VMware View-Template; Novell Client/Zen Agent and SSO

I still get questions about how to get Single Sign On to work with VM’s with a Novell Client installed on them. There are a lot of Novell environments out there so I’m glad VMware documented this.

One of the requirements for View is Active Directory. When Novell eDirectory is your primary Directory service you first need to think about how to migrate the NDS information to AD. The View Manager authenticates against AD.

Single Sign On with the Novell Client inside the VM is possible.

Hereby the official VMware KB on VMware View and Novell Client based VM’s: http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1010521

Below you will find a description I made with a customer a while ago how to get SSO and the Zen Agent to work with VMware View;

On the Access device:

At least XP SP2 because of the mstsc patch:

Mstsc.exe version 6.0.6000.16386

Or XP SP3 with the mstsc 6.0.6001

In the VM:

XP SP2 or SP3

Install Novell Client 4.91 SP5 (custom, no NMAS) and reboot.

Install the Zen Agent and reboot.

Properties Novell Client:

Configure LDAP contextless login.

Make sure to add the tree in the Default Location Profile.

Make sure to disable NMAS authentication (Advanced login tab)

Make sure the Tree and Server are added on the Client tab

Install the VMware View Agent with SSO.

Check Gina chain in the registry for booting the View session;

1.       HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

i.      ”GinaDLL”=C:\\Program Files\\VMware\\VMware View\\Agent\\bin\\wsgina.dll

ii.      ”VdmGinaChainDLL”=NWGINA.DLL

  1. Add the following registry keys to:
    1. HKEY_LOCAL_MACHINE\SOFTWARE\Novell\Login

i.      DefaultLocationProfile=Default (REG_SZ)

ii.      TSClientAutoAdminLogon=1 (REG_SZ)

Fill your Remote desktop Users Group with users. Zen policies and Nal should be working now together with SSO with Novell.