Invalid Kiosk session configuration...

Question

Guys,
I have a Solaris-based SRSS 4.2 installation. I have Global Kiosk set to connect to VMware View server (and it works fine).
I have certain people that need to connect to their Linux desktops. So I created another Kiosk configuration using the Kiosk Mode Generic Session (http://wiki.sun-rays.org/index.php/SRSS_Addon:_Kiosk_Mode_Generic_Session)
My generic.conf looks like this:
KIOSK_SESSION_EXEC=$KIOSK_SESSION_DIR/generic-session
KIOSK_SESSION_LABEL="SGD"
KIOSK_SESSION_DESCRIPTION="Provides an SGD X session for running a Kiosk script."
KIOSK_SESSION_ARGS="/usr/bin/firefox http://sgdserver/sgd"
KIOSK_SESSION_PROTOTYPE=generic-session
I have then ran these commands to import the configuration and assign it to certain users:
# utkiosk -i SGD -f generic.conf
# utkiosk –l
SGD
session
Now assign the SGD configuration to users’ token:
# utkioskoverride -r Payflex.xxxxxxx -s kiosk -c SGD
Here’s the kick… If I set Global Kiosk to SGD, it works fine and brings up SGD login page as it is supposed to.
If I set Global Kiosk back to View and try to use a smartcard to bring up SGD for the particular user, I get:
Login Incorrect, please try again
then an error stating:
Error starting Kiosk session: Invalid Kiosk session configuration
In the logs I see this:
kiosk:initsession[14382]: [ID 702911 user.error] Error: $KIOSK_SESSION not specified
Jan 12 15:30:55 dsys-vfrb-sray1 kiosk:initsession[14383]: [ID 702911 user.error] Error: failed to load Session Descriptor
Jan 12 15:30:55 dsys-vfrb-sray1 dtlogin[14250]: [ID 705508 user.error] pam_kiosk: pam_sm_open_session: Child process /opt/SUNWkio/lib/initsession failed with exit code 1.
Any ideas? It works fine in my Lab, but at a customer site, it does not work!
Thank you in advance for your help!

Answer 1

Vitaly91 wrote:
I have a Solaris-based SRSS 4.2 installation. I have Global Kiosk set to connect to VMware View server (and it works fine).
I created another Kiosk configuration using the Kiosk Mode Generic Session (http://wiki.sun-rays.org/index.php/SRSS_Addon:_Kiosk_Mode_Generic_Session)
My generic.conf looks like this:
KIOSK_SESSION_EXEC=$KIOSK_SESSION_DIR/generic-session
KIOSK_SESSION_LABEL="SGD"
KIOSK_SESSION_DESCRIPTION="Provides an SGD X session for running a Kiosk script."
KIOSK_SESSION_ARGS="/usr/bin/firefox http://sgdserver/sgd"
KIOSK_SESSION_PROTOTYPE=generic-session
I have then ran these commands to import the configuration and assign it to certain users:
# utkiosk -i SGD -f generic.confUnfortunately Kiosk has two kinds of *.conf files: session descriptors (see the kiosk(5) man page) and session configurations (see the session.conf(4) man page). And these types are rather similar - some settings can be in the descriptor as default, but also in the session configuration. The generic.conf you have is a session descriptor. Those must be stored into /etc/opt/SUNWkio/sessions/. But for import into utkiosk you need a session configuration. Probably utkiosk should do more validation of the configuration you are importing to protect against this confusion.
The generic session is intended for configuring any command to be executed from the admin UI. If you know your command and need a prototype, you should go the extra step and make a specific session. Here is how:
Rename your file to /etc/opt/SUNWkio/sessions/SGD.conf and change it to be:
KIOSK_SESSION_EXEC=/usr/bin/firefox
KIOSK_SESSION_LABEL=SGD
KIOSK_SESSION_DESCRIPTION=Provides an SGD X session for running a Kiosk script.
KIOSK_SESSION_PROTOTYPE=SGDAlso rename your /etc/opt/SUNWkio/prototypes/generic-session directory to /etc/opt/SUNWkio/prototypes/SGD, as per the last line above.
You can leave the KIOSK_SESSIONS_ARGS line in the file, if you wish, but it will just be a default, so I'll show how to set the arguments via utkiosk.
To verify that you have set up the descriptor correctly, use
/opt/SUNWkio/bin/kioskdesc print SGD Now create your session configuration:
# utkiosk -i SGD <<!
KIOSK_SESSION=SGD
KIOSK_SESSION_ARGS=http://sgdserver/sgd
! Of course you can also put these two lines into a file and use it with the -f argument to utkiosk.