Reference Guide Dell Wyse Enhanced SUSE Linux Enterprise SP2/SP3 INI Files Issue: 072214 PN: 883933-02 Rev. F
Copyright Notices 2014, Dell Inc. All Rights Reserved. This manual and the software and firmware described in it are copyrighted. You may not reproduce, transmit, transcribe, store in a retrieval system, or translate into any language or computer language, in any form or by any means, electronic, mechanical, magnetic, optical, chemical, manual or otherwise, any part of this publication without express written permission. End User License Agreement ( License ) A copy of the End User License Agreement is included in the software and provided for your reference only. The License at http://www.dell.com/wyse/license as of the purchase date is the controlling licensing agreement. By copying, using, or installing the software or the product, you agree to be bound by those terms. Trademarks The Dell, Wyse, and PocketCloud logos and Wyse and PocketCloud are trademarks of Dell Inc. Other product names mentioned herein are for identification purposes only and may be trademarks and/or registered trademarks of their respective companies. Specifications subject to change without notice. Restricted Rights Legend You acknowledge that the Software is of U.S. origin. You agree to comply with all applicable international and national laws that apply to the Software, including the U.S. Export Administration Regulations, as well as end-user, end-use and country destination restrictions issued by U.S. and other governments. For additional information on exporting the Software, see http://www.microsoft.com/exporting. Ordering Information For availability, pricing, and ordering information in the United States and Canada, call 1-800-438-9973 or visit us at Dell.com. In all other countries, contact your sales representative.
Contents Summary of Revisions v 1 Introduction 1 About this Guide 2 Finding the Information You Need in this Guide 2 Technical Support 2 Related Documentation and Services 2 2 Getting Started: Learning INI File Basics 3 Supported INI Files You can Construct 3 Working with wlx.ini Files 3 Working with $MAC.ini Files 3 Working with {username}.ini Files 4 Rules and Recommendations for Constructing the INI Files 4 Placing the INI Files into the Folder Structure on the Server 6 3 Parameters for WLX INI and $MAC INI Files Only 7 General Settings (wlx.ini and $MAC.ini Files Only) 8 Peripheral Settings (wlx.ini and $MAC.ini Files Only) 15 Connection Settings (wlx.ini and $MAC.ini Files Only) 16 Custom GNOME Settings (wlx.ini and $MAC.ini Files Only) 24 4 Parameters for WLX INI, $MAC INI, and {username} INI Files 27 General Settings (wlx.ini, $MAC.ini, and {username}.ini Files) 28 Peripheral Settings (wlx.ini, $MAC.ini, and {username}.ini Files) 33 Connection Settings (wlx.ini, $MAC.ini, and {username}.ini Files) 37 A Connect Parameter Options 43 Custom Connect Options 44 Ericom PowerTerm TEC Connect Options 45 Ericom PowerTerm WebConnect Connect Options 47 ICA Connect Options 48 Imprivata Connect Options 51 Mozilla Firefox Connect Options 52 RDP Connect Options 53 SSH Connect Options 57 VMware View Client Connect Options 59 VNC Viewer Connect Options 62 XDMCP Connect Options 64 B Printer Parameters: Options 67 JetDirectPrinter 68 NetworkPrinter 69 Printer 70 PrinterURI 71 SMBPrinter 73
iv Contents C TimeZone Parameter: Values 75 D Keyboard.layouts Parameter: Values 77 Tables 85
Summary of Revisions Dell Inc. 883933-02 Rev. F The following changes were made to this document since revision E Reference Enablevda INIFileSource Protocol UseRDGateway RDDomainName RDPassword RDServer RDUserName SameLoginForRD StoreFront StoreName WLAN Enablevda parameter updated in Table 8 "Connection Settings: wlx.ini files, $MAC.ini files, and {username}.ini files" to note that VDA is not supported in SP3. New value of None for INIFileSource added to Table 6 "General Settings: wlx.ini files, $MAC.ini files, and {username}.ini files." INI parameter to specify the protocol to use for the VMware View Client connection added to Table 17 "VMware View Client Connect Options." INI parameter to use RD gateway added to Table 15 "RDP Connect Options." INI parameter to specify the RD Domain Name to use for the RD Gateway login added to Table 15 "RDP Connect Options." INI parameter to specify the RD Password to use for the RD Gateway login added to Table 15 "RDP Connect Options." INI parameter to specify the RD Gateway host address added to Table 15 "RDP Connect Options." INI parameter to specify the RD Username to use for the RD Gateway login added to Table 15 "RDP Connect Options." INI parameter to use the same user login for the RD gateway login added to Table 15 "RDP Connect Options." INI parameter to have the connection attempt to connect to the Storefront server added to Table 12 "ICA Connect Options." INI parameter to define the name of the store connect through the PNAgent server or Storefront server added to Table 12 "ICA Connect Options." WLAN parameter updated in Table 4 "Connection Settings: wlx.ini files and $MAC.ini files only" to add the following options: InnerAuth to specify the second EAP type inside the PEAP tunnel. PeapVersion to specify the PEAP protocol version. CACertificate to specify Root CA certificate name for authentication.
