Secure Global Desktop 4.40 Administration Guide
> Clients and Webtops
> Client Profiles and the SGD Client
Client Profiles and the SGD Client
A client profile is a group of configuration settings that control the SGD Client. The settings in a client profile define the following:
- How the SGD Client connects to an SGD server, for example the URL to connect to and the proxy server to use
- The operating mode of the SGD Client, for example whether to display a webtop (Webtop mode) or whether the list of applications
that a user can run displays in the desktop Start or Launch menu (Integrated mode)
- How the SGD Client behaves, for example, if it loses a connection to an SGD server
Note Client profiles are not the same as user profiles.
User profiles control webtop content and other SGD-specific settings, such as printing and secure connections.
Every time the SGD Client starts it uses a client profile. Users have one client profile (one group of settings) for each SGD server they connect to.
This page includes the following topics:
Managing Client Profiles
Secure Global Desktop Administrators can create, edit, and delete client profiles for all parts of the organization, except users. Users can only edit their own client profiles.
Administrators
Administrators create, edit, and delete client profiles with the SGD administration tool, Profile Editor. The Profile Editor is only available to Administrators.
Administrators can create, edit, and delete client profiles for the following:
- Organizations
- Organizational units
- Profile objects in the
System Objects
organization, for example System Objects/LDAP Profile
Each object can only have one client profile.
The default system client profile is the profile for the System Objects
organization. This client profile can be edited but it cannot be deleted.
Users
Administrators can configure which users can edit their own client profiles. This is configured as follows:
- Enable profile editing for SGD
Profile editing for SGD is enabled by default.
- In the SGD Administration Console, click the Global Settings » Client device tab.
- Ensure the Editing check box is selected. It is selected by default.
Note If profile editing is disabled, it is disabled for all users, including Secure Global Desktop Administrators. However, Administrators can still create and edit client profiles using the Profile Editor application.
- Enable and disable profile editing in the organizational hierarchy.
Profile editing can be configured for organizations, organizational units or user profiles.
Profile editing can be inherited from a parent object in the organizational hierarchy so that Administrators can enable or disable profile editing for many users without having to edit each user profile. By default, profile editing is enabled for all users.
- In the SGD Administration Console, click the User Profiles tab and select an object in organization hierarchy.
- Click the Client device tab.
- Configure Client Profile Editing as follows:
- Select or deselect the Override Parent's Setting or the Override Global Setting check box.
Selecting this check box allows you to override the profile editing setting from any parent object. For example, profile editing can be disabled for an organizational unit, but enabled for a user profile in that organizational unit.
- Select or deselect the Enabled check box.
Selecting the check box enables profile editing for the user profile, or for all users in the organization unit or organization.
The initial state of this check box is the setting of the parent object.
- Click Save.
Users edit their own client profiles from the webtop. Click the Edit button in the Applications area of the webtop and then click the Client Settings tab.
Users can only edit the client profile for the SGD server they are currently connected to.
Note Anonymous users cannot edit client profiles. This is because these users are temporary.
Client Profile Settings
The following table lists the settings available in a client profile with a description of what they do.
Setting |
Description |
Login URL |
- The URL to use for SGD, for example
http://boston.example.com/sgd . - In Webtop mode, the URL is loaded automatically in the user's default web browser so that they can log in and access their webtop.
- In Integrated mode, the URL is only loaded in the user's default web browser if the user needs to log in to SGD,
or if the SGD Client needs to obtain proxy server settings.
- The URL in a client profile can be overridden by a command line argument.
- The default Login URL is
http://SGD-server:80/sgd/index.jsp .
|
Connect on System Login |
- If selected, the SGD Client is started automatically with this client profile whenever the user logs in to their client device.
- The SGD Client creates an application shortcut or symbolic link for itself in the startup folder for the desktop system. The links are created in the following locations:
- Microsoft Windows - the Windows startup folder for the current user, usually
homedrive\Documents and Settings\username\Start Menu\Programs\Startup . - KDE -
$HOME/.kde/autostart - Gnome -
$HOME/.config/autostart - Sun Java Desktop System -
$HOME/.config/autostart
- This check box is deselected by default.
|
Add applications to Start Menu |
- Controls how users interact with SGD.
- If the check box is selected, the applications a user can run display in the desktop Start menu on the client device (Integrated mode). Users do not have any of the controls that are available on a webtop, for example controls for suspending and resuming applications.
- If the check box is deselected, the applications a user can run display on a webtop in a web browser (Webtop mode).
- This check box is deselected by default. Webtop mode is the default.
|
Automatic Client Login |
- If the check box is selected, the SGD Client tries to log the user in using an authentication token as soon as it starts.
- You can only select the check box, if the Add applications to Start Menu check box is selected.
- Only select this check box if the Add applications to Start Menu check box is selected.
- This check box is deselected by default.
|
Alternative PDF viewer |
- The application command for an alternative PDF viewer to use with PDF printing.
