Setup Guide

Table 6. Connection Settings: wnos.ini files only (continued)
Parameter Description
common name. The default value is changed to Yes from build version
8.5_106.
NOTE: Use NetBIOS or FQDN values to define a SSL—Https—
connection when enabling TLSCheckCN option, as enabling TLSCheckCN
results in SSL connection failure when an IP address is defined.
TLSDisableCipher—This parameter confines the TLS client to stop using
the listed cipher suites.
In this release, DES and 3DES can be disabled. For example, to disable both
DES and 3DES, use TLSDisableCipher=DES;3DES.
SetNetiDLicense=(yes, no)
[Name=License name]
[Company=License company]
[Value=License value]
[trace=NetiD driver log path and name]
The SetNetiDLicense parameter enables or disables the usage of SecMaker
NetiD smart card pkcs11 drivers.
The parameters Name, Company, and Value specify the license name, license
company, and the license value respectively.
The trace parameter enables you to set the driver log path and file name. For
example, trace=/tmp/secmaker.log.
SignOn={yes, no, NTLM}
[MaxConnect=max]
[ConnectionManager={maximize,
minimize,
hide}]
[EnableOK={no, yes}]
[DisableGuest={no, yes}]
[DisablePassword={
no, yes}]
[LastUserName={no, yes}]
[RequireSmartCard={yes or force, optional,
no}]
[SCRemovalBehavior= {none or -1, logoff or 0,
lock or 1, killsessions or 2}]
[SaveLastDomainUser={yes, no, user,
domain}]
[DefaultINI=filename]
[IconGroupStyle={default, folder}]
[IconGroupLayout={Vertical, Horizontal}]
[PasswordVariables={yes, no}
[LockTerminal={yes, no}]
[ExpireTime={0, 1 - 480}]
[UnlockRefresh={
yes, no}]
[SCShowCNName={yes,no}]
[SCSecurePINEntry={no, yes}]
[AutoConnectTimeout={10–300}]
[DisableEditDomain={yes, no}]
[AdGroupPrefix=adgrpnameprefix]
[ClearUser={yes, no}]
[DisableSignoff={yes,
no}]
[SFZeroButtons={yes, no}]
SignOn — Default is yes. Yes/no/NTLM option to enable the sign-on
process. If set to NTLM, a user can be authenticated with an NTLM protocol.
The user must be a domain user and the same sign-on user credentials must
be available in the ftp://~/wnos/ini/ directory.
MaxConnect — Default is 216. Maximum number of connections allowed to
be specified in the wnos.ini file and {username}.ini file added together. The
range allowed for MaxConnect is 100 to 1000. The default maximum is 216
entries.
ConnectionManager — Default is minimize. State of the Connect Manager
during sign-on.
EnableOK — Default is no. Yes/no option to show the OK and Cancel the
command buttons in the Sign-on dialog box.
DisableGuest — Default is no. Yes/no option to disable the guest sign-on.
DisablePassword — Default is no. Yes/no option to disable the password
text box and password check box in the Sign-on dialog box.
LastUserName — Default is no. Yes/no option to display the last sign-on
username after the user logs off.
RequireSmartCard — Default is optional. If optional keyword is set to yes
or force, only smartcard authentication is allowed. If set to no, smartcard
authentication is disabled. If the value is set to optional, smartcard
authentication is optional.
SCRemovalBehavior — This parameter specifies the thin client behavior
when a smart card is removed. The default value is 0.
● none or -1 — If the smart card is removed then the client has no action.
Whether the session can be used or not is dependent on the server policy.
● logoff or 0 — System logs off.
● lock or 1 — System is locked and can be unlocked only when the same
certificate is used with smart card.
● killsessions or 2 — This option can be used with the AutoSignoff
parameter.
SaveLastDomainUser — Yes/no option to save the username and domain
into NVRAM once signon is successful. On next reboot, the username and
domain saved in the NVRAM will be displayed in signon server as the default
username and domain if no DefaultUser is set in the wnos.ini file.
Parameters for wnos INI files only
35