vi Summary of Revisions Dell Inc. 883933-02 Rev. E The following changes were made to this document since revision D Reference BiosCmosImages Connect Desktop.DisableKeyBinding.Close Desktop.DisableKeyBinding.Minimize Desktop.DisableKeyBinding.MouseButtonModifier Desktop.DisableKeyBinding.Move Desktop.DisableKeyBinding.PanelMainMenu Desktop.DisableKeyBinding.PanelMainMenuList Desktop.DisableKeyBinding.PrintScreen Desktop.DisableKeyBinding.Resize Desktop.DisableKeyBinding.RunCommand1 Desktop.DisableKeyBinding.ScreenSaver Desktop.DisableKeyBinding.ShowDesktop No longer supported. Removed from Table 2 "General Settings: wlx.ini files and $MAC.ini files only." Connect parameter updated in Table 8 "Connection Settings: wlx.ini files, $MAC.ini files, and {username}.ini files" to include new IMPRIVATA_CONN connection option. New INI parameter to disable the functionality of the Close key combination added to Table 6 "General Settings: wlx.ini files, $MAC.ini files, and {username}.ini files." New INI parameter to disable the functionality of the Minimize key combination added to Table 6 "General Settings: wlx.ini files, $MAC.ini files, and {username}.ini files." New INI parameter to disable the functionality of the mouse button (to move the window on screen) key combination added to Table 6 "General Settings: wlx.ini files, $MAC.ini files, and {username}.ini files." New INI parameter to disable the functionality of the key combination (to move the current window on screen) added to Table 6 "General Settings: wlx.ini files, $MAC.ini files, and {username}.ini files." New INI parameter to disable the functionality of the key combination (to bring up Client's start menu) added to Table 6 "General Settings: wlx.ini files, $MAC.ini files, and {username}.ini files." New INI parameter to disable the functionality of the Windows (Super L, Super R) key (to bring up Client's start menu) added to Table 6 "General Settings: wlx.ini files, $MAC.ini files, and {username}.ini files." New INI parameter to disable the functionality of the PrintScreen key added to Table 6 "General Settings: wlx.ini files, $MAC.ini files, and {username}.ini files." New INI parameter to disable the functionality of the key combination (to resize the current window on screen) added to Table 6 "General Settings: wlx.ini files, $MAC.ini files, and {username}.ini files." New INI parameter to disable the functionality of the key combination (to bring up Logout window) added to Table 6 "General Settings: wlx.ini files, $MAC.ini files, and {username}.ini files." New INI parameter to disable the functionality of the key combination (to lock screen) added to Table 6 "General Settings: wlx.ini files, $MAC.ini files, and {username}.ini files." New INI parameter to disable the functionality of the key combination (to Minimize all the open windows) added to Table 6 "General Settings: wlx.ini files, $MAC.ini files, and {username}.ini files."
Summary of Revisions vii Reference Desktop.DisableKeyBinding.SwitchWindows Desktop.DisableKeyBinding.ToggleFullscreen Desktop.DisableKeyBinding.ToggleMaximized Desktop.DisableKeyBinding.UnMaximize Desktop.DisableKeyBinding.WindowMenu DisableAutoLoginOnLogOut DisableReadyMode Enable802 ICAStoreName Imprivata_Agent_Log Imprivata_Bootloader_Log Imprivata Connection Options Imprivata_Mainloader_Log, Continued New INI parameter to disable the functionality of the key combination (to switch between open windows) added to Table 6 "General Settings: wlx.ini files, $MAC.ini files, and {username}.ini files." New INI parameter to disable the functionality of the key combination (to change the current window between kiosk and normal mode) added to Table 6 "General Settings: wlx.ini files, $MAC.ini files, and {username}.ini files." New INI parameter to disable the functionality of the key combination (to Maximize/UNMaximze the current window) added to Table 6 "General Settings: wlx.ini files, $MAC.ini files, and {username}.ini files." New INI parameter to disable the functionality of the key combination (to UnMaximze the current window) added to Table 6 "General Settings: wlx.ini files, $MAC.ini files, and {username}.ini files." New INI parameter to disable the functionality of the key combination (to bring menu options for current window) added to Table 6 "General Settings: wlx.ini files, $MAC.ini files, and {username}.ini files." New INI parameter to disable the current SUSE auto login feature after a user logs out added to Table 8 "Connection Settings: wlx.ini files, $MAC.ini files, and {username}.ini files." No longer supported. Removed from Table 2 "General Settings: wlx.ini files and $MAC.ini files only." Enable802 parameter updated in Table 2 "General Settings: wlx.ini files and $MAC.ini files only" to clarify supported options and values. New INI parameter to specify the Global ICA Store name which is used for PNAgent Login added to Table 8 "Connection Settings: wlx.ini files, $MAC.ini files, and {username}.ini files." New INI parameter to enable and specify the Imprivata Agent log level added to Table 8 "Connection Settings: wlx.ini files, $MAC.ini files, and {username}.ini files." New INI parameter to enable and specify the Imprivata boot loader log level added to Table 8 "Connection Settings: wlx.ini files, $MAC.ini files, and {username}.ini files." New Connection Options table (contains the supported options you can use for Imprivata connections) added to Table 13 in "Connect Parameter Options." New INI parameter to enable and specify the Imprivata main loader log level added to Table 8 "Connection Settings: wlx.ini files, $MAC.ini files, and {username}.ini files."
viii Summary of Revisions Reference Java.Exception.Sites Java.Security.Level PNAgentServer UpdateBiosCmos TimeoutDelayLoginForNetwork VMWareViewKeyConfig, Continued New INI parameter to specify the JRE exception sites added to Table 4 "Connection Settings: wlx.ini files and $MAC.ini files only." New INI parameter to specify the JRE security level added to Table 4 "Connection Settings: wlx.ini files and $MAC.ini files only." PNAgentServer parameter updated in Table 8 "Connection Settings: wlx.ini files, $MAC.ini files, and {username}.ini files" to include URL as a supported value. No longer supported. Removed from Table 2 "General Settings: wlx.ini files and $MAC.ini files only." New INI parameter to specify the amount of time to for wait for the network to connect (in seconds) added to Table 8 "Connection Settings: wlx.ini files, $MAC.ini files, and {username}.ini files." New INI to specify the keys or key combinations that should be sent to the local device instead of sending to the remote VMWare PCOIP session added to Table 4 "Connection Settings: wlx.ini files and $MAC.ini files only." Dell Inc. 883933-02 Rev. D The following changes were made to this document since revision C Reference ActiveDirectoryServer=<Active Directory Server IP> Applets.Disable.<Privilege Level> Applets.Enable.<Privilege Level> New INI parameter to set Active Directory Server IP for Domain Login to the client added to Table 2 "General Settings (wlx.ini and $MAC.ini Files Only)." New INI parameter to disable a specified set of applets in the Control Center or Application Browser based on user privilege levels added to Table 5 "Custom GNOME Settings (wlx.ini and $MAC.ini Files Only)." New INI parameter to enable a specified set of applets in the Control Center or Application Browser based on user privilege levels added to Table 5 "Custom GNOME Settings (wlx.ini and $MAC.ini Files Only)." Enable802 New INI parameter and options to enable or disable 802.1x settings for Auto Eth0 Wired connection added to Table 2 "General Settings (wlx.ini and $MAC.ini Files Only)." Browser.ClearBrowserData EnableUDPAudio HDXH264CaptureBin New INI parameter to clear out or persist the browser history across different client users added to Table 8 "Connection Settings: wlx.ini files, $MAC.ini files, and {username}.ini files." New INI parameter to enable the transport of audio data as UDP added to Table 8 "Connection Settings: wlx.ini files, $MAC.ini files, and {username}.ini files." New INI parameter to define the Name of the customized H264 CaptureBin. added to Table 8 "Connection Settings: wlx.ini files, $MAC.ini files, and {username}.ini files."