- If the application is not on the user's
PATH , type the full path to the application. - This setting only applies to UNIX, Linux, and Mac OS X platform client devices.
|
Logging |
- Controls the amount of information that is output to the SGD Client log file.
- The output is logged to a text file in the same directory as the SGD Client.
- The default is Errors only.
|
Preferred Language |
- The default language to use when the SGD Client is started from the command line, for example when the SGD Client is
in Integrated mode.
- The language selected is used for messages displayed by the SGD Client.
- See Working with users in different locales for details.
- The default is en.
|
Check for Local X Server |
- If the check box is selected, the SGD Client checks whether there is an X server running on the client device.
- Checking for a local X server can improve performance when launching X applications that are configured to display using an X server on the client device. If a local X server is not available, an independent window is used instead.
- This setting only applies to Windows client devices.
- This check box is deselected by default.
|
Proxy settings |
- Settings that control how the SGD Client determines what proxy servers to use.
- Use Default Web Browser Settings means use the proxy server settings configured in the user's default web browser.
- Manual Proxy Settings allows you to define the proxy server settings in the client profile. You can only specify an HTTP proxy server.
- In Integrated mode, if the proxy settings are determined from a web browser, the SGD Client has to start the web browser at least once in
order to detect what the proxy settings are.
- If the proxy settings are determined from a web browser, the settings are cached and used the next time the SGD Client starts.
- If Establish Proxy Settings On Session Start is enabled, the SGD Client starts the user's default web browser so that the proxy settings can be determined.
The SGD Client does this every time it starts. The cached proxy settings are not used.
- The Use Default Web Browser Settings check box is selected by default. The Establish Proxy Settings On Session Start check box is deselected by default.
|
Connection Failure |
- Settings that control what the SGD Client does if the connection to an SGD server is lost, whether to always reconnect, to never reconnect or to ask the user.
- If the SGD Client reconnects, these settings control how many attempts are made to reconnect and the time in seconds between each attempt.
- If the SGD Client is unable to reconnect, the user session ends and any running applications are ended or suspended, depending on the resumability setting of the application.
- The default settings are to always to reconnect and make 6 attempts to reconnect at 10 second intervals.
|
The Profile Cache
Client profiles created by Administrators are stored on the SGD server on which they are created and then copied to all the
SGD servers in the array so that they are available for editing on any SGD server.
When a user first logs in to SGD, the SGD Client downloads the client profile to a profile cache on the client device.
The client profile that is downloaded is the first match of the following:
- The client profile defined for a user profile object in the System Objects organization that is assigned to the user.
For example, if the user is authenticated using LDAP authentication and a client profile exists for the
System Objects/LDAP Profile
object, this is the profile that is downloaded. - The client profile defined by an Administrator for the organizational unit or organization to which the user belongs.
If there is no client profile for the user's organizational unit, SGD
checks any parent object further up the organizational hierarchy to see whether they have a client profile.
- The system default client profile defined for the
System Objects
object.
When a user edits and saves a client profile, they override the client profile defined by an Administrator (or the system default client profile) and create a user-specific client profile that is only saved in the profile cache on the client device.
Note Users must log out of SGD and log in again for changes to their client profile to take effect.
The profile cache is specific to each user who logs in to SGD from the client device and is stored in the following locations:
The same profile cache is used by the SGD Client whether it has been installed manually or automatically.
The profile cache is updated each time the user edits a client profile or each time the user logs in if they are using the client profile defined by an Administrator.
The profile cache contains one client profile for each SGD server the user connects to.
Users can restore a client profile to the default settings by editing the client profile and clicking the Reset button. This resets the client profile to the settings defined for
the system default client profile on the System Objects
object.
Microsoft Windows Users With Roaming User Profiles
Users with Microsoft Windows client devices can have roaming user profiles. Roaming user profiles provide the user with the same working environment,
no matter which Microsoft Windows computer they use. If Microsoft Windows users have roaming user profiles, the SGD client profile
is automatically adjusted to allow for this, as follows:
- Settings specific to the user's client device, for example the proxy server configuration, are stored on the client device.
By default, this is homedrive\Documents and Settings\username\Local Settings\Application Data\Sun\SSGD\profile.xml
- Settings specific to the user, for example the preferred language, are stored in the location of the roaming user profile.
Usually this is homedrive\Documents and Settings\username\Application Data\Sun\SSGD\profile.xml
Note This location also contains the user's hostsvisited
and certstore.pem
files
The following settings from the SGD client profile are stored in the location of the user's roaming profile:
Setting |
Profile Line(s) |
Login URL |
<url> |
Add applications to Start Menu |
<mode> |
Automatic Client Login |
<autologin> <AT> |
Connect on System Login |
<autostart> |
Connection Failure |
<reconnect_mode> <reconnect_attempts> <reconnect_interval> |
The settings that are stored with the user's roaming profile are controlled by the /opt/tarantella/var/serverconfig/local/roamingattributes.properties
file.
Copyright © 1997-2007 Sun Microsystems, Inc. All rights reserved.