This is a rough doc detailing my POC VMView/ VDI in an A.D / eDir mixed environment. I was able to complete a working persistent VM connection. (With some minor issues)
All VM user accounts in eDir were defined through IDM into A.D. I used A.D. groups w/GPO to manage access to VMV Pools.
I created two types of GOLD images. Both contained the NetWare Client 4.91 sp5 preinstalled.
Settings on the client should be:
- Must have LDap enabled.
- Within the client settings, the following changes were set:
Advance Login:
Login without Novell’s GINA: On
LDap contextless Login
Enable LDap Treeless login
Enable LDap context search scope
Ensure the following registry entry is set after you have installed the VMView Agent on the master image:
"C:\Program Files\VMware\VMware View\Agent\bin\wsgina.dll"=string:GINADLL
You should now be able to authenticate the VM via a normal Windows domain login that should pass your credentials to eDir and authenticate you with your login script. If you authenticate but your log in script fails to run, you can add this entry to your registry:
“nwscript=reg_expand_sz:loginw32.exe %username% /NA /CONT
When you first login, you may receive and Novell Security Message “The system could not log you into the network……”
Click “ok” and proceed to manually add your credentials to finish the login process.
For persistent images, this should be the only time this happens.
For non-persistent VM’s, you will receive this every time you log in.
This is one of my issues.
There are NetWare Client configuration settings that are set the first time a user authenticates to a vm that are written to the users profile. These settings are maintained so when the same user logs on the same vm, the pass-through credentials from your WYSE authentication goes completely through eDirectory with no issues. However, on Non-persistent vm’s, continuously get the “The system could not log you into the network……” error message because there is no profile.
These are the two types of images I created:
“Fat Image”
Standard Windows XP sp2 stations
Single partition (7 -10 gig) – 384 memory
Apps (Java, Acrobat,etc… Pre-installed)
Template: Non-Domain build. Sysprep set to import computer object into specific A.D container. Container associate GPO forces Domain associated groups as members to the Local Remote Desktop Users Group for each VM.
“Thin-Composed Image”
Master Windows XP sp2 Image (10 gig)
Persistent and or Non-Persistent Linked Clones deploy VMs’. (1.5 – 2.0 gig) – 384 Memory
ThinApp (Acrobat, email, etc)
Master Image already defined in Domain. Quickprep used to created Linked Clone objects into specific
OU Containers. Master Image already contains necessary Domain group memberships to the local Remote Desktop Users Group.
You can these additional NetWare Client options for passive mode or place the following registry entries:
URL: http://www.novell.com/documentation/noclienu/noclienu/index.html?page=/documentation/noclienu/noclie...
“PassiveMode”=dword:00000001
“PassiveModeNDSLogin”=dword:00000001 “PassiveModeNDSLoginSilent”=dword:00000000 or 00000001 “PassiveModeNDSLoginRequired”=dword:00000000 or 00000001
Hope this helps. Good Luck