Summary of Revisions ix Reference HDXWebCamDevice H264Enabled HDXWebCamFramesPerSec=<integer> HDXH264InputEnabled HDXWebCamWidth=<integer> HDXWebCamHeight=<integer> NotificationArea.Disable.<Privilege Level> ScepClientCertSettings SpeedScreenMMAClosePlayerOnEOS SpeedScreenMMACSFEnabled SpeedScreenMMAEnablePlaybin2 SpeedScreenMMAGstPlayExitTimeout SpeedScreenMMAGstPlayKillAtExit SpeedScreenMMARebaseTimestampsOnSeek, Continued New INI parameter to select the webcam device. added to Table 8 "Connection Settings: wlx.ini files, $MAC.ini files, and {username}.ini files." New INI parameter to enable deep compression codec support added to Table 8 "Connection Settings: wlx.ini files, $MAC.ini files, and {username}.ini files." New INI parameter to set the preferred frame rate added to Table 8 "Connection Settings: wlx.ini files, $MAC.ini files, and {username}.ini files." New INI parameter to enable H264 encoding is attempted because an H264 encoder (gstreamer plugin) is present added to Table 8 "Connection Settings: wlx.ini files, $MAC.ini files, and {username}.ini files." New INI parameter to set the resolution parameters added to Table 8 "Connection Settings: wlx.ini files, $MAC.ini files, and {username}.ini files." New INI parameter to disable the notification area from task bar added to Table 5 "Custom GNOME Settings (wlx.ini and $MAC.ini Files Only)." New INI parameter and options to configure settings for the certificate to be enrolled using SCEP added to Table 2 "General Settings (wlx.ini and $MAC.ini Files Only)." New INI parameter to close gst_play at the end of a media clip (to ensure only one gst_play process runs at a time) added to Table 8 "Connection Settings: wlx.ini files, $MAC.ini files, and {username}.ini files." New INI parameter to enable Speed Screen MMACSF added to Table 8 "Connection Settings: wlx.ini files, $MAC.ini files, and {username}.ini files." New INI parameter to enable all MediaStream features to use playbin2 added to Table 8 "Connection Settings: wlx.ini files, $MAC.ini files, and {username}.ini files." New INI parameter to set the period of time, in seconds, allowed for gst_play processes to exit before being closed added to Table 8 "Connection Settings: wlx.ini files, $MAC.ini files, and {username}.ini files." New INI parameter to enable Receiver to quit any gst_play processes that do not exit within a specified time-out period added to Table 8 "Connection Settings: wlx.ini files, $MAC.ini files, and {username}.ini files." New INI parameter to enable re-basing of timestamps to a positive value following seek added to Table 8 "Connection Settings: wlx.ini files, $MAC.ini files, and {username}.ini files."
x Summary of Revisions Reference SpeedScreenMMAStopOverlayHandlingEvents TaskBarClockButton.Disable.<Privilege Level> TaskBarDisplaySettingsButton.Disable.<Privilege Level> ThreadQueueSize=<integer value> UDPAudioPortHigh UDPAudioPortLow UseThread, Continued New INI parameter to enable the correction of a mouse pointer issue where the mouse pointer disappears in full-screen WMP added to Table 8 "Connection Settings: wlx.ini files, $MAC.ini files, and {username}.ini files." IMPORTANT NOTE: Set to no to fix potential issues with videos not playing in the correct location or at the correct size, not resizing properly, or with the video window remaining black, but causes an issue where the mouse pointer disappears in full-screen WMP and does not return when the mouse is moved. Set to yes to correct the mouse-pointer issue. New INI parameter to disable the Clock button from the task bar added to Table 5 "Custom GNOME Settings (wlx.ini and $MAC.ini Files Only)." New INI parameter to disable the Configure Display Settings button from the task bar added to Table 5 "Custom GNOME Settings (wlx.ini and $MAC.ini Files Only)." New INI parameter to defines the size of the thread's data queue in bytes added to Table 8 "Connection Settings: wlx.ini files, $MAC.ini files, and {username}.ini files." NOTE: If threading is enabled, this defines the size of the thread's data queue in bytes. Default is 65536 for Thinwire and 32768 for client audio. A larger queue size may result in more lag because the overall buffering increases. New INI parameter to specify the maximum port number for UDP audio on the user device added to Table 8 "Connection Settings: wlx.ini files, $MAC.ini files, and {username}.ini files." New INI parameter to specify the minimum port number for UDP audio on the user device added to Table 8 "Connection Settings: wlx.ini files, $MAC.ini files, and {username}.ini files." New INI parameter to enable the use of a a thread to be used for this virtual channel. added to Table 8 "Connection Settings: wlx.ini files, $MAC.ini files, and {username}.ini files."
