SLAC CPE Software Engineering Group
 

Sunray Setup Information

on Linux

SLAC Detailed
SLAC Computing
Software Home
Software Detailed
 

 

You can look in:  /var/log/SUNWut/  area for log files with the complete configuration

 

 

Setting up the Linux Sunray Server

 

> ./utadm -A 172.27.8.0 

 

 

Selected values for subnetwork "172.27.8.0"

    net mask:           255.255.252.0

    no IP addresses offered    (We provide the DHCP services separately)

    auth server list:   172.27.8.22 172.27.8.23

    firmware server:    172.27.8.22

  Accept as is? ([Y]/N):  y

### successfully setup "/etc/opt/SUNWut/net/netmasks" file

### Configuring firmware version for Sun Ray

Unsupported platform

### Configuring Sun Ray Logging Functions

### Turning on Sun Ray LAN connection

 

 

[root@sunsrv02 sbin]# ./utconfig

 

Configuration of Sun Ray Core Services Software

 

This script automates the configuration of the Sun Ray Core Services

software and related software products.  Before proceeding, you should

have read the Sun Ray Core Services 4.0 Installation Guide and filled out

the Configuration Worksheet.  This script will prompt you for the values

you filled out on the Worksheet.  For your convenience, default values

(where applicable) are shown in brackets.

 

Continue ([y]/n)? y

Enter Sun Ray admin password:

Re-enter Sun Ray admin password:

/opt/SUNWut/sbin/utpw: error while loading shared libraries: libldap.so.199: cannot open shared object file: No such file or directory

 

                         

SRSS 4.0

TO FIX PROBLEM:

                                 [root@sunsrv02 sbin]# ln -s /usr/lib/libldap.so.2 /usr/lib/libldap.so.199

                                 [root@sunsrv02 sbin]# ln -s /usr/lib/libgdbm.so.2 /usr/lib/libgdbm.so.3

                                 [root@sunsrv02 sbin]# ln -s /usr/lib/liblber.so.2 /usr/lib/liblber.so.199

SRSS 4.2:

ln -s /usr/lib/libldap-2.3.so.0.2.31 /usr/lib/libldap.so.199

ln -s /usr/lib/liblber-2.3.so.0.2.31 /usr/lib/liblber.so.199

 

 

[root@sunsrv02 sbin]# ./utconfig

 

Configuration of Sun Ray Core Services Software

 

This script automates the configuration of the Sun Ray Core Services

software and related software products.  Before proceeding, you should

have read the Sun Ray Core Services 4.0 Installation Guide and filled out

the Configuration Worksheet.  This script will prompt you for the values

you filled out on the Worksheet.  For your convenience, default values

(where applicable) are shown in brackets.

 

Continue ([y]/n)? y

Enter Sun Ray admin password:

Re-enter Sun Ray admin password:

 

Configure Sun Ray Web Administration? ([y]/n)? y

Enter Apache Tomcat installation directory [/opt/apache-tomcat]:        

Enter HTTP port number [1660]:

Enable secure connections? ([y]/n)? y

Enter HTTPS port number [1661]:

Enter Tomcat process username [utwww]:

Enable remote server administration? (y/[n])? y

 

Configure Sun Ray Kiosk Mode? (y/[n])? n

 

Configure this server for a failover group? (y/[n])? y

 

About to configure the following software products:

 

Sun Ray Data Store 3.0

    Hostname: sunsrv02

    Sun Ray root entry: o=utdata

    Sun Ray root name: utdata

    Sun Ray utdata admin password: (not shown)

    SRDS 'rootdn': cn=admin,o=utdata

 

Sun Ray Web Administration

    Apache Tomcat installation directory: /opt/apache-tomcat

    HTTP port number: 1660

    HTTPS port number: 1661

    Tomcat process username: utwww

    Remote server administration: Enabled

 

Sun Ray Core Services 4.0

    Failover group: yes

    Sun Ray Kiosk Mode: no

 

Continue ([y]/n)? y

Updating Sun Ray Data Store schema ...

 

Updating Sun Ray Data Store ACL's ...

 

Creating Sun Ray Data Store ...

 

Restarting Sun Ray Data Store ...

