Wyse S10 Administrator's Manual page 66

60
Appendix A
•
•
•
DHCP vendor options (for example, ensure that the 184 and 185 options are string
parameters). Then provide the non-anonymous account with read-only permissions
through the entire FTP server path. Be sure to modify these guidelines according to
your specific security environment and configuration.
Windows FTP Server Guidelines - You can use the FTP tools available on the
Windows server. For Wyse ThinOS versions earlier than 4.3, be sure the Windows
server supports the anonymous log-in capability. For Wyse ThinOS version 4.3 and
later, this support is not necessary because of the User Interface (UI)/DHCP feature to
specify the login ID and password.
Linux FTP Server Guidelines - Be aware of the following:
• The FTP server must be configured to offer FTP services (by adding the following
line or equivalent to the /etc/inetd.conf file, if it is not already present):
ftp stream tcp nowait root /usr/sbin/tcpd in.proftpd
• The FTP server must be configured to support anonymous FTP. For most FTP
servers, this requires establishment of an FTP login account by adding the following
line or equivalent to the /etc/password file:
ftp:x:17:1:Anonymous FTP directory:/home/ftp:/dev/null/
ftp-shell
The shell file /dev/null/ftp-shell need not exist, but some FTP servers
require that it be listed in the /etc/shells file to allow FTP connections on this
account.
• Depending on which Linux distribution you are using, additional modifications to a
central configuration file for the FTP daemon may be necessary to enable
anonymous FTP. You can try man protftp, man wuftpd, or man ftpd to access
information applicable to your particular FTP daemon.
• A Linux server used for FTP must support passive FTP.
FTP Folder Structure Guidelines - The FTP folder structure that is required by thin
clients running Wyse ThinOS is \wyse\wnos and must be placed under the FTP root
folder (if DHCP option tag 162 is not used) or under the folder which has been
specified by DHCP option 162. For example, if DHCP option tag 162 has been
configured with the name ThinClients and DHCP option tag 161 has been configured
with IP address 192.168.1.1, then the thin client will check the folder
<FTPRoot>\ThinClients\wyse\wnos for a wnos.ini and firmware on the FTP server with
the IP address (192.168.1.1). The sub-folder \bitmap must be placed under the \wnos
folder and can contain graphical images for icons and background images. The
sub-folder \cacerts can be placed under the \wnos folder and can contain your CA
certificates. The sub-folder \inc can be placed under the \wnos folder and can contain
the mac.ini files (note that the use of the parameter
mac-address.ini" so that you can use inc in the folder structure and use $MAC.ini).
sub-folder \trace can be placed under the \wnos folder and can contain the trace files
that you can capture and play back (be sure to enable the parameter,
EnableTrace=yes). The following figure shows an example of the folder structure of an
FTP server for Wyse ThinOS.
Include=$mac.ini will load "/wnos/inc/
The