1 Introduction Wyse Enhanced SUSE Linux Enterprise (SLE) from Dell combines the security, flexibility, and market-leading usability of SUSE Linux Enterprise with Dell s thin computing optimizations in management and user experience. It is ideal for organizations that want to run server-based, Web-based, or local applications (including legacy applications) without the deployment and security concerns of a non-standard Linux distribution. Session and networks services available on enterprise networks may be accessed on enterprise networks, a direct intranet connection, or from a remote location using a secure gateway from Citrix or VMware. Wyse Enhanced SLE Initialization (INI) files are plain-text files that you can construct to contain the configuration information you want for your thin clients running Wyse Enhanced SLE (both on a global level and on an individual user level). For example, these INI files can be used by applications to save information about a user s preferences and operating environment. CAUTION: Information and procedures presented in this guide are intended for use by system administrators and should not be used by untrained persons.
2 Chapter 1 About this Guide This guide is intended for administrators of Dell thin clients running Wyse Enhanced SUSE Linux Enterprise (SLE). It provides the detailed information you need to help you understand and use the Wyse Enhanced SLE INI files. It contains information on the different INI files you can use and the rules for constructing the files. It also provides the parameter details you need (with working examples) to get the most out of your INI files. Finding the Information You Need in this Guide You can use either the Search window or Find toolbar to locate a word, series of words, or partial word in an active PDF document. For detailed information on using these features, refer to the Help in your PDF reader. Technical Support To access technical resources (self-service portal, knowledge base, software downloads, registration, warranty extensions/rmas, reference manuals, and so on), visit http://www.dell.com/wyse/support. If you still need help, you can call Customer Support at 1-800-800-9973 (toll free in U.S. and Canada). Hours of operation are from 6:00 A.M. to 5:00 P.M. Pacific Time, Monday through Friday. Related Documentation and Services Administrators Guide: Dell Wyse Enhanced SUSE Linux Enterprise Release 11 SP2/SP3 is intended for administrators of Wyse Enhanced SUSE Linux Enterprise (SLE). It provides information and detailed system configurations to help you design and manage a Wyse Enhanced SLE environment.
2 Getting Started: Learning INI File Basics In this chapter you will learn how to construct and use the supported INI files. It includes: "Supported INI Files You can Construct" "Rules and Recommendations for Constructing the INI Files" "Placing the INI Files into the Folder Structure on the Server" After you become familiar with the INI file basics, you can refer to the parameter details you need in the other chapters and appendixes of this guide. Supported INI Files You can Construct The INI files contain the parameters (and associated options and values) necessary for the various functionality you want. You can construct the following INI files: wlx.ini file (see "Working with wlx.ini Files") {username}.ini file (see "Working with {username}.ini Files") $MAC.ini file (see "Working with $MAC.ini Files") IMPORTANT: The INI file processing hierarchy is as follows: Scenario 1 - MAC.ini exists. The MAC.ini file is processed and if the Include=WLX.ini statement is included, then the WLX.ini file is processed. Scenario 2 - MAC.ini exists and {username}.ini exists. The MAC.ini file is processed and if the Include=WLX.ini statement is included, then the WLX.ini file is processed. Once the credentials are provided, the {username}.ini file is processed. Scenario 3 - WLX.ini exists. The WLX.ini file is processed. Scenario 4 - WLX.ini exists and {username}.ini exists. The WLX.ini file processed. Once the credentials are provided, the {username}.ini file is processed. Scenario 5 - No ini files exist. Local configuration is applied. Working with wlx.ini Files A wlx.ini file contains the global parameters you want that will affect all thin clients accessing the server. Parameters in both Table 4, "Connection Settings: wlx.ini files and $MAC.ini files only," and Table 8, "Connection Settings: wlx.ini files, $MAC.ini files, and {username}.ini files," can be used in a wlx.ini file. TIP: Parameters in Table 4, "Connection Settings: wlx.ini files and $MAC.ini files only," can only be used in a wlx.ini file; they cannot be used in a {username}.ini file. Working with $MAC.ini Files A $MAC.ini file can be used instead of a wlx.ini file for device-specific configurations. If the thin client locates a $MAC.ini file (it is stored in the same directory as a wlx.ini file), then the wlx.ini file is not accessed, unless you use the include=wlx.ini parameter. Note also that the placement of the include=wlx.ini parameter within the $MAC.ini file will dictate which value will take priority for a same specific parameter that is contained
4 Chapter 2 in both the wlx.ini file and the $MAC.ini file but is defined differently (different values for the same parameter). For example, if the wlx.ini file has parametera=valueb, and the $MAC.ini file has the same parametera=valuec, then: - If the include=wlx.ini parameter is included in the $MAC.ini file before the parametera=valuec statement, then the wlx.ini parametera=valueb is discarded and parametera=valuec (from the $MAC.ini file) is the final value used. - If the include=wlx.ini parameter is included in the $MAC.ini file after the parametera=valuec statement, then the $MAC.ini parametera=valuec is discarded and parametera=valueb (from the wlx.ini file) is the final value used. Working with {username}.ini Files A {username}.ini file contains the user-specific or user profile parameters you want that will comprise the connection profile for an individual user. These parameters will affect only the user you specify. Parameters in Table 8, "Connection Settings: wlx.ini files, $MAC.ini files, and {username}.ini files," can be used in a {username}.ini file. TIP: User profile parameters (found in the {username}.ini file) generally override the identically named global parameters (found in the wlx.ini file), however, some global parameters do not allow this (for hierarchical