Contents

Introduction to Secure Global Desktop

Introducing Secure Global Desktop

• Introducing Tarantella Secure Global Desktop Enterprise Edition
• Introducing the three-tier architecture
• Understanding webtop and emulator sessions
• Introducing Array Manager
• Introducing Object Manager
• Introducing the Secure Global Desktop Web Server

About this version of Secure Global Desktop

• Sun Secure Global Desktop Software Release Notes
• What's new in this release of Sun Secure Global Desktop Software?
• Which LDAP directory servers are supported?

Copyright and legal information

• Sun Secure Global Desktop Software legal and copyright information

Getting started

About your Secure Global Desktop installation

• Where is Secure Global Desktop installed?
• What's in the Secure Global Desktop installation directory?
• Upgrading a customized Secure Global Desktop installation
• What operating system changes do I need to make?
• How much CPU and memory does Secure Global Desktop require?
• Setting up a Secure Global Desktop Enhancement Module
• What X fonts are installed?
• Configuring your own web server for use with Secure Global Desktop
• Licensing and Sun Secure Global Desktop Software

Getting started

• How do I add new Secure Global Desktop Administrators?
• What ports does Secure Global Desktop use?
• What do I need to tell my users?
• What happens when a user's password expires?

Secure Global Desktop clients

• Which clients are supported?
• Using the Secure Global Desktop Client
• User preferences files on UNIX, Linux and Mac OS X client devices
• Secure Global Desktop and Java archives

The browser-based webtop

• Does the browser-based webtop use themes?
• Can I use the browser-based webtop without Java™?
• Relocating the browser-based webtop to your own JSP container

Native Clients

• How can I make additional Native Clients available?
• Customizing the Native Client for UNIX
• Running the Native Client from the command line

Arrays

Managing arrays

• What is an array?
• Setting up and dismantling a Secure Global Desktop array
• Backing up and restoring a Secure Global Desktop installation
• Every server in the array has been disabled and no-one can access Secure Global Desktop
• Managing unauthenticated connections to Secure Global Desktop

Array Manager reference

• Application Launch properties (array-wide)
• Array properties (array-wide)
• Audio Protocol Engine properties (server-specific)
• Channel Protocol Engine properties (server-specific)
• Character Protocol Engine properties (server-specific)
• Emulator Sessions properties (array-wide)
• Execution Protocol Engine properties (server-specific)
• General properties (server-specific)
• License properties (array-wide)
• Load Balancing properties (array-wide)
• Print Protocol Engine properties (server-specific)
• Printing properties (array-wide)
• Security properties (array-wide)
• Security properties (server-specific)
• Secure Global Desktop Login properties (array-wide)
• Smart Card Protocol Engine properties (server-specific)
• Tuning properties (server-specific)
• X Protocol Engine properties (server-specific)

Load balancing

• Introducing webtop and emulator session load balancing
• Introducing application server load balancing
• Configuring application server load balancing
• Tuning application server load balancing
• Editing application server load balancing properties
• Troubleshooting CPU/memory-based application server load balancing

Logging

• Using log filters to troubleshoot problems on the Secure Global Desktop server
• Using log filters for auditing

Modeling an organization

The Secure Global Desktop datastore

• Objects and the organizational hierarchy
• What is ENS?
• The Secure Global Desktop datastore and Tarantella Federated Naming
• What is the Tarantella System Objects organization?
• What is a role object?
• Roles in Secure Global Desktop
• Populating the Secure Global Desktop organizational hierarchy using a batch script
• All Administrators have been removed and no-one can use the administration tools

Creating applications and publishing them on users' webtops

• Creating and publishing an application object to users
• Creating and configuring a person object
• Mirroring your LDAP organization in ENS
• Using Directory Services Integration

Windows applications

• Do I need to license Windows Terminal Services?
• Configuring Microsoft Windows Terminal Services for use with Secure Global Desktop
• Remapping or hiding Windows 2000 application server drives
• Setting up and configuring client drive mapping
• Configuring client drive mapping on non-Windows clients
• Running Windows applications on client devices
• How do I enable sound in Windows applications?
• Using smart cards with Windows applications
• Using seamless windows for Windows applications

