosk Sessions for different tokens. Recommended to read if you need some more flexibility in Kiosk configuration settings.

Wednesday Jun 02, 2010

Opera: a Sun Ray Webkiosk browser

In one of my recent projects I had to install Sun Ray DTU devices in a reception area of an office building. The requirement was to use the Sun Ray as an information stand:

  • Deny access to the Desktop operating system, but provide Web browsing
  • Reset after periods of inactivity

I decided to give it a try with the Opera web browser which runs both on Solaris and Linux systems. My example installation is on Oracle Enterprise Linux, but it is also tested on Solaris x86.

Opera is a web browser with increasing popularity and runs on multiple platforms. Opera has some nice kiosk mode features such as:

  • Start-up dialogs are not shown
  • Full-screen mode is enabled by default, you can't escape from it
  • Toolbars and application bar are disabled
  • URL Filtering

Before I start configuring and customizing Opera for Sun Ray I did the following standard installation steps:

  • Download and install Opera on my Sun Ray server
  • Configure Flash, Java and Acroread plugins (follow the instructions on this webpage)

My next step is to perform some Opera configuration settings. I will do this as a standard Linux user (I did it as the root user) by launching the Opera browser. When launched for the first time Opera will create a $HOME/.opera configuration directory.

Opera has a Preferences Editor which you access via entering the opera:config URL. I used the following two configurations settings to adjust my Kiosk Mode preferences:

  • "Go Home Time Out": which is found under the Special section. This setting is used for resetting the kiosk after a certain period of inactivity in seconds. I used a setting of 600 (which is 10 minutes).
  • "URL Filter File": which is found under the Network section. Here you can choose your file path (or use the default setting $HOME/.opera/urlfilter.ini) where you store your URL filter rules.
  • I also changed the default home page, in my case I changed it to

After exiting the Opera web browser, I created the URL filter rules in the default URL Filter File:

# vi $HOME/.opera/urlfilter.ini
   prioritize excludelist=1

See the Opera Kiosk Mode webpage for the explanation of the URL Filter File. I used these settings to allow http(s) URLs only. With these URL filters I also disallow the file://localhost/\* URLs to prevent viewing local files from the Sun Ray Software server.

At this time, my Opera configuration is ready for Sun Ray kiosk mode. I copied the configuration files to the default kiosk mode prototypes directory on all my Sun Ray servers in the Server Group. The Sun Ray kiosk mode module takes care of copying the profile to the right place in the server system when a user accesses the Sun Ray and his Opera kiosk session

# cd $HOME
# cp -r .opera /etc/opt/SUNWkio/prototypes/default/

The last step in my configuration is to tell the Sun Ray server how to start the Opera browser in kiosk mode. You do this by creating a kiosk descriptor file and a kiosk session executable. The descriptor will be detected in the Sun Ray server Admin GUI where you enable the service. In the below steps you see the kiosk files I used in my server.

1. create the Sun Ray kiosk descriptor 

  # vi /etc/opt/SUNWkio/sessions/webkiosk.conf 
    KIOSK_SESSION_LABEL="Webbrowser Kiosk Mode"
    KIOSK_SESSION_DESCRIPTION="Webbrowser (Opera) in limited Kiosk Mode to provide I
    nternet Web services to Sun Ray Kiosk Users"

2. create the session execution script

  # mkdir /etc/opt/SUNWkio/sessions/webkiosk
  # vi /etc/opt/SUNWkio/sessions/webkiosk/ 

    # Set sleep and blanking timeouts to 0
    # Uncomment if on Solaris
    #/usr/openwin/bin/xset -dpms s off
    # Uncomment if on Linux
    /usr/bin/xset -dpms s off

    $OPERA_EXEC -kioskmode -kioskbuttons -nosave -noprint  \\
            -nochangebuttons -nocontextmenu -nodownload \\
            -nokeys -nomail -nomaillinks -nomenu 

Again, see the Opera Kiosk Mode website for the explanation of the Opera switches. With these switches you still see the main toolbar and address bar. Some of the buttons (such as the print button) are greyed-out. If you want to disable the address bar and toolbar you remove the -kioskbuttons switch, then you only see the viewed web-page.

Monday May 31, 2010

Sun Ray 3 Firmware available

A quick note: as posted on the Think Thin blog, Sun Ray Core Services Patch -02 for SRSS 4.2 is available for download from

Friday May 28, 2010

Install Sun Ray Server software in Oracle Enterprise Linux

In this article I continue my installation of Oracle Enterprise Linux from an earlier blog post. The below instructions are based on an internal Wiki article written by a Sun colleague (thanks for the pre-work). 

Prepare Oracle Enterprise Linux for Sun Ray Server software 

I'm now ready to install the Sun Ray Sever software. After you logged in for the first time as the root user in your just installed Oracle Enterprise Linux server, you have to prepare the system for Sun Ray Server software installation: add additional packages and change some Linux configuration files.