precedence of one variable over another, refer to the parameter descriptions in Table 8, "Connection Settings: wlx.ini files, $MAC.ini files, and {username}.ini files,"). CAUTION: If both PNAgent/PNLite and a user profile are being used in the environment, the username must be defined in the Windows domain to be used, and the password used must be the same for both the Windows domain and the user profile. Rules and Recommendations for Constructing the INI Files In general, Wyse Enhanced SLE INI files follow currently accepted standard INI file formatting conventions. The INI files consist of Wyse parameters. If you are using an INI file, the only parameter you must use is the Connect parameter (see Connect in Table 8 "Connection Settings: wlx.ini files, $MAC.ini files, and {username}.ini files"). Any of the rest of the parameters can be used if you desire, but are not necessary unless you want changes from client and other defaults (for example, other can be the default resolution of your monitor). Every parameter (and their options) has a name and a value, with the name appearing to the left of the equals sign (name=value). All parameters with the same name in the various INI files have the same meaning (that is, a parameter named WyseXYZ in a wlx.ini file and named WyseXYZ in a {username}.ini file will have the same meaning). Number signs (#) indicate the start of a comment. Comments can begin anywhere on a line. Everything between the # and the End of Line is ignored. Along with these general formatting conventions, use the following guidelines when constructing the INI files: 1. Global Connect Parameters First Global connect parameters should be listed before other connect parameters in a wlx.ini file. 2. Connect is the Only Required Parameter As stated earlier, if you are using an INI file, the only parameter you must use is the Connect parameter. Any of the rest of the parameters can be used if you desire, but are not necessary unless you want changes from client and other defaults. 3. Continue Lines by using a Space and Backslash Placing a space and backslash ( \) at the end of a line indicates line continuation; that is, the backslash means that the line and the following line are, for the purposes of reading code, the same line. No white space can appear after the backslash; the requirement of white space between parameter entries is maintained by the use of
Getting Started: Learning INI File Basics 5 the space before the backslash. In addition, starting all parameters at the left margin and placing at least one leading space (or tab) at the beginning of all (and only) continuation lines makes an INI file easier to read. Note that in circumstances where you require string concatenation, you can use a backslash without a space before or after it to concatenate with the first set of characters from the previous line; for example the strings snow and ball may be concatenated to give snowball. 4. Blank Lines Make Files Easy to Read Using blank lines is recommended for making code easier to read. 5. Comment by using a # Sign As stated earlier, number signs (#) indicate the start of a comment. Comments can begin anywhere on a line. Everything between the # and the End of Line is ignored. 6. Values with White Spaces Require Quotation Marks Values (of parameters and their options) containing white spaces must be placed inside quotation marks (use common-practice nesting rules). 7. Separate Lists by using Semicolons or Commas Use semicolons or commas for list separators. 8. {username}.ini Files must be Write-Enabled All {username}.ini files must be write-enabled to allow the thin client to place the encrypted user passwords in the files. 9. Use the wlx.ini File to Set the Maximum Number of Connection Entries Allowed The combined number of connection entries defined in a {username}.ini file and a wlx.ini cannot exceed a defined total maximum number of connections. The maximum number of connections has a default limit of 216, but can be set from 100 to 1000 using the wlx.ini file. 10.Use System Variables with Some Options of the Connect Parameter Some options of the Connect parameter can use the system variables shown in Table 1 to map the string. All combinations of the variables are supported. For options that support use of system variables, see "Connect Parameter Options." Table 1 System Variables Option $SN $MAC $IP $DN $UN $PW $TN Value Serial number used. MAC address used. IP Address used. Sign-on domain name used. Sign-on name used. Sign-on password used. Terminal name.
6 Chapter 2 Placing the INI Files into the Folder Structure on the Server If you have set up your environment to provide your thin clients running Wyse Enhanced SUSE Linux Enterprise with automatic updates and configurations (as described in Administrators Guide: Dell Wyse Enhanced SUSE Linux Enterprise Release 11 SP2/SP3), you can use the following folder structure on your server under the C:/ inetpub/ftproot folder (for FTP) or C:/inetpub/wwwroot folder (for HTTP or HTTPS) and place your INI files and other necessary files inside the structure as noted (this list describes the folder structure, starting with the root directory). /wyse/ The root directory. It stores the wlx folder and the addons folder. It also stores the following files, which are used for imaging and updating devices: Latest-image.raw Latest-image.raw.info /wyse/wlx /wyse/wlx/bitmap /wyse/wlx/certs /wyse/wlx/ini /wyse/addons The main INI configuration folder. It stores the following: wlx.ini file or $MAC.ini file bitmap folder certs folder ini folder The folder where you can place custom images you plan to use. The folder where you can place the CA certificates that can be imported to a thin client. Note: Use the Certs and ImportCerts INI parameters in the wlx.ini file to import the certificates to thin clients. The folder where you can place the {username}.ini files. The folder where you can place the add-ons you want to use. It also stores the directory file and the *.rpm packages available to be installed on the thin client. The directory file should list all available add-ons. The directory file is required in the addons folder to guarantee that add-ons are properly located. NOTE: If you want to do an update with the Preserve changes option enabled, ensure that your addons folder includes a copy of your current add-ons. The system may require two reboots to fully update the firmware and add-ons while preserving local changes.