Troubleshooting applications

• A Kiosk application isn't appearing full-screen
• A session doesn't end when the user exits the application
• An application exits immediately after starting
• An application requires a richer set of cursors
• An application won't start
• An application's animation appears jumpy
• Applications disappear after about two minutes
• Can I access web applications through Secure Global Desktop?
• Can I prevent users from launching applications with a different username and password?
• Can I use multiple monitors with Secure Global Desktop?
• Can I use Secure Global Desktop to access VMS applications?
• How do I run a Common Desktop Environment (CDE) session?
• Secure Global Desktop uses too much of my network's bandwidth
• Troubleshooting sound in Windows applications
• Users are having problems accessing client drives
• Users are unable to use smart cards with Windows applications
• Users can't copy and paste text or graphics
• Users complain of poor performance with the Windows desktop
• Users have problems displaying high color X applications
• Users see font problems
• Users see window clipping with Client Window Management applications
• Using shadowing to troubleshoot a user's problem
• Using shadowing in the classroom
• Using Windows Terminal Services, users are prompted for usernames and passwords too often
• When X authorization is enabled, applications fail to start

Object Manager reference

• 3270 application object
• 5250 application object
• Active Directory container object
• Character application object
• Document object
• Domain component object
• Group object
• Host object
• Organization object
• Organizational unit object
• Person object
• Windows application object
• X application object

3270

• 3270 Host (--hostname)
• Background Color (--3270bg) [3270]
• Close Telnet Action (--3270tnclose) [3270]
• Enable File and Settings menus (--3270si) [3270]
• Enable menu bar (--3270mb) [3270]
• Foreground Color (--3270fg) [3270]
• Keyboard Type (--3270kt) [3270]
• Maximize the emulator window (--3270ma) [3270]
• Port Number (--portnumber) [3270]
• Soft Button Levels (--3270bl) [3270]

5250

• AS/400 Host (--hostname)
• Background Color (--bg) [5250]
• Close Telnet Action (--tnclose) [5250]
• Enable File and Settings menus (--si) [5250]
• Enable menu bar (--mb) [5250]
• Foreground Color (--fg) [5250]
• Keyboard Type (--kt) [5250]
• Maximize the emulator window (--ma) [5250]
• Port Number (--portnumber) [5250]
• Soft Button Levels (--bl) [5250]

Adaptive Internet Protocol

• Allow delayed updates (--delayed)
• Color quality (--quality)
• Command Compression (--compression)
• Command Execution (--execution)
• Interlaced Images (--interlaced)
• Use graphics acceleration (--accel)

Advanced

• Application only supports 3-button mouse (--force3button)
• Attribute Map (--attributemap)
• Color Map (--colormap)
• Environment Variables (--env)
• Emulator Applet Page (--empage)
• Euro Character (--euro)
• Keep launch connection open (--keepopen)
• Keyboard Map (--keymap)
• Lock keymap (--keymaplock)
• Login Script (--login)
• Middle Mouse Timeout (--middlemouse)
• Monitor Resolution (--dpi)
• Protocol Arguments (--protoargs)
• Resumable For (--resumetimeout)
• Share resources between similar sessions (--share)
• Window Close Action (--windowclose)
• Window Manager (--winmgr)

Appearance

• Border Style (--border)
• Color (--rootcolor)
• Cursor (--cursor)
• Fixed font size (--fixedfont)
• Font Family (--font)
• Font Size (--fontsize)
• Root Window (--roottype)
• Scroll Style (--scrollstyle)
• Status Line (--statusline)
• Use Windows cursor (--wincursor)
• Wrap long lines (--autowrap)

Behavior

• Answerback Message (--answermsg)
• Application key mode (--appkeymode)
• Code Page (--codepage)
• Cursor Keys (--cursorkeys)
• Escape Sequences (--escape)
• Keypad (--keypad)

Client drive mapping

• Client Drive Mapping (--cdm)

Connections

• Connections (--conntype)

Directory Services Integration

• LDAP Groups (--ldapgroups)
• LDAP Search (--ldapsearch)
• LDAP Users (--ldapusers)

