Secure Global Desktop Administration Guide > Getting started > What's new in this release of Sun Secure Global Desktop Software?

What's new in this release of Sun Secure Global Desktop Software?

Sun Secure Global Desktop Software version 4.2 contains the following new features and changes:

• Installation using pkgadd and rpm
• New tab for proxy server configuration
• Licensing changes

Version 4.1 contained the following new features and changes:

• Seamless window display mode for Windows applications
• Support for smart cards with Windows Server 2003
• SSL Daemon process tuning
• Running the tarantella command as a non-root user
• Multiple URLs for LDAP directory servers
• Support for aged passwords with the LDAP and Active Directory login authorities
• Support for Solaris x86
• Support for client drive mapping with other file sharing services
• Upgraded JDK (J2SE Development Kit)
• Upgraded Secure Global Desktop Web Server components
• Change to supported connection methods

Installation using pkgadd and rpm

SHX files are no longer used to install Secure Global Desktop. You now install the software with the pkgadd command on Solaris and the rpm command on Linux.

Note The only supported method for uninstalling the software is the tarantella uninstall command. This command uses pkgrm and rpm as part of the uninstall process.

New tab for proxy server configuration

The Secure Global Desktop Client on Windows client devices has a new proxy server configuration panel. The proxy tab is available from the Options menu when you right-mouse click on the icon in the Windows System Tray. See Using Secure Global Desktop with proxy servers for details on configuring clients with proxy servers.

Licensing changes

This release contains the following changes to licensing:

• Activation license keys are no longer required to enable an array.
• Named user licensing is no longer available.
• Maintenance and Right to upgrade license keys are no longer available.

When you upgrade:

• your existing product license keys will be automatically converted; and
• your existing Maintenance and Right to upgrade license keys will be deleted.

Seamless window display mode for Windows applications

This release introduces a new seamless window display mode for Windows applications. With seamless windows, an application's windows behave in the same way as an application running on a Windows application server, regardless of the user's desktop environment. The window can be resized, stacked, maximized and minimized. The Windows Start menu and Task bar do not display.

For more details, see Using seamless windows for Windows applications.

Note As a consequence of this feature, you can no longer press the CONTROL key when you click an application's link to change the way a kiosk or client window management application is displayed.

Support for smart cards with Windows Server 2003

Secure Global Desktop now allows users to access a smart card reader attached to their client device from applications running on a Windows Server 2003 application server. Users can:

• Log on to a Windows Server 2003 server using a smart card.
• Access the data on a smart card while using an application running on a Windows 2003 Server, for example, to use a certificate for signing or encrypting an e-mail.

See using smart cards with Windows applications for details.

SSL Daemon process tuning

It is now possible to tune the SSL Daemon process to improve performance when there is a heavy connection load or if you are using multi-processor servers.

See Tuning the SSL Daemon process for details.

Running the tarantella command as a non-root user

You can now run most of the tarantella commands as a non-root user:

• If the Secure Global Desktop server is running, most commands can be run by root or any user in the ttaserv group. The ttaserv group does not have to be the user's primary or effective group.
• The tarantella objectmanager and tarantella arraymanager commands are still available to any person assigned the Secure Global Desktop Administrator role.
• The main exceptions are the commands used to start and stop the Secure Global Desktop server, the Secure Global Desktop Web Server and security services. These must still be performed as root.
• If the Secure Global Desktop server is stopped, only root can use the tarantella command.

For a full list of what's changed, see the tarantella command.

Multiple URLs for LDAP directory servers

You can now specify more than one LDAP directory server for use with the LDAP login authority, the LDAP user identity mapping options for third party/web server authentication and Directory Services Integration.

In the LDAP URL box on the Secure Global Desktop Login properties panel in Array Manager, or on the command line, you can enter a semicolon-separated list of LDAP URLs. The URLs are used in the order they are listed. If the first LDAP directory server listed is unavailable, Secure Global Desktop tries the next one in the list.

Note The Active Directory login authority is not affected by this change.

Support for aged passwords with the LDAP and Active Directory login authorities

If you are using the LDAP login authority or the Active Directory login authority, Secure Global Desktop can now prompt users for a new password when they log in with an expired password.

Extra configuration may be needed, see enabling the LDAP login authority and enabling the Active Directory login authority for details.

Support for Solaris x86

Secure Global Desktop is now available on the Sun Solaris™ x86 platform. All Secure Global Desktop packs are supported.

Support for client drive mapping with other file sharing services

With additional configuration, it is now possible to run client drive mapping and another file sharing service, such as Samba, on the Secure Global Desktop host. For details, see Can I run another file sharing service with client drive mapping?

Upgraded JDK (J2SE Development Kit)

For this release, the JDK used by the Secure Global Desktop server has been upgraded to version 5.0 (version 1.5.0_03).

Upgraded Secure Global Desktop Web Server components

All the components of the Secure Global Desktop Web Server have been upgraded:

If you customized any of the files in the Apache/Tomcat directories these will be preserved when you upgrade:

• in /opt/tarantella/webserver/apache/1.3.29_mod_ssl-2.8.16_openssl-0.9.7d_jk1.2.5 for Apache
• in /opt/tarantella/webserver/tomcat/4.1.29_axis1.1_jk1.2.5 for Tomcat

You have to manually copy your customizations to the new Apache/Tomcat directories.

Change to supported connection methods

Secure Global Desktop no longer supports the rlogin and rcmd connection methods (--method). As the Secure Global Desktop server no longer runs as root, it can't bind to the privileged ports required for these connection methods.

Copyright © 1997-2005 Sun Microsystems, Inc. All rights reserved.