Like most System Engineers at Sun, I'm often called upon to demonstrate Sun's technology especially Solaris 10 and Sun Ray thin clients. In the past, demonstrating Sun Rays meant bringing a customer into our Sun office OR setting up a network server and device at the customer's location.
To make this much easier, I decided to follow the example of others and turn my Sun issued MacBook Pro into a Sun Ray server. As a result of this configuration, I can set two devices on my
customer's desk with only one ethernet cord and no power cords (have to keep those batteries charged) to
display the power of the Sun Ray thin client. I also have a configuration (thanks to Matt) the provides a multi-level Solaris environment via Solaris 10 Trusted Extensions along with the ability to display an MS Windows desktop using Win2003 running in a separate virtual machine on the same Mac. Very Cool!
To do this I needed:
- A MacBook Pro (mine is running 10.5.4)
- VMware Fusion 1.1.3 (unfortunately Virtual Box does not yet support bridged networing on MacOS X)
- Solaris 10 05/08 (free download available)
- Sun Ray Server Software 4.0
- Patch 127554-02
- A General Dynamics Tadpole Comet 15 mobile thin client (or other Sun Ray compatible device)
Here's how I did it:
- Install Solaris 10 using VMware Fusion and these settings.
- 1024 MB of RAM
- Bridged networking
- Install the Solaris 10 Entire Distribution
- Configur the Solaris IP address as 192.168.1.3
- Download the Sun Ray Server Software (it's free)
- unpack the downloaded tar image, this creates a directory srss_4.0
- install the apache tomcat server. In my case:
- su
- cd /opt
- tar xvf /Documents/srss_4.0/Supplemental/Apache_Tomcat/apache-tomcat-5.5.20.tar
- mv apache-tomcat-5.5.20 apache-tomcat
-
install Sun Ray Server Software
- cd ~jlaurent/Dcouments/srss_4.0
- ./utinstall (installs the Sun Ray server tools in /opt/SUNWut)
- patchadd 127554-02
- reboot
- PATH=$PATH:/opt/SUNWut/sbin
- Use utadm to add the 192.168.1.0 subnet as a shared Sun Ray network. Make sure to choose the option to offer IP addresses.
# utadm -A 192.168.1.0
### Configuring /etc/nsswitch.conf
### Configuring Service information for Sun Ray
### Disabling Routing
Selected values for subnetwork "192.168.1.0"
net mask: 255.255.255.0
no IP addresses offered
auth server list: 192.168.1.3
firmware server: 192.168.1.3
Accept as is? ([Y]/N): n
new netmask: [255.255.255.0]
Do you want to offer IP addresses for this subnet? (Y/[N]): y
new first Sun Ray address: [192.168.1.245]
number of Sun Ray addresses to allocate: [10]
auth server list: 192.168.1.3
To read auth server list from file, enter file name:
Auth server IP address (enter <CR> to end list):
If no server in the auth server list responds,
should an auth server be located by broadcasting on the network? ([Y]/N):
new firmware server: [192.168.1.3]
new router: [192.168.1.1]
Selected values for subnetwork "192.168.1.0"
net mask: 255.255.255.0
first unit address: 192.168.1.245
last unit address: 192.168.1.254
auth server list: 192.168.1.3
firmware server: 192.168.1.3
router: 192.168.1.1
Accept as is? ([Y]/N): y
### Configuring firmware version for Sun Ray
### Successfully enabled tftp for firmware downloads
All the units served by "sunray" on the 192.168.1.0
network interface, running firmware other than version
"4.0_127553-02_2008.03.06.15.04" will be upgraded at their next power-on.
### Configuring Sun Ray Logging Functions
### Turning on Sun Ray LAN connection
NOTE: utrestart must be run before LAN connections will be allowed
DHCP is not currently running, should I start it? ([Y]/N): y
- utrestart -c
- utconfig
Configuration of Sun Ray Core Services Software
This script automates the configuration of the Sun Ray Core Services
software and related software products. Before proceeding, you should
have read the Sun Ray Core Services 4.0 Installation Guide and filled
out the Configuration Worksheet. This script will prompt you for the
values you filled out on the Worksheet. For your convenience, default
values (where applicable) are shown in brackets.
Continue ([y]/n)? y
Enter Sun Ray admin password:
Re-enter Sun Ray admin password:
Configure Sun Ray Web Administration? ([y]/n)?
Enter Apache Tomcat installation directory [/opt/apache-tomcat]:
Enter HTTP port number [1660]:
Enable secure connections? ([y]/n)?
Enter HTTPS port number [1661]:
Enter Tomcat process username [utwww]:
Enable remote server administration? (y/[n])?
Configure Sun Ray Kiosk Mode? (y/[n])? y
Enter user prefix [utku]:
Enter group [utkiosk]:
Enter userID range start [150000]:
Enter number of users [25]:
Configure this server for a failover group? (y/[n])?