General

• Address (--address)
• Application Command (--app)
• Arguments For Command (--args)
• Authentication (--auth)
• Available to run applications (--available)
• Bandwidth Limit (--bandwidth)
• Color depth (--depth)
• Columns (--cols)
• Client's maximum size (--maximize)
• Connection Method (--method)
• Description (--description)
• Display Using (--displayusing)
• Email Address (--email)
• Emulation Type (--emulator)
• Height (--height)
• Inherit parent's webtop content (--inherit)
• Keyboard Map (--keymap)
• Lines (--lines)
• Load Balancing Algorithm (--loadbal)
• Location (--location)
• Max Instances (--maxinstances)
• May log in to Secure Global Desktop (--enabled)
• Name (--name) [objects with "common name"]
• Name (--name) [domain component object]
• Name (--name) [organization object]
• Name (--name) [organizational unit object]
• Open in new browser window (--newbrowser)
• Preferred Locale (--preflocale)
• Resumable (--resumable)
• Scale to fit window (--scalable)
• Session Ends When (--endswhen)
• Shared between users (guest) (--shared)
• Surname (--surname)
• Terminal Type (--termtype)
• Try running from client first (--trylocal)
• URL (--url)
• Username (--user)
• Webtop Hints (--hints)
• Webtop Icon (--icon)
• Webtop Theme (--webtop)
• Width (--width)
• Windows NT Domain (--ntdomain)
• Windows Protocol (--winproto)

Hosts tab

• Hosts tab (--appserv)

Links tab

• Links tab (--links)

Members tab

• Members tab (--member)

Printing

• Client printers (--mapprinters)
• Display Adobe Reader Print dialog (--pdfprompt)
• Driver name (--pdfdriver)
• Let users print to a PDF local file (--pdfviewerenabled)
• Let users print to a PDF printer (--pdfenabled)
• Make PDF file printer the default for Windows 2000/3 (--pdfviewerisdefault)
• Make PDF printer the default for Windows 2000/3 (--pdfisdefault)
• User-specific printing configuration (--userprintingconfig)

User authentication

• Secure Global Desktop and user authentication
• Denying users access to Secure Global Desktop after failed login attempts
• All login authorities are disabled and no-one can access Secure Global Desktop
• Using shared accounts for "guest" users
• An "Ambiguous username" dialog is displayed when a user tries to log in

Web server/third party authentication

• Web server/third party authentication
• Introducing web server authentication
• Enabling web server authentication for the browser-based webtop
• Enable web server authentication for the classic webtop
• Security considerations of using web server authentication
• Users experience problems with web server authentication
• Can I use client certificates with web server authentication?
• Can I use SafeWord® PremierAccess™ with web server authentication?
• Can I use other web authentication schemes with Secure Global Desktop web server authentication?
• Trusted users and third party authentication

Login authorities

• Login authorities
• The Anonymous user login authority
• The ENS login authority
• The NT login authority
• Enabling the NT login authority
• The LDAP login authority
• Enabling the LDAP login authority
• LDAP users can't log in to Secure Global Desktop
• Can I deny an LDAP user access to Secure Global Desktop?
• The Active Directory login authority
• Enabling the Active Directory login authority
• The UNIX group login authority
• The UNIX user login authority
• The SecurID login authority
• Enabling the SecurID login authority

Security

Security and Secure Global Desktop

• Security and Secure Global Desktop
• What is the Secure Global Desktop Security Pack?
• Getting started with the Secure Global Desktop Security Pack
• Improving security between client devices and Secure Global Desktop servers
• Improving security between Secure Global Desktop servers and application servers
• Giving secure connections across the Internet
• Giving secure connections to a Secure Global Desktop server
• Giving secure connections to all users in a department
• How do I tell what connection type a user gets?
• Tuning the SSL Daemon process
• Selecting a cipher suite for secure connections
• Securing connections between Secure Global Desktop servers
• Securing the SOAP connections to a Secure Global Desktop server
• Securing connections to LDAP directory servers
• Installing and using SSH with Secure Global Desktop

Proxy servers

• Using Secure Global Desktop with proxy servers

Firewalls

• Using Secure Global Desktop with firewalls
• Using Secure Global Desktop with the HTTPS port through a firewall
• What are peer DNS names and external DNS names?

Certificate authority certificates

• What certificates does the Secure Global Desktop Security Pack support?
• User prompts and root certificates
• What are X.509 certificates and why do I need one?
• Obtaining and installing an X.509 certificate
• Can I use an X.509 certificate for another product with Secure Global Desktop?
• Sharing web server and Secure Global Desktop server certificates
• Can I chain Certificate Authority certificates?
• How can I add my own flavor of certificate?

