SGD 4.3 authenticate with AD(Users login n get different set of application

Question

Hi SGD Forum users,
First of all, happy new year and happy holiday to all of you from new SGD user :-).
We are planing to Demo SGD 4.3 to one of our customer by early next week.
So, what the customer would like to see with the demo:
1) From SunRay client, user1 launch Firefox browser and type the sgd web page.
- Enter username and password ( Username and password must authenticate with AD ).
- After successfully authenticate, user1 will get his webtop page.
- In the webtop page, user1 only have two(2) applications to launch. First application is MS Office Word and Second application is Full Virtual XP desktop( 192.168.5.205 ).
2) From SunRay client, user2 launch Firefox browser and type the sgd web page.
- Enter username and password ( Username and password must authenticate with AD ).
- After successfully authenticate, user2 will get his webtop page.
- In the webtop page, user2 only have two(2) applications to launch. First application is MS Office Excel and Second application is Full Virtual XP desktop( 192.168.5.206 ).
3) From SunRay client, user "manager" launch Firefox browser and type the sgd web page.
- Enter username and password ( Username and password must authenticate with AD ).
- After successfully authenticate, user "manager" will get his webtop page.
- In the webtop page, user "manager" only have four(4) applications to launch. First application is MS Office Word, Second application is MS Office Excel, Third application is MS Office Powerpoint and Fourth application is Full Virtual XP desktop( 192.168.5.207 ).
Note: The above mentioned users( user1, user2 and manager ) launch a different MS Office applications and different Virtual XP desktop servers.
Here are my SGD 4.3 demo setup:
- Install Solaris 10 06/06 OS for Sparc.
- Install latest patches.
- Create a local zone.
- Install SRSS 3.1 and patches in Global zone.
- Install SGD 4.3 in the local zone.
- My colleague install 2x MS Server 2003( AD and DNS server )
- My coleague install ESX( VM Server ) and created 3x Virtual XP Desktop( 192.168.5.205, 192.168.5.206 & 192.168.5.207 ).
In my SGD, Array Manager, i had successfully set "Enabling the Active Directory login authority" as mentioned in the SGD Administrator Guide. I also login successfully to SGD server using user1, user2 and manager( Created in AD server ). So, my SGD server successfully communicated with AD server.
When i test login user1 or user2 or manager to SGD server, they get same webtop with same applications. If i am not wrong, these behaviour is due to LDAP Profile under "o=Tarantella System Objects". If i put any application in LDAP Profile's Links tap, all the user whose authenticated with AD will be able to launch it.
The customer requirement is, all the users authenticate with AD and the users should launch different applications and different Virtual XP Desktop as i mentioned earlier.
Is it possible to perform the SGD demo as customer requirement ? If yes, can you guide and help me on how-to create different profile for each AD authenticated users.
Thanks in advance.
# Yours Sincerely,
# Mohamed Ali Bin Abdullah.

Answer 1

Hi Wai,
Sorry not including full details of the person object in my previous posting.
Here are the details of person object:
General
- Name: user1
- Description:
- Surname: esuria
- Username: user1
- Email: [email protected]
- Locale: Automatic
- Keyboard Map: Use XPE setting
- Windows NT Domain: BIA
- Bandwidth: None
- Webtop Theme: Standard
- Inherit parent's webtop content: NO
- Shared between users(quest): NO
- May log in to Secure Global Desktop: YES
- Profile Editing: Use Parent setting
- Clipboard Access: Use Parent Setting
- Serial Port Mapping: Use Parent Setting
Links
o=BIA/cn=MS XP Desktop 192.168..5.205
Thats the setting of user1 person object which i had created in my SGD but when user1 authenticated with AD, the user1 still sees LDAP Profile applications.
What else, do i need to set in SGD and AD server side ?
Thanks in advance.