3 Parameters for WLX INI and $MAC INI Files Only This chapter provides the supported parameters that you can use in a wlx.ini file and in a $MAC.ini file. TIP: For information to help you construct and use the supported INI files, see "Getting Started: Learning INI File Basics." CAUTION: Parameters in Tables 2 through Table 2 can only be used in a wlx.ini file or $MAC.ini file; they cannot be used in a {username}.ini file. IMPORTANT: The underlined value for a parameter is the default value. Some parameters also have options shown within brackets [ ]. If an option has an underlined value (default), that option and default value will automatically be used with the parameter (options without underlined values can also be used if you want to, but are not automatically used with the parameter). In addition, when using parameters and options, you can leave the default value or change it to another value shown. For example, in the following case where: ParameterX={yes, no} [Option1={0, 1}] [Option2={1, 2, 3, 4}] If you use ParameterX, then Option1 and its default value 0 will automatically be used as Option1 has an underlined value (default of 0). You can still use Option2 if you want to, however, Option2 is not automatically used with the parameter as Option2 does not have a default (underlined) value. To increase usability (such as relation to thin client dialog box equivalents), the supported parameters are separated into the following categories: "General Settings (wlx.ini and $MAC.ini Files Only)" "Peripheral Settings (wlx.ini and $MAC.ini Files Only)" "Connection Settings (wlx.ini and $MAC.ini Files Only)" "Custom GNOME Settings (wlx.ini and $MAC.ini Files Only)"
8 Chapter 3 General Settings (wlx.ini and $MAC.ini Files Only) Table 2 contains parameters used for configuring general settings (underlined values are defaults). Table 2 General Settings: wlx.ini files and $MAC.ini files only Parameter ActiveDirectoryServer=<Active Directory Server IP> AudioMute={no, yes} AudioVolume=<value of 0 to 100> AutoPower={no, yes} BiosCmosImages=<PlatformType>-<BI OS/CMOS>-<BiosVersion>.img ChangeAdminPassword=<password> ChangeGuestPassword=<password> ChangeRootPassword=<password> ChangeThinUserPassword=<password> DefaultUser=<username> DisableReadyMode={no, yes} ActiveDirectoryServer - Active Directory Server IP for Domain Login to the client. For example,: ActiveDirectoryServer=10.150.124.150 Yes/no option to mute the audio. Determines the audio volume level. Values of 0 to 100 provide more exact volume level. Yes/no option on how the system starts when the power is first applied to the thin client. If set to yes, then the system starts itself without waiting for users to press the power button (in cases where power was lost unexpectedly; even if the thin client was shut down properly before power was lost unexpectedly, when the power is restored, the thin client will be powered on). This setting is useful in a kiosk environment. Once an AutoPower statement is processed, it alters the behavior of the thin client until a countermanding statement is processed. The effect of an AutoPower=yes statement continues even if the statement is removed from the INI file in which it was found. Use of the AutoPower option does not interfere with performing a user directed shutdown. Do Not Use. No Longer Supported. Specifies the new password for the admin user. Default is base-64 encoded. Specifies the new password for the guest user. Default is base-64 encoded. Specifies the new password for the root user. Default is base-64 encoded. Specifies the new password for the thin user. Default is base-64 encoded. Specifies the default sign-on user. See also AutoLogin. Do Not Use. No Longer Supported.
Parameters for WLX INI and $MAC INI Files Only 9 Table 2 General Settings: wlx.ini files and $MAC.ini files only, Continued Parameter Enable802={no, yes} Authentication={TLS, PEAP} [PromptPassword={no, yes}] [InnerAuthentication={MSCHAPv2}] [UserCertificate=<certificate name>] [CACertificate=<certificate name>] [PrivateKey=<certificate name>] [PrivateKeyPassword=<password>] [PeapVersion={Auto, 0, 1}] [AuthMode={Machine, User}] IMPORTANT: Put the parameters on the same line. This is the generic syntax of INI parameter for 802-1x settings for Wired connection. Parameter usage will be based on the use case and EAP method chosen. Enable802 - Yes/no option to enable or disable 802.1x settings for Auto Eth0 Wired connection. Yes - Enables 802-1x settings for Wired network. No - Disables 802-1x settings for Wired network. Authentication - The authentication method (EAP method) to be used for 802.1X. PromptPassword - Yes/no option to prompt for password every time for 802-1x authentication when the network comes up. InnerAuthentication - The second EAP type inside the PEAP tunnel. Used only in cases of PEAP authentication. Enable802= (continued) UserCertificate - The client/user certificate name. Used for TLS authentication. CACertificate - Root CA certificate name for authentication. PrivateKey - Client/user private key certificate. Used for TLS authentication. PrivateKeyPassword - The password given during the creation of a user/client certificate. This should be a base64 encoded password. PeapVersion - Default is Auto. PEAP protocol version. AuthMode - Default is Machine. Authentication Mode for TLS. Set AuthMode as Machine for TLS machine authentication or set to User for TLS user authentication. Example: Below is an example INI for 802-1x TLS Machine authentication. Enable802=yes Authentication=TLS PromptPassword=no CACertificate=scep UserCertificate=scep PrivateKey=scep PrivateKeyPassword=ZG90MXg= AuthMode=Machine Example: Below is an example INI for 802-1x TLS User authentication. Enable802=yes Authentication=TLS PromptPassword=no CACertificate=scep UserCertificate=scep PrivateKey=scep PrivateKeyPassword=ZG90MXg= AuthMode=User Example: Below is an example INI for EAP-PEAP connection. Enable802=yes Authentication=PEAP InnerAuthentication=MSCHAPv2 PeapVersion=Auto PromptPassword=no CACertificate=SCEP AuthMode=user
10 Chapter 3 Table 2 General Settings: wlx.ini files and $MAC.ini files only, Continued Parameter EnableGKey={yes, no} IdleAction.Enable={no, yes} [IdleAction.TimeOut=<value of 0 to 1440>] [IdleAction.Action=<Any valid Command>] Default is yes. Yes/no option to enable G key reset. G key reset is supported for Privilege=High. IdleAction.Enable Yes/no option to enable IdleAction (allows an action of the device for an idle state). IdleAction.Timeout Specifies (in minutes from 0 to 1440) the amount of inactive time before the device will execute the command specified in the IdleAction.Action parameter if IdleAction.Enable=yes. Example: IdleAction.Enable=yes IdleAction.TimeOut=30 IdleAction.Action=/sbin/reboot ImportCerts={no, yes} [Certs=<list of certificate names>] InstallAddons=<name of addon> ImportCerts Yes/no option to import certificates from the server. Certs is a list of certificate names (the names must be separated by a semicolon). NOTE: Certificates must be placed in the wyse/wlx/certs directory. NOTE: The certificates must be.crt,.pem, or any valid certificate type. Example: ImportCerts=yes Certs=Cert1.cer;Cert2.crt;Cert3.pem;Cert4.der Specifies addons to install. Use comma separated add-on names. Note that you can use InstallAddons= or NewAddons= for the parameter name (the names are interchangeable).
