Client sessions

Similar Questions

• the closing force of the vSphere web client session after 10 minutes of inactivity.

  To meet the requirements of security, a user admin with a vCenter Server Appliance must

  the closing force of the vSphere web client session after 10 minutes of inactivity.

  That the administrator must do to meet the requirement?

  This much help

  Edit: var/lib/vmware/vsphere-client/webclient.properties, change session.timeout = 10

• How to retrieve the id of the web client session

  Is their no way to retrieve the web client session ID.

  The UserSession class gives you the unique clientId identify the client session.

  See how UserSession is used in the samples/vsphereviews/vsphere-wssdk -Fournisseur/src/main/java/com/vmware/echantillons/wssdkprovider/vmdataproviderimpl.java

• Restrict the VI Client Session

  Hello

  We have an environment vSphere 4.0 with Virtual Center currently also on 4.0

  We have a customer who specifically wants a service account integrated into VC for some software sought to use that gathers info vCPU and host pCPU where their live VM and we gave that service acocunt read only access in VC.

  However, it is kind of a risk for us since now they can just download a VI client and to use the service account to enter VC and have visibility on the environment which we do not necessarily want.

  I know that there are options to restrict the IPS to hosts / VC however do not think that it is an optimal solution and do not know how many intellectual property can the client uses to get there.

  Y at - it a script or a another method that everyone knows that can be limited using the VI client for a particular user or a script that puts an end to a session as soon as someone connects to the VC?

  Thanks in advance!

  Hello

  the VI client uses exactly the same Webservices APIs that scripts or software the customer uses to query information for vCenter.

  This means at the level of the Protocol that you cannot distinguish queries performed by the VI client and requests made by another program.

  Even if you find a way to make the VI client inaccessible to your customer (I doubt this is even possible) it will still be able to use a PowerCLI script or another tool to read all the vCenter data to which he has access.

  What you really need to do is:

  -Isolate resources (networks hosts, VMs, data warehouses,...) that your customer has access to in a separate object data center in vCenter

  -Limit read access to the data center of the service account or even for the subset of its objects for which it should have read access.

  Depending on the requirements of your customers (and your willingness to accomplish...), it can be more or less complex and tedious know how to limit access to the objects in vCenter as it is able to query the data required, but nothing more.

  -Andreas

• Closing the idle Client Sessions

  Thought I would ask if anyone has a solution before I am working on a script for this.  Currently, the only way to end the sessions idle vSphere client is to end it in the section 'Sessions' on the homepage of vCenter.  I'll get a powershell script solution that runs on a daily basis, closing sessions which have been more than a certain time of inactivity.  Does anyone else have a solution already implemented on this one?

  I had a feature request for it with VMware

  Thank you

  Take a look on: http://blog.vmpros.nl/2010/10/02/vmware-disconnect-idling-vcenter-sessions-with-powercli/

  André

• RDP connection in view the client session

  Hello

  We test see 3.1.2 in a small "lab scenario:

  1 view connection server (win2003 R2 SP2, 2 vCPU VM, 3 GB of RAM). No server replica or security.

  1 automated pool (3 VM, not persistent, linked clone)

  Reading documentation (http://www.vmware.com/pdf/view31_manual.pdf - page 33 to 36) and inspect the connections, we don't understand the customer to view (windows) connects to the server via http (s) connection. Then the server itself starts the RDP session to the virtual desktop VM (see Agent).

  Is there a way to configure the connection to the server to behave as a 'simple' - broker for connections (just able to check the credentials of the user and, on this basis, check the resources available) and then allow the client to direct connect vDesktop via RDP?

  The goal here is to lighten the load of the server, without losing the 'automated pool' features and benefits...

  Thank you.

  see this KB to know where to check.  He has changed since VDM.

  http://KB.VMware.com/kb/1007788

• XP SP3 causes BSOD during the passage of the WYSE Thin Client session to session VMware VDM Web Access

  Hello

  For our VDI environment, we use both clients Wyse thin (Thin OS 6.2.0_16) and VMware VDM Web Access to access Windows XP virtual machines that are available through the VMware VDM connection server. The connection and the agent server is at version 2.1.1 build-663. We run ESX 3.5 and Virtual Center 2.5 times with update 3.

