HP ProLiant xw2x220c Remote Graphics Software 5.2.5 User Guide - Page 74

selecting Administrative Tools, selecting Local Security Policy, expanding the Local Policies

Page 74 highlights

4. OPTIONAL: Disable Guest login access-By default, Windows allows any user who can access a computer over the network to login with Guest access. Because this is a potential security issue, HP recommends that you disable Guest logins on the Remote Computer. To disable this policy, open the "Control Panel", selecting "Administrative Tools", selecting "Local Security Policy", expanding the "Local Policies", expanding "Security Options", and setting "Network access: Sharing and security model for local accounts" to "Classic - local users authenticate as themselves". For more information on this topic, go to: support.microsoft.com/kb/103674 5. Ensure that the RGS Sender is running on the Remote Computer-This can be done on Windows as follows: a. Click on Start b. Right click on My Computer c. Select manage from the menu. d. In the Computer Management console, click the + sign to expand Services and Applications and select Services. The service Remote Graphics Sender should be listed as "Started". 6. Verify that the rgdiag.exe diagnostics tool passes all tests on the RGS Sender on Windows-This tool is automatically executed after completion of a normal Sender installation on Windows. It can also be run any time after Sender installation. Refer to the section "Using the RGS Diagnostics Tool on Windows" for information on running this tool. 7. Ensure that the Sender knows its current IP address- If the Sender computer has changed networks and has been assigned a new IP address after the Sender was started, you'll need to restart the Sender service/daemon. 8. NIC binding-If the Remote Computer has multiple NICs, ensure that you attempt to connect to the same NIC that the RGS Sender is "listening" to. This topic is expanded considerably in Section 4-3 below. 9. Linux Sender machine name and IP address-The default on Linux is to bind the machine name to the following loopback interface in the /etc/hosts file: 127.0.0.1 blade2 localhost.localdomain The RGS Sender will not accept remote connections with this configuration. Edit the /etc/hosts file and bind the machine name to its proper IP address as follows: 127.0.0.1 localhost 88.1.89.122 blade2 localhost.localdomain blade2.datacenter.com 10. User-started X environments do not reliably support outside connections-Users who manually start X desktops (such as with startx) from the console command line will find that outside access attempts may not properly connect or be authenticated. This stems primarily from incomplete PAM session management and permissions to the console. Users should avoid this condition, and achieve login management through the display manager launched in init-level 5 of the system. 11. Microsoft Windows APIPA (Automatic Private IP Addressing)-APIPA can cause the RGS Sender to open sockets on private IP addresses. This can occur, for example, if the Sender computer is unable to connect to a DHCP server. Because the private IP addresses are not visible to the RGS Receiver, RGS connections will not work. You can verify if the Sender is using private IP addresses by typing the following in a command window: netstat -n -a If the IP address associated with the Sender port (listening port 42966) is private, APIPA is the likely cause. For more information on this topic, go to: support.microsoft.com/kb/220874 12. Log out-If you do log into the Remote Computer to verify any of the above items, ensure that you log out when you're done. Pre-connection checklist 74

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191

Pre-connection checklist 74
4.
OPTIONAL: Disable Guest login access
—By default, Windows allows any user who can access a computer
over the network to login with Guest access. Because this is a potential security issue, HP recommends that
you disable Guest logins on the Remote Computer. To disable this policy, open the "Control Panel",
selecting "Administrative Tools", selecting "Local Security Policy", expanding the "Local Policies", expanding
"Security Options", and setting "Network access: Sharing and security model for local accounts" to "Classic
– local users authenticate as themselves". For more information on this topic, go to:
support.microsoft.com/kb/103674
5.
Ensure that the RGS Sender is running on the Remote Computer
—This can be done on Windows as follows:
a.
Click on
Start
b.
Right click on
My Computer
c.
Select
manage
from the menu.
d.
In the Computer Management console, click the
+
sign to expand
Services and Applications
and select
Services
. The service Remote Graphics Sender should be listed as “Started”.
6.
Verify that the rgdiag.exe diagnostics tool passes all tests on the RGS Sender on Windows
—This tool is
automatically executed after completion of a normal Sender installation on Windows. It can also be run any
time after Sender installation. Refer to the section “
Using the RGS Diagnostics Tool on Windows
” for
information on running this tool.
7.
Ensure that the Sender knows its current IP address
— If the Sender computer has changed networks and has
been assigned a new IP address after the Sender was started, you'll need to restart the Sender
service/daemon.
8.
NIC binding
—If the Remote Computer has multiple NICs, ensure that you attempt to connect to the same NIC
that the RGS Sender is “listening” to. This topic is expanded considerably in Section 4-3 below.
9.
Linux Sender machine name and IP address
—The default on Linux is to bind the machine name to the
following loopback interface in the
/etc/hosts
file:
127.0.0.1
blade2
localhost.localdomain
The RGS Sender will not accept remote connections with this configuration. Edit the
/etc/hosts
file and
bind the machine name to its proper IP address as follows:
127.0.0.1
localhost
localhost.localdomain
88.1.89.122
blade2
blade2.datacenter.com
10.
User-started X environments do not reliably support outside connections
—Users who manually start X
desktops (such as with startx) from the console command line will find that outside access attempts may not
properly connect or be authenticated. This stems primarily from incomplete PAM session management and
permissions to the console. Users should avoid this condition, and achieve login management through the
display manager launched in init-level 5 of the system.
11.
Microsoft Windows APIPA (Automatic Private IP Addressing)
—APIPA can cause the RGS Sender to open
sockets on private IP addresses. This can occur, for example, if the Sender computer is unable to connect to
a DHCP server. Because the private IP addresses are not visible to the RGS Receiver, RGS connections will
not work. You can verify if the Sender is using private IP addresses by typing the following in a command
window:
netstat -n -a
If the IP address associated with the Sender port (listening port 42966) is private, APIPA is the likely cause.
For more information on this topic, go to:
support.microsoft.com/kb/220874
12.
Log out
—If you do log into the Remote Computer to verify any of the above items, ensure that you log out
when you’re done.