In Oracle Enterprise Linux yum is used to install additional packages. Reconfigure yum to run from the DVD repository. This is done by adding the following contents to a new file (Note that the mediaid comes from the file /media/Enterprise Linux dvd 20090908/.discinfo):

    # vi /etc/yum.repos.d/dvd.repo
      name=DVD for RHEL5 

Oracle also hosts a yum-server for Oracle Enterprise Linux, this also should work but I have not tested this. 

You are now ready to install additional packages or groups of packages. The package list and versions which must be installed prior to Sun Ray Server installation are:

    # yum groupinstall "Development Tools"
    # yum install glib-1.2.10
    # yum install dhcp-3.0.5
    # yum install openldap-clients-2.3.43
    # yum install libXp-1.0.0
    # yum install openmotif22-2.2.3
Also the /etc/hosts file need some changes: the hostname must be removed from address and the host primary IP address and hostname must be added. The result must be something similar to:
    # vi /etc/hosts
      # Do not remove the following line, or various programs
      # that require network functionality will fail.       localhost.localdomain localhost
      ::1             localhost6.localdomain6 localhost6  host19.sunvdi.local host19

This finished the preparation on Oracle Enterprise Linux, we are now ready to install Sun Ray Server software.

Install Sun Ray Software

For download instructions for the Sun Ray Server software I refer to the Sun Ray Wiki website. After downloading the the Sun Ray Server software for Linux zip-files in my staging directory I start the installation:

    # cd /stage/sunray
    # unzip

Check Java version

Sun Ray Server software 4.2 requires a 32-bit implementation of a Java(TM) 2 Platform, Standard Edition JRE(TM) of at least 1.6. The latest Java release is available at To check what JRE version is installed on your system, use the following command:

    #  java -version

JRE version 1.6 is also bundled on the Sun Ray Server software zip-file in the Supplemental directory. For my test installation I used the provided JRE in the Supplemental Directory:

    # cd /stage/sunray/srss_4.2/Supplemental/Java_Runtime_Environment/Linux/
    # sh ./jre-6u13-linux-i586.bin 
      <enter yes when prompted>
    # mv jre1.6.0_13 /opt

Install Tomcat

The Sun Ray Administration Tool (Admin GUI) requires that a Web server be installed and running on each Sun Ray server. The Admin GUI is hosted in a Apache Tomcat 5.5 Web container. For my test installation I used the provided Apache Tomcat in the Supplemental Directory:

     # cd /stage/sunray/srss_4.2/Supplemental/Apache_Tomcat/
     # gunzip apache-tomcat-5.5.20.tar.gz 
     # gtar xvf apache-tomcat-5.5.20.tar 
     # mv apache-tomcat-5.5.20 /opt
     # ln -s /opt/apache-tomcat-5.5.20 /opt/apache-tomcat

Install Sun Ray Server software

Installing Sun Ray Server software is nothing more then an install CLI-command and a reboot of the server: 

    # cd /stage/sunray/srss_4.2
    # ./utinstall 
      - read and accept the license
      - answer Y or N when prompted for French, Japanese, Chinese Admin GUI.
      - enter Java v1.6 (or later) location: /opt/jre1.6.0_13
      - continue installation with the selected packages
    # reboot

Before you reboot make sure you have unmounted the OEL installation DVD, it might be used as the primary boot device during the reboot.

Configure Sun Ray Server software

Sun Ray Server software installed, time to configure the software. This is done by a CLI-command and works straight-forward. Most of the defaults are OK, but here is what I used for my test server:

    # /opt/SUNWut/sbin/utconfig
      - Continue ([y]/n)? Y
      - Enter Sun Ray admin password:
      - Configure Sun Ray Web Administration? ([y]/n)? 
      - Enter Apache Tomcat installation directory [/opt/apache-tomcat]: 
      - Enter HTTP port number [1660]: 
      - Enable secure connections? ([y]/n)? 
      - Enter HTTPS port number [1661]: 
      - Enter Tomcat process username [utwww]:

      - Be sure to enable "remote administration" (non-default)
        Enable remote server administration? (y/[n])? y
      - Be sure to configure "Kiosk Mode" (non default)
        Configure Sun Ray Kiosk Mode? (y/[n])? y

      - Enter user prefix [utku]:
      - Enter group [utkiosk]:
      - Enter userID range start [150000]:
      - Enter number of users [25]:
      - Configure this server for a failover group? (y/[n])?
        It lists a summary and if you happy with it choose yes to continue
        the configuration. 
      - Continue ([y]/n)? y

Configuration of Sun Ray Server Software has completed.

Turn on Sun Ray Server services

Sun Ray Server has multiple network configuration options to start the services. I used the easy one which turns on the services on all ethernet-interfaces on the server and does not configure DHCP services:

    # /opt/SUNWut/sbin/utadm -L on
    # /opt/SUNWut/sbin/utrestart -c

At this time, you are ready to connect a Sun Ray to this server.