Starting Sun Ray Data Store daemon .

Thu Dec 27 18:26 : utdsd starting

 

Loading Sun Ray Data Store ...

 

Executing '/usr/bin/ldapadd -h sunsrv02 -x -p 7012 -D cn=admin,o=utdata' ...

adding new entry "o=utdata"

adding new entry "o=v1,o=utdata"

adding new entry "utname=sunsrv02,o=v1,o=utdata"

adding new entry "utname=desktops,utname=sunsrv02,o=v1,o=utdata"

adding new entry "utname=users,utname=sunsrv02,o=v1,o=utdata"

adding new entry "utname=logicalTokens,utname=sunsrv02,o=v1,o=utdata"

adding new entry "utname=rawTokens,utname=sunsrv02,o=v1,o=utdata"

adding new entry "utname=multihead,utname=sunsrv02,o=v1,o=utdata"

adding new entry "utname=container,utname=sunsrv02,o=v1,o=utdata"

adding new entry "utname=properties,utname=sunsrv02,o=v1,o=utdata"

adding new entry "cn=utadmin,utname=sunsrv02,o=v1,o=utdata"

adding new entry "utname=smartCards,utname=sunsrv02,o=v1,o=utdata"

adding new entry "utordername=probeorder,utname=smartCards,utname=sunsrv02,o=v1,o=utdata"

adding new entry "utname=policy,utname=sunsrv02,o=v1,o=utdata"

adding new entry "utname=resDefs,utname=sunsrv02,o=v1,o=utdata"

adding new entry "utname=prefs,utname=sunsrv02,o=v1,o=utdata"

adding new entry "utPrefType=resolution,utname=prefs,utname=sunsrv02,o=v1,o=utdata"

adding new entry "utPrefClass=advisory,utPrefType=resolution,utname=prefs,utname=sunsrv02,o=v1,o=utdata"

 

Added 18 new LDAP entries.

 

Creating Sun Ray Core Services Configuration ...

Adding user account for 'utwww' (ut admin web server user) ...done

Sun Ray Web Administration enabled to start at system boot.

 

You have chosen to configure this server for a failover group.

 

All servers in a failover group must share a unique signature,

which is a string of 8 or more characters where at least two

characters are letters and at least one is not.

 

Enter signature:         RHEL4:  sunray4lcls       # on RHEL5:  sunray4mcc

Re-enter signature:

 

Restarting Sun Ray Data Store ...

Stopping Sun Ray Data Store daemon

.Sun Ray Data Store daemon stopped

Starting Sun Ray Data Store daemon .

Thu Dec 27 18:27 : utdsd starting

Adding user admin ...

User(s) added successfully!

 

***********************************************************

The current policy has been modified.  You must restart the

authentication manager to activate the changes.

***********************************************************

 

 

Configuration of Sun Ray Core Services has completed.  Please check

the log file, /var/log/SUNWut/utconfig.2007_12_27_18:23:33.log, for errors.

 

 


To make sunsrv02 the primary and sunsrv03 the backup server

 

On sunsrv02:

              utreplica –p sunsrv03.slac.stanford.edu

 

[root@sunsrv02 ~]# utreplica -p sunsrv03.slac.stanford.edu

 

Sun Ray Core Services 4.0

Administration Failover Configuration

 

Converting Administration Standalone Server to Administration Primary

### updating the SRDS config file

        ...done

Stopping Sun Ray Data Store daemon

.Sun Ray Data Store daemon stopped

Starting Sun Ray Data Store daemon .

Thu Jan  3 09:28 : utdsd starting

Starting utpushd daemon

 

Restarting Sun Ray Core Services ...

stopping authentication manager

starting session manager

starting device manager

starting printer service

starting serial service

starting authentication manager

 

Configuration of Failover Administration has completed.

Please check the log file, /var/log/SUNWut/utreplica.2008_01_03_09:28:09.log, for errors.

 


On sunsrv03:

              utreplica –s sunsrv02

 

[root@sunsrv03 ~]# utreplica -s sunsrv02

 

Sun Ray Core Services 4.0

Administration Failover Configuration

 

Converting Administration Standalone Server to Administration Secondary

Stopping Sun Ray Data Store daemon

Sun Ray Data Store daemon stopped

### updating the Datastore init file

        ...already configured with port 7012

### updating the SRDS config file

        ...done

### updating the system services file

        ...done

### updating the SunRay admin config file

        ...done

Starting Sun Ray Data Store daemon .