Printing

• Introducing Secure Global Desktop printing
• Printing from a UNIX application server
• Printing from a Microsoft Windows 2000/2003 application server
• Printing from a Microsoft Windows NT 4 application server
• Printing from a Microsoft Windows NT 3.51 application server
• Configuring the Secure Global Desktop Server to accept remote print requests
• Configuring printing if you are using the Common UNIX Printing System (CUPS)
• Configuring printing for UNIX clients
• Configuring Secure Global Desktop print job conversion
• Configuring Secure Global Desktop PDF printing
• The prtinstall.en.sh script
• Users can't print from applications displayed through Secure Global Desktop
• Troubleshooting printer preferences and settings
• With Secure Global Desktop PDF printing, fonts don't print as expected
• What printers are supported by Secure Global Desktop?
• Can I set a time limit for print jobs?
• Why do UNIX clients have a printer called _Default created in their Windows 2000/2003 application session?
• Do I have to use distributed printing?
• If the array changes, do I have to re-configure printing?
• Can I change the name of the printer in the Windows 2000/2003 application session?
• Can I force users to print only to their default client printer?

Customizing Secure Global Desktop

Applications

• Launching an application from a URL
• How do I use my own X fonts?
• Terminal emulator attribute maps
• Terminal emulator color maps
• Terminal emulator keyboard maps

Login scripts

• What are login scripts?
• Increasing launch timeouts
• Login script Tcl commands
• The tarantella Tcl command
• Login script variables
• Login scripts supplied with Secure Global Desktop
• A login script returns an error

Command line reference

• The tarantella command
• The tarantella archive command
• The tarantella array command
• The tarantella array detach command
• The tarantella array join command
• The tarantella array list command
• The tarantella array make_primary command
• The tarantella arraymanager command
• The tarantella config command
• The tarantella config edit command
• The tarantella config list command
• The tarantella emulatorsession command
• The tarantella emulatorsession end command
• The tarantella emulatorsession info command
• The tarantella emulatorsession list command
• The tarantella emulatorsession shadow command
• The tarantella emulatorsession suspend command
• The tarantella help command
• The tarantella license command
• The tarantella license add command
• The tarantella license info command
• The tarantella license list command
• The tarantella license query command
• The tarantella license remove command
• The tarantella license status command
• The tarantella object command
• The tarantella object add_host command
• The tarantella object add_link command
• The tarantella object add_member command
• The tarantella object delete command
• The tarantella object edit command
• The tarantella object list_attributes command
• The tarantella object list_contents command
• The tarantella object new_3270app command
• The tarantella object new_5250app command
• The tarantella object new_charapp command
• The tarantella object new_container command
• The tarantella object new_dc command
• The tarantella object new_doc command
• The tarantella object new_group command
• The tarantella object new_host command
• The tarantella object new_org command
• The tarantella object new_orgunit command
• The tarantella object new_person command
• The tarantella object new_windowsapp command
• The tarantella object new_xapp command
• The tarantella object remove_host command
• The tarantella object remove_link command
• The tarantella object remove_member command
• The tarantella object rename command
• The tarantella object script command
• The tarantella objectmanager command
• The tarantella passcache command
• The tarantella passcache delete command
• The tarantella passcache edit command
• The tarantella passcache list command
• The tarantella passcache new command
• The tarantella print command
• The tarantella print cancel command
• The tarantella print list command
• The tarantella print move command
• The tarantella print pause command
• The tarantella print resume command
• The tarantella print start command
• The tarantella print status command
• The tarantella print stop command
• The tarantella query command
• The tarantella query audit command
• The tarantella query billing command
• The tarantella query errlog command
• The tarantella query uptime command
• The tarantella restart command
• The tarantella role command
• The tarantella role add_link command
• The tarantella role add_member command
• The tarantella role list command
• The tarantella role list_links command
• The tarantella role list_members command
• The tarantella role remove_link command
• The tarantella role remove_member command
• The tarantella security command
• The tarantella security certinfo command
• The tarantella security certrequest command
• The tarantella security certuse command
• The tarantella security customca command
• The tarantella security decryptkey command
• The tarantella security peerca command
• The tarantella security start command
• The tarantella security stop command
• The tarantella setup command
• The tarantella start command
• The tarantella start cdm command
• The tarantella status command
• The tarantella stop command
• The tarantella stop cdm command
• The tarantella tscal command
• The tarantella tscal free command
• The tarantella tscal list command
• The tarantella tscal return command
• The tarantella uninstall command
• The tarantella version command
• The tarantella webserver command
• The tarantella webserver add_trusted_user command
• The tarantella webserver delete_trusted_user command
• The tarantella webserver list_trusted_users command
• The tarantella webserver restart command
• The tarantella webserver start command
• The tarantella webserver stop command
• The tarantella webtopsession command
• The tarantella webtopsession list command
• The tarantella webtopsession logout command