  The issue I'm having is once a Windows XP SP2 virtual computer has been upgraded to SP3 will be blue screen when I try to access it for the Wyse terminal after his last accessed from VMware VDM Web Access. Order real to get there would be to access the VM SP3 from the Wyse Terminal, then go VDM Web access, and then again from the Wyse Terminal and it will have a blue screen. Disconnect or disconnect makes a difference. I'm curious to see if anyone else has this problem. I enclose the capture of blue screen and the mini dump file. If you need more information please let me know.

  Thanks for your help!

  -Pete

  Hi Peter,.

  The root cause of the problem is change colordepth of 15 bits to 16 bits. Let me explain the cause of the problem.

  -Connection of the terminal WYSE in a VM XP - effective colordepth in the RDP session = 15 bits

  -Access Web VDM from PC connection (I guess) - effective in the RDP session colordepth = 16 bits.

  -The switch back to results WYSE Thin Client = 15 new bits

  This actually switch between colordepth 15 bits to 16 bits and viseversa result BSOD.

  Thank you to use DesktopColorDepth = 16 RGB565 = Yes command in your wnos.ini and try to place this order through brokers VDM. It should solve the problem.

  Thank you

  Blanchon

• A Client Session by schema - stale object the commit in Session

  Hi all
  
  We have a terrible problem with our current implementation of Toplink.
  Our EPS is:
  Application server: oc4j10.1.2
  TopLink v.3
  Java 1.4
  
  We have several patterns in the architecture, patterns A, B, C, D and E.
  
  Now, A schema is a kind of seed data schema or common data area and contains baisc structures such as locations, roles, and others.
  
  And B French E diagrams use certain structures A or on the level of the object, there is an has a relationship to the objects in A schema.
  We can change the mapped field toplink for the foreign key (in SCHEME B) which establishes this relationship, to point to another folder/object. Thus an object in the schema B can be recycled through different objects in A schema.
  
  For example: A person can be associated with a location and the location associated with the person can be changed on the person object.
  
  However, when I do this, I see the published updates and the location is updated in the database and the UOW is committed. However, when I read the object, I get the old location. I return the stale object. Unless I update manually the object, the object of leasing is read from the session cache and he still vomits that Rassi.
  
  What concerns me is, why the State of the object is not snychronised with the Session, even after the UOW derived that the Session has been committed to the DB. Is this because the object belongs to an another schema? Or there could be a problem in the mapping Setup?
  
  After having a terrible time, find a solution. If someone has an idea/small idea, I'll be really grateful if you could let me know. If you need more information, just ask.
  
  Thank you
  Mary jenne

  Hello

  I think you should use addForeignKeyFieldName ("CS_LOCATION.CS_LOC_ID", "PR_BASETOURINFO.CS_DEST_DROPOFFDESTN_ID"); who will tell toplink CS_DEST_DROPOFFDESTN_ID is the foreign key, and it must be set to the value in CS_LOCATION.CS_LOC_ID when the relationship is defined.

  By using addTargetForeignKeyFieldName, you say TopLink is the foreign key in the target table. essentially, this CS_LOCATION.CS_LOC_ID is the foreign key and must be defined with the value that lies in PR_BASETOURINFO.CS_DEST_DROPOFFDESTN_ID. This prevents PR_BASETOURINFO.CS_DEST_DROPOFFDESTN_ID to be defined through the mapping. With the help of a foreign key mapping target is similar to what actually read-only, since the changes of relationship will not result in a change in the database - some other mapping in the reference object must define the foreign key field target and a mapping in this object controls the referenced id.

  Best regards
  Chris

• Complete the VI Client with PowerCLI Script idle Sessions

  Hello gurus PowerCLI

  I searched the net for a script PowerCLI that would end all the VI client sessions that have been inactive for x period of time.  I found a post on the forums of VMware (http://communities.vmware.com/message/914858?z=zI0r8n) but had no luck with it.  I also found a script created by A.Mikkelsen, to http://www.amikkelsen.com/?p=384 , but that one does not work either.

  Here's the actual script by A.Mikkelsen that is based on code by LucD in the forum mentioned previously.

