Secure Global Desktop 4.31 Administration Guide
> Security
> Giving secure connections to a Secure Global Desktop server
Giving secure connections to a Secure Global Desktop server
Problem
You want to give all users secure connections to one
Secure Global Desktop server in an array.
Solution
In Array Manager, ensure that processing of Connections settings
is enabled, by checking the appropriate box on the Security panel.
Then use Object Manager to configure the organization object so that
all client devices will receive a secure connection when connecting to
the specified Secure Global Desktop server.
Case study
Indigo Insurance has an array of Secure Global Desktop servers but only
one, newyork.indigo-insurance.com, is exposed through the firewall. You want to
ensure all users get secure connections when connecting to this
server.
Solution
- In Array Manager, display Security properties. For Connection
Types, make sure that Apply When Users Log In is checked. Click Apply.
- In Object Manager, display properties for the organization
object.
- On the Attributes tab, choose Connections
from the list.
- Click New, and fill in the details for the connection:
- For Client Device, type
*
. This matches all client
devices. - For Secure Global Desktop server, type the peer DNS name of
the Secure Global Desktop server you want your users to connect to
securely, for example
newyork.indigo-insurance.com
. - For Connection, choose Secure.
- Use the arrow buttons to put your new connection type
specification first in the list.
- Click Apply.
Next steps
- You can override the connection type for everyone in an
organizational unit, or for individual users, using the Connections
attribute for OU objects or person objects.
- To define the connection type for some types of user, you
configure the Connections attribute for a profile object. For
example, the connection type for all UNIX users is configured using
the
o=Tarantella System Objects/cn=UNIX User
Profile
profile object.
Copyright © 1997-2007 Sun Microsystems, Inc. All rights reserved.