Thu Jan  3 09:28 : utdsd starting

 

Restarting Sun Ray Core Services ...

stopping authentication manager

starting session manager

starting device manager

starting printer service

starting serial service

starting authentication manager

 

Configuration of Failover Administration has completed.

Please check the log file, /var/log/SUNWut/utreplica.2008_01_03_09:28:36.log, for errors.

 

 


NETWORK ACL's:

Have Network Admins setup ACLs for Sun Ray Servers and LCLSTERM network.


Screen Blanking / Screensaver

 

Collect the current xset settings.

 #  xset -q

 

Look into the out of the above command. See if blanking is set to 'yes'.

Ex.

Screen Saver:

  prefer blanking:  yes

 

Run this xset command to disable screen blanking.

# xset s off -dpms

#

 

Check the xset settings. See if blanking is set to no.

 

#  xset -q

Ex.

Screen Saver:

  prefer blanking:  no

  

FOR OUR Sun Ray ACCOUNTS:

Create a link in .kde/Autostart

ln -s /usr/local/admin/scripts/SR-ScreenBlanking /home/USER/.kde/Autostart

-This will execute the "/usr/bin/xset s off -dpms" upon login


 

To set up the Xhosts file

 

              Set up symbolic links in /etc/

Ex)

              ln –s /etc/X0.hosts /etc/X20.hosts

To create the 0-99 Xhosts files: 

  1. i=1
  2. while [ $i -lt 100 ] ; do ln -s /etc/X0.hosts /etc/X$i.hosts; i=`expr $i + 1`; done

Usually the XDM is turned of with the "-nolisten"

  • Type: ps -ef | grep Xorg      -you will see a "-nolisten"
  •  RHEL5: run gdmsetup and uncheck the box in the Security tab:  Deny TCP connections to Xserver
    • restart X or reboot server
  • Type: ps -ef | grep Xorg      -the "-nolisten" should be gone. The Xserver will now listen for Xclients

Modify the /etc/cron.daily/tmpwatch file:  (add: -x /tmp/SUNWut

flags=-umc

/usr/sbin/tmpwatch "$flags" -x /tmp/SUNWut -x /tmp/.X11-unix -x /tmp/.XIM-unix \
-x /tmp/.font-unix -x /tmp/.ICE-unix -x /tmp/.Test-unix 240 /tmp
/usr/sbin/tmpwatch "$flags" 720 /var/tmp
for d in /var/{cache/man,catman}/{cat?,X11R6/cat?,local/cat?}; do
   if [ -d "$d" ]; then
       /usr/sbin/tmpwatch "$flags" -f 720 "$d"
   fi
done


To setup Kiosk profile

              See Kiosk help page

              Run on sunsrv03

 


To lower resolution to display on KVM

Edit /etc/X11/xorg.conf  -Modify screen section

Section "Screen"
    Identifier "Screen0"
    Device "Videocard0"
    DefaultDepth 24
    SubSection "Display"
       Viewport 0 0
       Depth 24
       Modes "1024x768" "800x600" "640x480"
    EndSubSection
EndSection

 

 

Removing Gnome from login screen

 

cd /etc/X11/dm/Sessions/

[root@sunsrv02 Sessions]# ls

default.desktop  gnome.desktop  kde.desktop.notused

[root@sunsrv02 Sessions]# cp gnome.desktop gnome.desktop-notused

[root@sunsrv02 Sessions]# cp kde.desktop.notused kde.desktop

 

cd /usr/share/xsessions/

[root@sunsrv02 xsessions]# ls

gnome.desktop  kde.desktop

[root@sunsrv02 xsessions]# mv gnome.desktop gnome.desktop-notused

[root@sunsrv02 xsessions]# ls

gnome.desktop-notused  kde.desktop

 

reboot is easiest…

 


To keep new Sun Ray 3FS clients from turning off

In the /tftpboot/ area:

Edit   SunRayP9.parms

version=4.2_140993-06_2010.10.08.21.53

revision=0

poweroff=0   (Add this line)

barrier=422


Change kudzu to 3 seconds instead of 30

Edit /etc/init.d/kudzu

Change this line:        /usr/sbin/kudzu $KUDZU_ARGS -t 30

                   To:        /usr/sbin/kudzu $KUDZU_ARGS -t 3

 


more /etc/sysconfig/desktop

DESKTOP="KDE"

DISPLAYMANAGER="KDM"

 

 


Host groups ( failover group )

Must have common group signature:  utgstatus

>utgstatus

host  flags    interface     flags

               172.27.8.0/22     

-----------    -------------------

sunsrv02 TN    172.27.8.22     UA-

sunsrv03 TN    172.27.8.23     UA-

 

T    -Trusted:  The trusted hosts are members of this failover group because they share the same group signature.

N   -Online:  The server is configured to participate in load balancing

U   -Up:  The interface is currently reachable by this host.

A   -Available:  The interface is available for Sun Rays to connect to it and get service.


http://wiki.sun-rays.org/index.php/Host_Group

 


I had to turn off multicasting to force broadcasting:

  • The Sun Ray group management protocol depends on multicast packet transmissions by default. Some switches have trouble propagating (or deliberately block) multicast traffic, so SRSS can be configured to use broadcast instead. This is done by editing /etc/opt/SUNWut/auth.props and setting the enableMulticast property to false. All members of the group must be configured to use the same mechanism.

 


FIRMWARE UPGRADE :

The sunray servers must have a tftp server installed.  Run "utfwadm -A -a -V"  to install the firmware in /tftpboot. 

[root@sunsrv02 RPMS]# /opt/SUNWut/sbin/utfwadm -A -a -V

CoronaP1     4.0_48_2007.08.01.15.48

CoronaP2     4.0_48_2007.08.01.15.48

CoronaP3     4.0_48_2007.08.01.15.48

CoronaP4     4.0_48_2007.08.01.15.48

CoronaP5     4.0_48_2007.08.01.15.48

CoronaP6     4.0_48_2007.08.01.15.48

CoronaP7     4.0_48_2007.08.01.15.48

SunRayP8     4.0_48_2007.08.01.15.48

### Successfully enabled tftp for firmware downloads

 

utfwload will not end the active sessions, but will freeze it during the firmware download (about 30 seconds) and then does a restart of the sunray.

       utfwload –l        -to load sunrays that are connected, but NOT logged in.

       utfwload –L     - to force a load on all sunrays that need upgrading

 


Setup New Sunray Server to run a SCP

  1. Change SLCCOM:ASSIGNDIR_EPICS_IP.COM 
    1. add new sunray server...2 places
  2. As SLCSHR on MCC & MCCDEV
    1. @SLCCOM:ASSIGNDIR_EPICS_IP.COM

                      From MCC SLCSHR (or other prived SLC-group) account:

                            MCC> SHO LOG/GROUP/OUT=JUNK.TMP
                            MCC> @SLCCOM:ASSIGNDIR_EPICS_IP
                            MCC> SHO LOG/GROUP/OUT=JUNK.TMP
                            MCC> DIFFERENCES/out=junk.dif JUNK.TMP



To add a server to the X0.hosts file

  1. add server name to the /etc/X0.hosts file for each sunray server
    1. there are sym links to this file
  2. Users will have to log out and back in to take effect

Restart Sunray Web services

  1. /opt/SUNWut/lib/utwebadmin restart

How to Change the Login Background:

  1. cd /usr/share/gdm/themes/RHEL
    1. The "background.png" is the login background  200 Pixels in inch 1600 x 1200
    2. Make a copy of the background image ( background.png.orig )
    3. Find appropriate background image and make it 1600x1200 and 200 pixels/inch
      1. edit with "gimp" on Linux
    4. Copy new image to background.png. -Try and compress the file to between 1-2 MB
    5. -You might have to restart server to take effect. -or utstart

 

 

 

 

 

 

 

 

 


 

 



 

[SLAC CPE Software Engineering Group][ SLAC Home Page]

Author: Ken Brobeck, 10-Aug-2007

Modified: 14-Sep-2011