  BEGINNING

  ##################################################################################
  # The script terminates all sessions if idle idle user for more than xx #.
  #                             #
  # Created by: Anders Mikkelsen, 2010 #.
  ##################################################################################
  Claire
  # Add - PSSnapin VMware.VimAutomation.Core

  # $server = "vcenter server.
  # $user = "vcenter username.
  # $pwd = "password of vcenter.

  # Add 1 extra hour when, due to the difference of timestamp between MSSQL and Windows.
  # slow down time 5 hours = 360
  # 10 hours slowed = 660
  $intOlderThan = 60

  # Connect-VIServer $server - user $user-password $pwd
  # Connect-VIServer $server

  $svcRef = new-object VMware.Vim.ManagedObjectReference
  $svcRef.Type = 'ServiceInstance.
  $svcRef.Value = 'ServiceInstance.
  $serviceInstance = get-views $svcRef

  $sessMgr = get-view $serviceInstance.Content.sessionManager
  $oldSessions = @)
  {foreach ($sess in $sessMgr.SessionList)}
  If (($sess.)) (LastActiveTime) .addminutes ($intOlderThan) - lt (Get-Date)) {}
  $oldSessions += $sess. Key
  #write "$($sess.)". User name)'
  }
  }

  # Session terminal that are inactive for more than approved ($intOlderThan)
  $sessMgr.TerminateSession ($oldSessions)

  Disconnect-VIServer *-confirm: $false

  END

  The error message I get is:

  BEGINNING

  Exception calling 'TerminateSession' with '1' or the arguments: "it was not correct to specified parameters.

  "

  D:\Scripts\vc_terminate_idle_sessions.ps1:36 char: 26

  + $sessMgr.TerminateSession < < < < ($oldSessions)

  + CategoryInfo: NotSpecified: (:)) [], MethodInvocationException)

  + FullyQualifiedErrorId: DotNetMethodException

  END

  I should mention that my knowledge of PowerCLI is almost nothing, so any help in tweaking this script to make it work with PowerCLI 5.1 Release 2 and VC 5 U2 would be much appreciated.

  The error is caused by the fact that you are trying to kill your own session (if it was started long time ago).

  Apparently in vSphere 5. they included a security mechanism integrated to avoid this.

  You can take this by adding a simple test.

  ## max number of idle minutes for sessions to keep$intOlderThan = 60$serviceInstance = Get-View 'ServiceInstance'## get the session manager object$sessMgr = Get-View $serviceInstance.Content.sessionManager## array to hold info about stale sessions$oldSessions = @()foreach ($sess in $sessMgr.SessionList){    if (($sess.LastActiveTime).addminutes($intOlderThan) -lt (Get-Date) -and          $sess.Key -ne $sessMgr.CurrentSession.Key){        $oldSessions += $sess.Key    } ## end if} ## end foreach
  
  ## if there are any old sessions, terminate them; else, just write message to the Warning streamif (($oldSessions | Measure-Object).Count -gt 0) {    ## Terminate sessions than are idle for longer than approved ($intOlderThan)    $sessMgr.TerminateSession($oldSessions)} ## end ifelse {Write-Warning "No sessions that have been idle for more than '$intOlderThan' minutes; no action taken"}
  

• Q2 IP "address of the Terminal of the Session SQL Client.

  What iis data dictionary Table/query Oracle for Terminal for IP address of SQL Client Session
  
  
  Thank you!

  Please refer to the SYS_CONTEXT('USERENV','CLIENT_IP_ADDRESS') (from memory) function call in the SQL reference for your unknown version manual.
  Note it is not possible in all versions, reason why you must always include it.

  --
  Sybrand Bakker
  Senior Oracle DBA

• RDS and Citrix application Streaming directly on the client client access licenses

  Hi, I just need knowa bit on the RDS CALs. We are currenlty in the deployment of a VDI solution and using APP - V 4.6 as our main method for applications, however, we also have a XenApp 6.5. Farm attached to our system and we want to use Citrix streaming along side APP - V until we can finally migrate to APP - V version 5. If we are streaming apps directly at the VDI client session, instead of on the XenApp server and then the client should we Cal RDS for direct broadcasting of applications. See you soon

  Wayne

  Hi Wayne,

  The Microsoft Answers community focuses on the context of use. Please reach out to the business community of COMPUTING in the TechNet forum below:

  http://social.technet.Microsoft.com/forums/en-us/categories

  Alternatively, you can contact Citrix support for assistance team.

  Links:

  http://community.Citrix.com/

  http://support.Citrix.com/proddocs/topic/receiver1102-WinCE/WinCE-WBT-receiver-Admin-XenApp.html

• How can I get the Client VPN or NAT - ted connection

  I installed a router on a customer site to replace a PC that made the NAT on a cable modem connection.