Parameters for WLX INI and $MAC INI Files Only 11 Table 2 General Settings: wlx.ini files and $MAC.ini files only, Continued Parameter MgmtDiscoveryMethod={SRV, CNAME, HOSTNAME, UI, DHCP, STATIC, DEFAULT} PowerButtonAction={interactive, reboot, restart, halt, shutdown, sleep, logoutandsleep, none, nothing} RemoveAddons=<name of addon> RootPath=<root path> Default is the following order SRV, CNAME, HOSTNAME, UI, DHCP (if any of the methods specified in the INI file fails). Specifies the automatic discovery methods you want to use for the automatic discovery of a thin client after failure of thin client discovery. Use any or all of the following: SRV DNS SRV Record (Dynamic Discovery) Allows devices to use the DNS SRV record lookup method to discover a WDM Server. CName DNS Alias Allows devices to use the DNS Alias method to discover a WDM Server. Hostname DNS Name Record (Dynamic Discovery) Allows devices to use the DNS Hostname lookup method to discover a WDM Server. UI Allows devices to use the UI entries to discover a WDM Server. DHCP Option Tags (Dynamic Discovery) Allows devices to use DHCP option tags to discover a WDM Server. Static Allows devices to use a static location to discover a WDM Server. NOTE: When the Static option is used, the MgmtDiscoveryMethod parameter should be used with a valid Fully Qualified Domain Name or IP Address. Default The Default method to discover a WDM Server is used when none is specified or if any of the methods mentioned in this section fails; then the default method is used which is the following dicovery order {SRV, CNAME, HOSTNAME, UI, DHCP}. Default is interactive. Specifies the action taken when the power button is pressed. interactive option window presented to user reboot or restart reboots the device halt or shutdown shuts down the device sleep puts the device into sleep mode logoutandsleep logs out and puts the device into sleep mode none or nothing no action, do nothing Specifies addons to uninstall. Use comma separated add-on names. This root path is used to access files on the server. The directory name /wlx will be appended to the root path entry before use. IMPORTANT: If no root path is provided, /wyse is the default.
12 Chapter 3 Table 2 General Settings: wlx.ini files and $MAC.ini files only, Continued Parameter ScepClientCertSettings=CertName=<N ame of Certificate file> URL=<Scep sever URL> [ChallengePassword=<Password>] CADN=<CA Distinguished Name> [AutoEnroll={yes, no}] CertName - Name of certificate to be enrolled using SCEP. URL:- SCEP server URL. ChallengePassword - Certificate Enrollment Challenge Password. CADN - CA Distinguished Name. AutoEnroll - Yes/no parameter to enable or disable certificate automatic enrollment. Example: ScepClientCertSettings=CertName=ScepCertOne URL=http://192.168.0.10/certssrv/mscep.dll ChallengePassword=C35F78367BA20216 CADN=scepca-root-ca
Parameters for WLX INI and $MAC INI Files Only 13 Table 2 General Settings: wlx.ini files and $MAC.ini files only, Continued Parameter ScreenSaver=<value of 0 to 180> [LockTerminal={no, yes}] [SoftSaver={no, yes}] [LogoutButton={no, yes}] [Type={1, 2, name[,name...]}] [CycleDelay=<value of 0 to 180>] [Image=<filename>] [Layout={none, centered, wallpaper, scaled, stretched}] ScreenSaver Specifies to put the thin client in a screensaver state when the time limit for inactivity in minutes (delay before starting) is reached. 0 turns off the screensaver. NOTE: Put the parameters on the same line. For example: ScreenSaver= 5 LockTerminal=yes SoftSaver=yes Type=coral,drift,hypertorus,interaggregate,pipes,skytentacle s CycleDelay=5 LockTerminal Yes/no option to specify the thin client LOCK state function when the screen saver is activated. no Disabled. yes Puts the thin client in a LOCK state when the screen saver is activated. The user will be prompted with an unlock dialog box to enter the sign-on password to unlock the thin client. SoftSaver Yes/no option to specify that the thin client run a soft saver. Soft savers are only available when the optional SCREENSAVER- THEMES addon is installed. no just blank the screen. yes run a graphical display. LogoutButton Yes/no option to display a Logout button in the unlock dialog box if LockTerminal=yes. Type Specifies which display program(s) should run if SoftSaver=yes. Note: Names are preferred over the legacy numbers. 1=fadeplot; 2=rocks CycleDelay When more than one Type name is specified, CycleDelay specifies how many minutes each Type name should run. Image Filename to use for the screen saver (this option is ignored in cases of backwards compatibility). Layout Layout to use for the screen saver (this option is ignored in cases of backwards compatibility). NOTE: For a complete list of screensaver names, install the SCREENSAVER-THEMES addon and then search in /usr/ share/applications/screensavers. The filenames, without the '.desktop' suffix, are the available saver names. The 'Name' entry in each.desktop file provides the value that will be displayed in the Screensaver configuration GUI application; and the 'Comment' entry provides a brief description. TerminalName=<name of thin client> TimeFormat={ 12-hour format, 24-hour format } Name of the thin client comprising a 15-character string. Specifies the time format to use (how the clock on the desktop panel is displayed). By default, the local format is used.
14 Chapter 3 Table 2 General Settings: wlx.ini files and $MAC.ini files only, Continued Parameter TimeServer=<host address>[;<host address>] TimeZone=<zone value> [ManualOverride={no, yes}] UpdateBiosCmos={no, yes} Update.Mode={Both, Image, Addons, None} Update.Preserve_changes= {no, yes} Specifies the SNTP time servers to use for time retrieval. You can designate one or two (as shown in the parameter example) Network Time Protocol servers (separated by a semicolon). The client synchronizes the time of day to the servers at boot time, and keeps the time in sync with the servers during operation. TimeZone Specifies the time zone if the zone is unspecified on the thin client or is used with ManualOverride. ManualOverride Yes/no option to override the thin client System Preference Menu setting with this TimeZone setting. TimeZone settings in the wlx.ini file will be saved into NVRAM if EnableLocal=yes is set in the wlx.ini file. NOTE: For the complete list of TimeZone values, see "TimeZone Parameter: Values." Do Not Use. No Longer Supported. Default is Both. Specifies the update mode for image upgrades. Value and : Both Updates image and add-ons Image Updates image only Addons Updates add-ons only None Does not upgrade Default is yes. Yes/no option to preserve changes while upgrading. No means it enables the check box Restore factory defaults when updating in the novell-addon-manager > Server settings applet, so that after image upgrade/downgrade it will not preserve the previous image device settings (that is the device will be in factory reset condition after imaging). Yes means it disables the check box Restore factory defaults when updating in the novell-addon-manager > Server settings applet, so that after image upgrade/downgrade it will preserve/apply previous image device settings to to the image after imaging.
