Enabling A Disabled Network Setup Dialog Box - Dell Wyse ThinOS C10LE Administrator's Manual

Chapter 4
44

Enabling a Disabled Network Setup Dialog Box

Although there are privileges and user modes associated with user access to thin client
resources, access to network setup (using the Network Setup dialog box) depends
upon privilege level. A Stand-alone user either is by default a user with High privilege or
has a thin client that is locked down. A Guest user has an implicit privilege of None and
all access is governed by that privilege. A PNAgent/PNLite-only user has whatever
privilege was set in the wnos.ini file at thin client boot, whatever privilege was locked
down at the last access of a wnos.ini file, or High privilege (by default).
Example: High Privilege - Low Privilege - None
If the Privilege parameter is set to Low or None in the INI files, the thin client Network
Setup dialog box will be disabled (the user cannot access it). In such a case, there may
be occasion to access the Network Setup dialog box without wanting to change the
INI files. For example, an occasion when you need to change to another FTP or Virtual
Desktop file server or add to the PNAgent/PNLite servers list. To access the Network
Setup dialog box in such a case, disconnect the network cable and reboot the thin
client to Stand-alone user mode. The Network Setup dialog box displays after the thin
client initializes and you can then make the required entries (be sure to reconnect the
network cable and reboot when finished).
the server certificate text field supports a maximum of approximately 127 characters,
and supports multiple server names.
The following kinds of server names are supported (all examples are based on Cert
Common name is "company.wyse.com"). NOTE: Using only the FQDN, i.e.
company.wyse.com will not work, you must use one of the options (note that
*.wyse.com is the most common option as multiple authentication servers may
exist):
servername.wyse.com
*.wyse.com
*wyse.com
*.com
*
To configure EAP-GTC, enter the username only, and the password or PIN will be
asked when authenticating. To configure EAP-MSCHAPv2, enter the username,
password, and domain (domain/username in the username box is supported, but
you must leave the domain box blank). Note that the CA certificate must be installed
on the thin client (the server certificate is forced to be validated). Also note that
when EAP Type EAP-MSCCHAPV2 is selected on the Authentication Properties
dialog box (for PEEP IEEE802.1x authentication), an option to hide the domain is
available for selection (the Username and Password text boxes are available for use,
but the Domain text box displays gray).