  On the router THAT NAT is done to get all the s PC on the LAN to access the Internet.

  But... one of the users use a VPN client to get to his office. With the PC, there is no problem, but given that the router is in place it can not connect.

  Because I specialized on switched networks my knowledge; edge of NAT and VPN clients.

  Is there anyone who knows how to get this VPN client-session user to be NAT - ted?

  Kind regards

  Martijn Koopsen

  If you have some onfigured of overload, then you tap the traffic. In all cases, you should at least be able to establish a connection, as IPSec uses UDP 500 for the negotiation of the tunnel. If you are not able to pass all traffic, it is another question. Once the tunnel is established, the traffic can be encrypted using the Protocol ESP who cannot be tapped under normal circumstances. If this is a cisco IPsec client, then you must discover which is the feature of termination. If it's a hub 3K, you could activate IPSec over UDP to the problem of circumvention the ESP

  Hope that helps

  Jean Marc

• How much max VPN session is my ASA

  This is my version to see the ASA5512 VPN

  "Other peers VPN: 250" means that I can use 250 IPSEC session? If I still use MAX 250 VPN Cisco AnyConnect Secure Mobility Client session?
  "Total peer VPN: 250" means that I can use 2 Anyconnect premium + 248 250 IPSEC or IPSEC session at the same time?

  "AnyConnect for Mobile: Disabled" means, I can't use AnyConnect Secure mobility Client (smartphone apps) connect to the ASA by AnyConnect SSL? Can I use AnyConnect secure mobility Client (smartphone apps) connect to the ASA by IPSEC?

  The devices allowed for this platform:
  The maximum physical Interfaces: unlimited perpetual
  VLAN maximum: 100 perpetual
  Guests of the Interior: perpetual unlimited
  Failover: Active/active perpetual
  Encryption - A: enabled perpetual
  AES-3DES-Encryption: activated perpetual
  Security contexts: 2 perpetual
  GTP/GPRS: Disabled perpetual
  AnyConnect Premium peers: 2 perpetual
  AnyConnect Essentials: Disabled perpetual
  Counterparts in other VPNS: 250 perpetual
  Total VPN counterparts: 250 perpetual
  Shared license: disabled perpetual
  AnyConnect for Mobile: disabled perpetual
  AnyConnect Cisco VPN phone: disabled perpetual
  Assessment of Advanced endpoint: disabled perpetual
  Proxy UC phone sessions: 2 perpetual
  Proxy total UC sessions: 2 perpetual
  Botnet traffic filter: disabled perpetual
  Intercompany Media Engine: Disabled perpetual
  The IPS Module: Disabled perpetual
  Cluster: Disabled perpetual

  THX

  Hello!

  ASA5512 can contain up to 250 concurrent VPN of any type: IPsec Site to Site or IPsec Remote access or Anyconnect SSL VPN or IPsec IKEv2, or even without VPN client.

  This means you can use 2 Anyconnect premium + 248 IPSEC VPN from Site to Site. Or, for example, 200 simultaneous IPsec Site to Site VPN + 25 Client VPN (IPsec IKEv1) + 25 AnyConnect VPN (SSL or IPsec IKE v2). But not more than 250 and then at the same time.

  "AnyConnect for Mobile" is now obsolete. The license for Anyconnect schema was changed in early 2015. You can see the new pattern here:

  http://www.Cisco.com/c/dam/en/us/products/security/AnyConnect-og.PDF

  With the new scheme, if you need to connect mobile devices (iOS, Android and so on), using the Anyconnect client, you just need to have a license Anyconnect MORE for the necessary amount of users/devices. License AnyConnect more open along the lines in the output of the show version:

  AnyConnect Premium Peers : 250 perpetual

  AnyConnect for Mobile : Enabled perpetualAnyConnect for Cisco VPN Phone : Enabled perpetualAdvanced Endpoint Assessment : Enabled perpetual

  But, despite the exit "AnyConnect peers Premium: 250 perpetual", you will have the right to use no more then amount ordered... If you need advanced features, for example, Suite B cryptography or VPN without customer, you must order license Anyconnect Apex for amount of users/devices needed. For ASA5512, you need to order licenses Anyconnect more or Apex, but no more so for 250 users, because ASA5512 can't take no more then 250 simultaneous connections. If you want to use the Anyconnect client for mobile devices and you use IPsec IKEv2 for VPN, you will also need order licenses Anyconnect more or Apex. I hope this helps.