About to configure the following software products:
Sun Ray Data Store 3.0
Hostname: sunray
Sun Ray root entry: o=utdata
Sun Ray root name: utdata
Sun Ray utdata admin password: (not shown)
SRDS 'rootdn': cn=admin,o=utdata
Sun Ray Web Administration hosted at Apache Tomcat/5.5.20
Apache Tomcat installation directory: /opt/apache-tomcat
HTTP port number: 1660
HTTPS port number: 1661
Tomcat process username: utwww
Remote server administration: Disabled
Sun Ray Core Services 4.0
Failover group: no
Sun Ray Kiosk Mode: yes
Sun Ray Kiosk Mode 4.0
User name prefix: utku
Base user ID: 150000
Number of accounts: 25
Kiosk group name: utkiosk
Kiosk group ID: auto
Continue ([y]/n)? y
Updating Sun Ray Data Store schema ...
Updating Sun Ray Data Store ACL's ...
Creating Sun Ray Data Store ...
Restarting Sun Ray Data Store ...
Starting Sun Ray Data Store daemon .
Wed Jul 2 11:02 : utdsd starting
Loading Sun Ray Data Store ...
Executing '/usr/bin/ldapadd -p 7012 -D cn=admin,o=utdata' ...
adding new entry o=utdata
adding new entry o=v1,o=utdata
adding new entry utname=sunray,o=v1,o=utdata
adding new entry utname=desktops,utname=sunray,o=v1,o=utdata
adding new entry utname=users,utname=sunray,o=v1,o=utdata
adding new entry utname=logicalTokens,utname=sunray,o=v1,o=utdata
adding new entry utname=rawTokens,utname=sunray,o=v1,o=utdata
adding new entry utname=multihead,utname=sunray,o=v1,o=utdata
adding new entry utname=container,utname=sunray,o=v1,o=utdata
adding new entry utname=properties,utname=sunray,o=v1,o=utdata
adding new entry cn=utadmin,utname=sunray,o=v1,o=utdata
adding new entry utname=smartCards,utname=sunray,o=v1,o=utdata
adding new entry utordername=probeorder,utname=smartCards,utname=sunray,o=v1,o=utdata
adding new entry utname=policy,utname=sunray,o=v1,o=utdata
adding new entry utname=resDefs,utname=sunray,o=v1,o=utdata
adding new entry utname=prefs,utname=sunray,o=v1,o=utdata
adding new entry utPrefType=resolution,utname=prefs,utname=sunray,o=v1,o=utdata
adding new entry utPrefClass=advisory,utPrefType=resolution,utname=prefs,utname=sunray,o=v1,o=utdata
Added 18 new LDAP entries.
Creating Sun Ray Core Services Configuration ...
Adding user account for 'utwww' (ut admin web server user) ...done
Sun Ray Web Administration enabled to start at system boot.
Starting Sun Ray Web Administration...
See /var/opt/SUNWut/log/utwebadmin.log for server logging information.
Unique "/etc/opt/SUNWut/gmSignature" has been generated.
Restarting Sun Ray Data Store ...
Stopping Sun Ray Data Store daemon
Sun Ray Data Store daemon stopped
Starting Sun Ray Data Store daemon .
Wed Jul 2 11:02 : utdsd starting
Adding user admin ...
User(s) added successfully!
Creating new Sun Ray Kiosk Mode configuration ...
Validating new user ids.
Validating new user accounts.
Creating kiosk group utkiosk
Configuring new kiosk user accounts:
.........................
25 users configured
***********************************************************
The current policy has been modified. You must restart the
authentication manager to activate the changes.
***********************************************************
Configuration of Sun Ray Core Services has completed. Please check
the log file, /var/adm/log/utconfig.2008_07_02_11:01:42.log, for errors.
In MacOS
- Apple Menu > System Preferences > Network
- Location > Edit Locations
- Click the '+' Sign to create a new location and name it.
- Click on Ethernet
- Configure Manually
- IP address 192.168.1.1
- Netmask 255.255.255.0
- Click Apply
- Turn your Airport Wireless connection OFF. (This appears to interfere with the networking path to Solaris)
Connect the Sun Ray device directly to the Mac with a single ethernet cord. No hub required.
If you have done this correctly, when you power on the Sun Ray device it will get an IP address from Solaris and display a login screen.
Access the Sun Ray web based management tool by pointing your browser to http://localhost:1660
Nice tutorial.
Slightly off-topic, can you point me to any documentation concerning use of the SRSS in a secure (ie classified) computing environment? We would like to implement them where I work but our security dept is hemming and hawing about it, their main concern being the smart cards used in the SunRay appliances.
Thanks.