Secure Global Desktop applets

• How does Secure Global Desktop use applets?
• The ttawebtop.cgi CGI program
• The TTAAPPLET tag
• Launching applications from JavaScript
• Logging in with the Secure Global Desktop applets
• Applet parameter data types

Client drive mapping (CDM) applet

• Client drive mapping applet
• Client drive mapping applet parameters

Methods

• login
• logout
• scriptStart

Framework applet

• Framework applet
• Framework applet parameters

Methods

• addValue
• getUserName
• getValue
• getWebtopFramesetURL
• getWebtopURL
• isLoggedIn
• login
• logout
• removeValue
• scriptStart

Login applet

• Login applet
• Login applet parameters

Methods

• resetNamePassword

Print applet

• Print applet
• Print applet parameters

Methods

• cancelCurrentJob
• countJobs
• getActive
• getEnabled
• getPrinterName
• getPrinterPort
• getPrinterType
• getPrintState
• getUnixTempDir
• getWindowsTempDir
• login
• logout
• scriptStart
• setActive
• setEnabled
• setPausedState
• setPrinterName
• setPrinterPort
• setPrinterType
• setUnixTempDir
• setWindowsTempDir

Terminal emulator applet

• Terminal emulator applet
• Terminal emulator applet parameters

Methods

• getEmulatorState
• getText
• login
• logout
• scriptStart
• sendKey
• setText
• suspendApplication

Webtop script applet

• Webtop script applet
• Webtop script applet parameters

Methods

• areObjectsInitialized
• closeHierarchyLevel
• getApplicationType
• getCurrentIteratorElement
• getIteratorForAllOpenHierarchyLevels
• getIteratorForHierarchyLevel
• getIteratorHasMoreElements
• getLaunchWaitTimeOut
• getNextIteratorElement
• getNumberOfObjects
• getNumberOfObjectsInGroup
• getObjectClass
• getObjectDisplayName
• getObjectDisplayNameByName
• getObjectFullName
• getObjectImageName
• getObjectImageNameByName
• getObjectPlacement
• getParentGroupName
• getTotalNumberOfObjects
• isApplication
• isDocument
• isGroup
• isHierarchyEnabled
• isOpenGroup
• isRunning
• killIterator
• launchByObjectName
• launchByObjectNumber
• login
• logout
• openHierarchyLevel
• receivedEvent
• scriptStart
• setLaunchWaitTimeOut

Webtop tray applet

• Webtop tray applet
• Webtop tray applet parameters

Methods

• areObjectsInitialized
• closeHierarchyLevel
• getApplicationType
• getCurrentIteratorElement
• getIteratorForAllOpenHierarchyLevels
• getIteratorForHierarchyLevel
• getIteratorHasMoreElements
• getLaunchWaitTimeOut
• getNextIteratorElement
• getNumberOfObjects
• getNumberOfObjectsInGroup
• getObjectClass
• getObjectDisplayName
• getObjectDisplayNameByName
• getObjectFullName
• getObjectImageName
• getObjectImageNameByName
• getObjectPlacement
• getParentGroupName
• getTotalNumberOfObjects
• isApplication
• isDocument
• isGroup
• isHierarchyEnabled
• isOpenGroup
• isRunning
• killIterator
• launchByObjectName
• launchByObjectNumber
• login
• logout
• openGroup
• openHierarchyLevel
• openParentGroup
• receivedEvent
• scriptStart
• setLaunchWaitTimeOut

X emulator applet

• X emulator applet
• X emulator applet parameters

Methods

• getEmulatorState
• getProperty
• login
• logout
• registerProperty
• scriptStart
• setProperty
• suspendApplication
• unregisterProperty