• How to allow remote VPN Sessions to communicate

  Hi all

  I'm trying to understand how to enable remote VPN client sessions to communicate.  For example, if my manager has been connected via VPN to the office and needed me to fix something on his laptop, I cannot VPN to the office and RDP into her laptop.  Not sure if this can be done without pain.

  A brief out of my config.  Remote client VPN sessions work fine.  It's only when I try to access other customer VPN sessions, is where I have a problem.

  Thank you is advanced!

  FW # executed sho

  : Saved

  :

  interface Ethernet0/0

  nameif inside

  security-level 100

  IP 192.168.1.1 255.255.255.0

  !

  interface Ethernet0/1

  nameif outside

  security-level 0

  IP 4.4.1.8 255.255.255.252

  !

  interface Ethernet0/2

  !

  interface Ethernet0/3

  !

  !

  permit same-security-traffic inter-interface

  permit same-security-traffic intra-interface

  outside_in list extended access permit icmp any one

  split_tunnel list standard access allowed 192.168.1.0 255.255.255.0

  inside_access_in of access allowed any ip an extended list

  outside_access_in of access allowed any ip an extended list

  access-list sheep extended 10.10.10.0 any allowed ip 255.255.255.0

  IP local pool vpn 10.10.10.1 - 10.10.10.15 mask 255.255.255.0

  Global 1 interface (outside)

  NAT (inside) 0 access-list sheep

  NAT (inside) 1 0.0.0.0 0.0.0.0

  inside_access_in access to the interface inside group

  Access-group outside_in in external interface

  Route outside 0.0.0.0 0.0.0.0 4.4.1.7 1

  Crypto ipsec transform-set ESP-DES-SHA esp - esp-sha-hmac

  Crypto-map dynamic inetdyn_map 20 the value transform-set ESP-DES-SHA

  map inet_map 65535-isakmp ipsec crypto dynamic inetdyn_map

  inet_map interface card crypto outside

  inside_map card crypto 65535-isakmp dynamic ipsec SYSTEM_DEFAULT_CRYPTO_MAP

  inside crypto map inside_map interface

  crypto isakmp identity address

  crypto ISAKMP allow inside

  crypto ISAKMP allow outside

  crypto ISAKMP policy 10

  preshared authentication

  the Encryption

  sha hash

  Group 2

  life 86400

  Crypto isakmp nat-traversal 21

  internal vpnipsec group policy

  attributes of the strategy of group vpnipsec

  value of 192.168.1.5 WINS server

  value of server DNS 192.168.1.5

  Split-tunnel-policy tunnelspecified

  value of Split-tunnel-network-list split_tunnel

  moobie.com value by default-field

  type tunnel-group vpnipsec remote access

  tunnel-group vpnipsec General-attributes

  vpn address pool

  Group Policy - by default-vpnipsec

  vpnipsec group of tunnel ipsec-attributes

  pre-shared key nope

  !

  Hello

  You need to allow pool vpn split tunnel, here's what you need to do

  split_tunnel list standard access allowed 10.10.10.0 255.255.255.0

  same-security- allowed traffic intra-interface

  Kind regards

  Bad Boy

  P.S. Please mark this message as 'Responded' If you find this information useful so that it brings goodness to other users of the community

• Sometimes web error message from the client / popup that lies behind the HTML view

  Hello

  At times the web client error / popup hiding behind making the full background grey out and highlighting HTML display the HTML view. At this stage the actions behind the HTML code / above the screen HTML is not clickable, which forces the user to refresh the entire page (in case of a popup). Please find attached the screenshots. I tried to find if it is a known problem, but found no references linked to this document from VMware. Can someone please tell me, if there is no work around for this problem.

  Details of the environment:

  • Browser: Google Chrome (latest version)
  • OS: Windows 2007 and 2 k 8
  • vCenter: 6.0

  
  

  Steps to reproduce:

  • Open an extension point that contains the HTML content.
  • Leave it for awhile until the point the web client session, timeout occurs (or) to disable the WebClient service / vcenter server service (Note: this one is not always reproducible.)
  • Try to perform some action less content, it will display the html error message / see the popup behind the html code.
    

  
  

  The problem of popups being hidden behind an HTML view is fixed in version 6.0.1 which was released on 10 September.

  Same question as indicated previously here: problem with IFrame based HTML hosting inside Flex views