Parameters for WLX INI and $MAC INI Files Only 15 Peripheral Settings (wlx.ini and $MAC.ini Files Only) Table 3 contains parameters used for configuring peripheral settings such as keyboard, monitor, mouse, printer, and so on (underlined values are defaults). Table 3 Parameter Peripheral Settings: wlx.ini files and $MAC.ini files only CursorHideDelay=<value of 1 to 60> MicMute={no, yes} Specifies the amount of time to wait before the cursor is hidden (cursor will be hidden after the specified number of seconds). After pressing any keyboard key or mouse movement/mouse event, the cursor will reappear. Yes/no option to mute the microphone volume. MicVolume=<value of 0 to100> Default is 50. Specifies the microphone volume level.
16 Chapter 3 Connection Settings (wlx.ini and $MAC.ini Files Only) Table 4 contains parameters used for configuring connection settings (underlined values are defaults). Table 4 Connection Settings: wlx.ini files and $MAC.ini files only Parameter AddtoEtcHosts="ip1 FQDN1 aliases1;ip2 FQDN2 aliases2;..." AutoLogin={no, yes} [CountDown=<value in seconds>] AutoLogin (continued) Adds entries to the /hosts file where aliases are an optional space-separated list of host names. Yes/no option to automatically log the user in as DefaultUser if no login occurs before the CountDown interval. This is for use at kiosks and other environments where the user logs in without human intervention. Autologin can be canceled by pressing the ESC button. The first time a device reads Autologin, it may stay at the login screen for a few seconds before taking effect. Once doing so, it will automatically log in and all future reboots will autologin with the defined delay. Changing from AutoLogin=yes to AutoLogin=no may require 2 reboots to take effect in some cases. No password is required for automatic login even if the user normally needs a password. NOTE: SignOn=no and AutoLogin=yes are alternative parameters/ways to provide similar functionality. CAUTION: SignOn=no and AutoLogin=yes should not be used together. In general, use AutoLogin; SignOn=no is being deprecated. AutoLogin=yes logs in as the default user; which may be set via the DefaultUser ini-file parameter; the privilege level is that user's normal privilege level; determined in the same manner as if they had logged in manually. ADVANCED NOTE: Any valid user may be specified; but note that PNA and Active Domain users will not obtain a password first; which may prevent them from accessing the Published Apps or Domain services. If there is no DefaultUser specified in the registry, it will use Guest. Note that for both SignOn=no and AutoLogin with a short delay, it is quite likely that the login process will proceed before the network is up and the wlx.ini file has been read. This means that changes to the wlx.ini login parameters will not take effect until a logout or reboot. Note also that changes to the System/DefaultUser or System/ PrivLevel registry keys do not automatically adjust the login parameters; that is normally done only after fetching and parsing a wlx.ini file when a network interface comes up. If you need to change the parameters outside that sequence; use the /sbin/configuregdm script to modify the system's login configuration. The wlx.ini will be fetched and processed every time the network comes up; so if the network goes down and is restored during a session, it may affect existing settings (although the login-related settings will not be apparent until the current user logs out). Also note that neither mechanism actually authenticates the user they just verify that the user exists. But both methods, and normal manual login, will fetch and process a $USER.ini file, if one exists, independent of what, if any, authentication mechanism was used.
Parameters for WLX INI and $MAC INI Files Only 17 Table 4 Connection Settings: wlx.ini files and $MAC.ini files only, Continued Parameter AutoSignoff={no, yes} DisableDomain={no, yes} DisableVNC={no, yes} DomainList=<list of Windows domain names> EnableApplianceMode={no, yes} [XenDesktopURL=<URL of Xendesktop>] EnableBanner={no, yes} [BannerMsg=<text description>] EnableLocal={yes, no} EnableSSH={no, yes} EthernetSpeed={Auto, 100M-F, 100M-H, 10M-F, 10M-H} Yes/no option to automatically log the user off when all connections are closed. Yes/no option to disable the display of a Domain field. The default value depends on the value of the DomainList option. When the DomainList is empty, DisableDomain defaults to yes (the display of a Domain field does not display); otherwise, it defaults to no (the display of a Domain field does display). Yes/no option to disable an installed VNC-Server Add-on. A list of domain names that will appear in the login dialog box as options to help users in selecting the domain to log in to PNAgent/PNLite servers. Once specified, it is saved in non-volatile memory. NOTE: Be sure to enclose in quotation marks if spaces are included. For example: DomainList= North_America; SQA; test-domain NOTE For SP3: This parameter works only when you install the optional Viance addon in SP3. Wyse Enhanced SLE devices can be converted to Desktop Appliance mode by enabling the EnableApplianceMode parameter. When enabled, upon system boot the thin client will connect to the XenDesktop server and prompt for XenDesktop login credentials to access the desktop. By default EnableApplianceMode=No. XenDesktopURL specifies the virtual desktop to use when EnableApplianceMode is enabled. For example:- EnableApplianceMode=Yes XenDesktopURL=http://192.168.0.2 EnableBanner Provides a banner description. BannerMsg The text must be enclosed in double quotation marks if it contains spaces or punctuation characters. Default is yes. Yes/no option to enable locally configured connection entries to show in the connection list (that is, activate local entries). Yes/no option to enable SSH. Default is Auto. Specifies the NIC speed: Auto - auto-negotiates speed with peer (default). 100M-F is 100 Mbps Full Duplex. 100M-H is 100 Mbps Half Duplex. 10M-F is 10 Mbps Full Duplex. 10M-H is 10 Mbps Half Duplex. NOTE: Gigabit ethernet (1000Mbps) is available on hardware that supports it via the Auto value.