A few folks have been trying to get a Kiosk mode browser working. Whether for an actual "Kiosk" or for access to a web based application, this can be rather handy. I thought that I'd post how I've been doing it lately.

A kiosk web browser can also be handy for delivering access to Secure Global Desktop applications from Sun Rays. I have included a few additional steps to make the SGD experience better.

Install firefox in /opt:
----------------------------

Download the latest firefox from
ftp://ftp.mozilla.org/pub/firefox/releases/2.0.0.12/contrib/solaris_tarball/
Unzip firefox to /opt/firefox

Install and Configure Kiosk extensions:
-----------------------------------------

Download the two kiosk XPI's from
https://www.mozdevgroup.com/dropbox/jslib/signed/jslib_current_signed.xpi
http://brooklynmuseum.mozdevgroup.com/install/xpi/signed/bmakiosk_current-ff-generic_signed.xpi

Put them in /opt/firefox/bma
    mkdir /opt/firefox/bma

You will need ssh -X or be on the console to perform the remaining pieces

Register the Components
    /opt/firefox/firefox -install-global-extension /opt/firefox/bma/jslib_current_signed.xpi (If you get an error, try it again.)
    /opt/firefox/firefox -install-global-extension /opt/firefox/bma/bmakiosk_current-ff-generic_signed.xpi

Create a URL whitelist file.. /opt/firefox/whitelist
    allowed[sgdserver.domain.com, ALL];

Start the Kiosk extension admin GUI:
    /opt/firefox/firefox -kiosk admin
    Enter "admin" as the password
    Set the home page
    Tick With Titlebar
    Click the Filters Tab
        Click Enable Filters
        Put /opt/firefox/whitelist in the text box
    Click the Sessions Tab
        un-set the inactive timeout
    Click the Customize Tab
        un-tick tabbed browsing
        un-tick print button, zoom controls, save button, logout button
    Click OK

Set up the Java Plugin for x64
    ln -s /usr/java/jre/plugin/i386/ns7/libjavaplugin_oji.so /opt/firefox/plugins/.

Set up the Java Plugin for Sparc

ln -s /usr/java/jre/plugin/sparc/ns7/libjavaplugin_oji.so /opt/firefox/plugins/.


Configure Kiosk Mode:
-------------------------

Create a kiosk application called Secure Global Desktop
    vi /etc/opt/SUNWkio/applications/firefox.conf

KIOSK_APP_EXEC=/opt/firefox/firefox
KIOSK_APP_ARGS="-kiosk"
KIOSK_APP_LABEL="Firefox Kiosk"
KIOSK_APP_ICON=/opt/firefox/icons/mozicon50.xpm
KIOSK_APP_DESCRIPTION="Launch Firefox"

Set up Kiosk mode to launch a JDS 3 session
Add the Firefox application as AUTO start to the JDS 3 session.

SGD Integration:
-----------------------

If you are looking to point the browser at SGD, you will want to also make the following changes.

  • Set the home page to your SGD URL (http://sgd.domain.com/sgd/)
  • Add this line to your firefox.conf
KIOSK_APP_PROTOTYPE=sgd
  • To speed up initialization, remove Java cert approval, and remove SGD connection approval
As root launch tarantella and login. Accept java and tarantella conenction warning.
mkdir /etc/opt/SUNWkio/prototypes/sgd
cp -r ~/.tarantella to /etc/opt/SUNWkio/prototypes/sgd/
mkdir -p /etc/opt/SUNWkio/prototypes/sgd/.java/deployment/security
cp ~/.java/deployment/security/trusted.certs /etc/opt/SUNWkio/prototypes/sgd/.java/deployment/security/
Comments:

Hi.

Thanks for your post. I have read it and now my firefox y running like a kiosk, just what I want.

But I have a problem and I don't know how to solve it. I'm using whitelist, and i'm letting the firefox to browse only in two system (my SGD servers), in both have links to downloadables files, and, this is my problem, I can't download the files from the SGD servers.

I send to you the URL link that you can see in the html page:

https://server2.domain.es/sgd/tbsft/download.jsp?download=MDVfLV9GdW5lcmFsX2luX3NwYWNlXyhpbnN0KS5tcDM*

My white list file is:

allowed[*.domain.es, ALL];

I don't know why I can't download a file. Thanks.

Posted by 62.87.89.105 on September 30, 2008 at 08:13 AM PDT #

The previous post is mine.

Posted by Manuel Gil on September 30, 2008 at 08:14 AM PDT #

Hi,

there is an easier way by using Opera! Why use Opera? It already has all the Kiosk mode functionalities built-in and it has a way friendlier memory footprint. Depending on how many concurrent Kiosk sessions you might be facing this could be quite relevant. Best of all: Opera is available for Solaris too.

Here is the command line I use on one Sun Ray server for the Kiosk mode:

/usr/local/bin/opera -kioskmode -nosplash -nomail -nomaillinks -noprint -nosave -nohotlist -nomenu -nodownload -nosession -kioskbuttons -kioskwindows http://www.sun.com

There are lots of other options that could be added, e.g. pre-configured config files (e.g. with a pre-defined home page and other settings) can be supplied via the "-personaldir /path/to/dir/.opera" option.

With Opera it only takes you a few minutes to configure everything (because all this is already built-in) and you're quickly done and can focus on other things :-)

Opera for Solaris:
http://www.opera.com/download/solaris/

Documentation for Opera's built-in Kiosk Mode:
http://www.opera.com/support/mastering/kiosk/index.dml

I hope this might be useful to someone ...

Posted by DJ. on October 09, 2008 at 02:30 PM PDT #

Hey there, Craig. Does this apply to the pre-installed firefox in recent Solaris 10 releases?

Posted by Dante Brown on March 05, 2009 at 07:35 AM PST #

You could easily use the Firefox as delivered with Solaris. But why/ this would taint up that installation of Firefox which could be used by admin users on the console.

Posted by bhlackey on March 05, 2009 at 07:39 AM PST #

Hi,

I've tried this Kiosk mode and it works fine ... except for 1 point. I use SRSS with SGD ; when a user logs on SSGD then asks for an application, this application starts 'behind' the firefox window. How can I have all apps starting in the foreground ?

Thanks for your really useful blog !

Posted by Christophe on April 03, 2009 at 08:10 AM PDT #

Post a Comment:
  • HTML Syntax: NOT allowed

This blog copyright 2009 by ThinGuy