Posted by Mike on July 02, 2008 at 04:52 PM EDT #
This is really cool. Thanks for the sharing. I will going to try it out on my Mac.
Posted by Reynels on July 22, 2008 at 03:32 PM EDT #
Do you know if anyone's gotten MacOSX working as the 'user' operating system? (that's presented to a Ray user)
Posted by Heath Roberts on December 19, 2008 at 11:07 AM EST #
Although I don't know anyone personally who has done this, it's actually quite easy.
MacOS X has a built in VNC server. Once you enable it on a Mac OS X system, you can simply sent up the Sun Ray session to run vncviewer for Solaris and point to the Mac OS X system.
For MS Windows you use RDP or Citrix and for Unix/Linux systems you use X11 and GDM.
Posted by JIm Laurent on December 19, 2008 at 06:02 PM EST #
Yeah, but that's only one session per host, so there's no roi benefit. What about getting 80 concurrent users on an xserve running macosx? I'm sure The Steve would string me up for suggesting such a thing, but it would be a real breakthrough to have real multi-session srss on MacOSX.
Posted by jake on January 06, 2009 at 10:16 AM EST #
Jake, that's a limitation of OSX Server. It doesn't really do concurrent logins in that sense. Everything takes place on the OSX client; the server just provides authentication/authorization, managed preferences and maybe a file system for the home directory. Or it does Netboot to provide the OS over the network, but that still requires a Mac client to run.
I agree though -- it would be amazing if we could use SunRay thin clients to load OSX client logins. One way to do it would be if OSX (client) could run in virtual machines on top of solaris, then SRSS could be configured to display the login screens of those virtual clients using vncviewer. The virtual clients would be configured to do a network login to a separate Xserve (or Sun LDAP, etc).
Does VMWare even have a product that runs on Solaris though? Hey Sun, how about partnering with Apple on this? :)
Posted by Brent on January 06, 2009 at 07:30 PM EST #
Presumably MacOS X could run in Virtual Box on Solaris if Apple would allow it both technically and through the EULA.
Posted by Jim Laurent on January 06, 2009 at 07:54 PM EST #
Hackers and pirates have made OSX run in VMWare, so it could surely run in Virtual Box. It would seem to be a win-win for Sun and Apple if it were allowed. Sun has the enterprise hardware, and Apple the client software. Two great tastes...
Posted by Brent on January 06, 2009 at 08:05 PM EST #
Although I don't know anyone personally who has done this, it's actually quite easy.
MacOS X has a built in VNC server. Once you enable it on a Mac OS X system, you can simply sent up the Sun Ray session to run vncviewer for Solaris and point to the Mac OS X system.
For MS Windows you use RDP or Citrix and for Unix/Linux systems you use X11 and GDM.
Posted by wow power leveling on March 12, 2009 at 02:57 AM EDT #
I agree though -- it would be amazing if we could use SunRay thin clients to load OSX client logins. One way to do it would be if OSX (client) could run in virtual machines on top of solaris, then SRSS could be configured to display the login screens of those virtual clients using vncviewer. The virtual clients would be configured to do a network login to a separate Xserve (or Sun LDAP, etc).
Does VMWare even have a product that runs on Solaris though
Posted by lotro gold on June 24, 2009 at 04:48 AM EDT #
Hackers and pirates have made OSX run in VMWare, so it could surely run in Virtual Box. It would seem to be a win-win for Sun and Apple if it were allowed. Sun has the enterprise hardware, and Apple the client software. Two great tastes...
Posted by replica rolex on June 24, 2009 at 04:49 AM EDT #
Hackers and pirates have made OSX run in VMWare, so it could surely run in Virtual Box. It would seem to be a win-win for Sun and Apple if it were allowed. Sun has the enterprise hardware, and Apple the client software. Two great tastes...
Posted by aion gold on June 24, 2009 at 05:10 AM EDT #
http://www.7rkat.net/msn/index.php
http://www.7rkat.net/mgal
http://www.7rkat.net/ms
http://www.7rkat.net/do3a
http://www.7rkat.net/topics
http://www.7rkat.net/know
http://www.7rkat.net/amthal
http://www.7rkat.net/up
http://www.7rkat.net/video
http://www.7rkat.net/asbab
http://www.7rkat.net/qoran
http://www.7rkat.net/islameiat
http://www.7rkat.net/7rkat
http://www.7rkat.net/vb
Posted by حركات on October 08, 2009 at 10:00 AM EDT #
I recall that we were doing some testing with Aquaconnect. This would provide Terminal Services on a MacOS server. http://www.aquaconnect.net/
I would look into this.
Posted by Peter Colson on November 10, 2009 at 03:00 PM EST #
Aquaconnect indeed would do the job, but the per-seat licensing costs they're asking for are almost as expensive as buying iMacs.
Posted by Brent on November 10, 2009 at 03:03 PM EST #