Setting Up for Linux Desktops
Table Of Contents
- Setting Up Horizon 7 for Linux Desktops
- Contents
- Setting Up Horizon 7 for Linux Desktops
- Features and System Requirements
- Preparing a Linux Virtual Machine for Desktop Deployment
- Setting Up Active Directory Integration for Linux Desktops
- Setting Up Graphics for Linux Desktops
- Installing Horizon Agent
- Configuration Options for Linux Desktops
- Create and Manage Linux Desktop Pools
- Bulk Deployment of Horizon 7 for Manual Desktop Pools
- Overview of Bulk Deployment of Linux Desktops
- Overview of Bulk Upgrade of Linux Desktops
- Create a Virtual Machine Template for Cloning Linux Desktop Machines
- Input File for the Sample PowerCLI Scripts to Deploy Linux Desktops
- Sample Script to Clone Linux Virtual Machines
- Sample Script to Join Cloned Virtual Machines to AD Domain
- Sample Script to Join Cloned Virtual Machines to AD Domain Using SSH
- Sample Script to Upload Configuration Files to Linux Virtual Machines
- Sample Script to Upload Configuration Files to Linux Virtual Machines Using SSH
- Sample Script to Upgrade Horizon Agent on Linux Desktop Machines
- Sample Script to Upgrade Horizon Agent on Linux Virtual Machines Using SSH
- Sample Script to Perform Operations on Linux Virtual Machines
- Troubleshooting Linux Desktops
- Collect Diagnostic Information for Horizon 7 for Linux Machine
- Troubleshooting Copy and Paste between Remote Desktop and Client Host
- Configuring the Linux Firewall to Allow Incoming TCP Connections
- View Agent Fails to Disconnect on an iPad Pro Horizon Client
- SLES 12 SP1 Desktop does not Auto Refresh after Drag and Drop
- SSO Fails to Connect to a PowerOff Agent
- Unreachable VM After Creating a Manual Desktop Pool for Linux
- Index
View does not require the user name to be case-sensitive. You must ensure that the Linux operating system
can handle case-insensitive user names.
n
For Winbind, the user name is case-insensitive by default.
n
For OpenLDAP, Ubuntu uses NSCD to authenticate users and is case-insensitive by default. RHEL and
CentOS use SSSD to authenticate users and the default is case-sensitive. To change the seing, edit the
le /etc/sssd/sssd.conf and add the following line in the [domain/default] section:
case_sensitive = false
For Ubuntu 16.04 or 14.04, congure UseGnomeFlashback=TRUE in the /etc/vmware/viewagent-custom.conf
le to use the GNOME Flashback (Metacity) desktop environment.
Smart Card Redirection
To set up smart card redirection, rst follow the instructions from the Linux distributor and from the smart
card vendor. Then update the pcsc-lite package to 1.7.4. For example, run the following commands:
#yum groupinstall "Development tools"
#yum install libudev-devel
#service pcscd stop
#wget https://alioth.debian.org/frs/download.php/file/3598/pcsc-lite-1.7.4.tar.bz2
#tar -xjvf pcsc-lite-1.7.4.tar.bz2
#cd ./pcsc-lite-1.7.4
#./configure --prefix=/usr/ --libdir=/usr/lib64/ --enable-usbdropdir=/usr/lib64/pcsc/drivers
--enable-confdir=/etc --enable-ipcdir=/var/run --disable-libusb --disable-serial --disable-usb
--disable-libudev
#make
#make install
#service pcscd start
For Winbind, add the following statement to the conguration le /etc/samba/smb.conf.
winbind use default domain = true
When you install the Horizon Agent, you must rst disable SELinux or enable permissive mode for
SELinux. You must also specically select the smart card redirection component because the component is
not selected by default. For more information, see “install_viewagent.sh Command-Line Options,” on
page 42.
Smartcard SSO is enabled in Horizon View 7.0.1 or later. In addition, if the smart card redirection feature is
installed on a virtual machine, vSphere Client's USB redirection does not work with the smart card.
Smart card redirection supports only one smart card reader. This feature does not work if two or more
readers are connected to the client device.
Smart card redirection supports only one certicate on the card. If more than one certicate is on the card,
the one in the rst slot is used and the others are ignored. This is a Linux limitation.
N
n
Smartcard supports the following winbind value. Else the smartcard SSO and manual login fails.
winbind use default domain=true
n
When you use Linux client to authenticate the broker with PIV card, which is supported by Linux
desktop smartcard redirection, you must add view.sslProtocolString = "TLSv1.1" conguration for the
Linux client at ~/.vmware/view-preferences to avoid SSL error.
Chapter 3 Setting Up Active Directory Integration for Linux Desktops
VMware, Inc. 27