 Linux Firewall

If you did forget to turn off the Linux Firewall during installation, you can do that afterwards via the following CLI commands as the root user:

    # service iptables save 
    # service iptables stop 
    # chkconfig iptables off 

If the Firewall keeps running on the server, the Sun Ray device will not connect to the servers and you will see a 26B OSD message on your Sun Ray device.

Install Sun Ray Windows Connector on OEL

Installation of the RDP connector is straightforward. I only had one minor issue with a missing library-filename on OEL during the installation, when I found the other version of that library it worked without problems. Here is what I used on my test system:

    # cd /stage/sunray
    # groupadd srwc
    # unzip
    # cd srwc_2.2
    # ./installer
       Accept (Y/N):
       Enter "srwc" as group name
    # /opt/SUNWuttsc/sbin/uttscadm -c
       Enter complete location for [/lib/] :
    # /opt/SUNWut/sbin/utrestart -c

OK, that's it !! 

Install Oracle Enterprise Linux in Oracle Virtual Box VM

Recently I was involved in a project where Linux was the operating system for the Sun Ray server. Most of the projects I did in the past were based on Solaris servers and for my own learning experiences I wanted to to setup Sun Ray software on a recent Linux server distribution. Out of curiosity I decided to use Oracle Enterprise Linux, which is a fully compatible Red Hat version and one of the supported Sun Ray server platforms.

This article describes my installation and configuration notes to install Oracle Enterprise Linux 5.4 on a Virtual Box VM. I describe the following steps:

  • Configure a Virtual Box VM for Oracle Enterprise Linux
  • Installation of Oracle Enterprise Linux 5.4 for Sun Ray Server
In a follow-up article I describe the Sun Ray specific installation and configuration steps:
  • Prepare Oracle Enterprise Linux for Sun Ray Server software
  • Install and Configure Sun Ray Server software 

Configure the Virtual Box VM for Oracle Enterprise Linux

If you do not know Virtual Box, you might have a look at the Virtual Box website and download the software. After I launched the Virtual Box GUI on my Apple Mac OSX notebook I performed the following steps:

  • Select "New" to create a new virtual machine,
  • After I entered the name of the VM (I used oel-5u4-srss), I choose Linux as Operating Systems Type and Red Hat as the version. In my case I used the 32-bit version, but 64-bit is also reported to work. See the below screenshot:

  • I choose 1024 MB for the Base Memory size,
  • In the Virtual Hard Disk window I used the default settings: enable Boot Hard Disk and enable Create new hard disk,
  • In the Virtual Hard Disk configuration wizard, I used Dynamically enabled storage with a Maximum size of the disk of 20 GB. See the below screenshot:

  • Finish the configuration wizard and your new VM will be created.

Before starting the VM, we have to do some additional VM configuration settings in order to install Oracle Enterprise Linux as a server:

  • In the Virtual Box GUI select your just created VM and select the Details option in the right part of the window,
  • Scroll down to the Network settings. By default, the Network adapter is created in NAT configuration. This is OK for client machines, but we want to use our VM as a server, so we have to change this into the Bridged adapter,
  • Select Network in the Details section and change the Attached to: from NAT to Bridged Adapter.

On my Apple notebook, I downloaded the DVD iso file from the Oracle website:

  • I downloaded OEL 5.4 for i386, the 32-bit version from,
  • Before the download start you have to read and agree to the terms & conditions.

In the Virtual Box GUI, I continue in the Details section to attach the downloaded iso file to the VM as CD-ROM:

  • Select Storage and below IDE Controller select the CD-ROM icon (which is listed as empty),
  • In the right-hand side of the window select the "Open Media Manager" icon at the CD/DVD Device to mount your downloaded iso file as installation media.

The Virtual Machine is now ready for installation of Oracle Enterprise Linux.

Installation of Oracle Enterprise Linux 5.4 for Sun Ray Server

Now it is time to start the just created VM. It automatically boots from the ISO file and you see the Oracle Enterprise Linux boot screen. Make sure you install in graphical mode (the default). I followed a standard installation and used a lot of default settings in the installation wizard, except the configuration for network address and hostname:

  • In the Network Devices window I changed the configuration of the ethernet device from DHCP to Manual IP,
  • I entered a static IP address and netmask,
  • I also disabled IPv6,
  • I configured a hostname and the settings for gateway and DNS.
When the installation wizard is finished it starts to install the packages, after some time the installation is ready and it reboots the VM. After the reboot you will see the Oracle Enterprise Welcome screen on the VM console and you have to finish with post-installation settings. These are the one I used in my test server: 

  • Disable Firewall
  • Disabled SELinux Setting
  • Kdump (which I ignored) and Date/Time setting
  • Created a new user
  • Sound Card (ignored)
  • Additional CDs (ignored)

Reboot to finalize the settings and when the system comes back you are ready to prepare the Sun Ray server installation. This will be described in a follow-up article.


I post here hands-on examples which I have used in my Oracle VDI Desktop Virtualization projects at customers and partners.


« May 2016