ISL AlwaysOn 1.2 Manual

advertisement
ISL AlwaysOn 1.2 Manual
ISL AlwaysOn 1.2 Manual
Contents
2
Table of Contents
Foreword
0
Part I Introduction
4
...............................................................................................................................................................................
1 Welcome to ISL Alw aysOn 1.2
4
...............................................................................................................................................................................
2 How it w orks
4
...............................................................................................................................................................................
3 Features
5
...............................................................................................................................................................................
4 Reliability
6
...............................................................................................................................................................................
5 Security
7
...............................................................................................................................................................................
6 System Requirements
9
Part II Getting started
10
...............................................................................................................................................................................
1 How to use ISL Alw aysOn
10
...............................................................................................................................................................................
2 Register ISL Online account
10
..............................................................................................................................................................................
ISL Online account registration
10
..............................................................................................................................................................................
Open inbox
14
..............................................................................................................................................................................
Finish registration
15
..............................................................................................................................................................................
Login to ISL Online account
19
...............................................................................................................................................................................
3 Add a new computer
22
..............................................................................................................................................................................
Login
22
..............................................................................................................................................................................
Install ISL AlwaysOn
23
...............................................................................................................................................................................
4 Access a computer
26
..............................................................................................................................................................................
Login
27
..............................................................................................................................................................................
Connect
27
..............................................................................................................................................................................
Control
28
...............................................................................................................................................................................
5 Features overview
29
Part III Manual
30
...............................................................................................................................................................................
1 How ISL Alw aysOn w orks
30
...............................................................................................................................................................................
2 Add a new computer
31
...............................................................................................................................................................................
3 Access a computer
41
...............................................................................................................................................................................
4 ISL Alw aysOn GUI
41
..............................................................................................................................................................................
Connection security
43
..............................................................................................................................................................................
Global security
46
..............................................................................................................................................................................
History
51
...............................................................................................................................................................................
5 ISL Alw aysOn ex ecutables and processes
51
...............................................................................................................................................................................
6 User Management
52
..............................................................................................................................................................................
Grouping
53
...............................................................................................................................................................................
7 Customization
54
..............................................................................................................................................................................
Command line arguments
54
Part IV Server licence
57
© 2014 Xlab d.o.o., Ljubljana
2
ISL AlwaysOn 1.2 Manual
Contents
3
...............................................................................................................................................................................
1 Quick setup
57
...............................................................................................................................................................................
2 Conference Prox y points of interest
58
...............................................................................................................................................................................
3 Add a new computer
59
...............................................................................................................................................................................
4 Access a computer
66
...............................................................................................................................................................................
5 Customization
68
..............................................................................................................................................................................
Command line arguments
69
...............................................................................................................................................................................
6 User management
70
..............................................................................................................................................................................
Grouping
71
...............................................................................................................................................................................
7 Pushing updates
72
...............................................................................................................................................................................
8 Integration
72
..............................................................................................................................................................................
XMLMSG
72
........................................................................................................................................................................
Querying computer list
73
................................................................................................................................................................
Source code
76
Part V Frequently answered questions
Index
78
0
© 2014 Xlab d.o.o., Ljubljana
3
ISL AlwaysOn 1.2 Manual
1
Introduction
4
Introduction
Please continue to Welcome to ISL AlwaysOn 1.2 chapter.
1.1
Welcome to ISL AlwaysOn 1.2
ISL AlwaysOn is a business software for fast and secure access to your PC over the Internet. ISL AlwaysOn
automatically handles all special network configurations, therefore remote access can be easy even if both
computers are behind a firewall and complex networks. Be more flexible and save time. You can work on your
office PC or administer a remote server from home, while on vacation or anywhere else.
1.2
How it works
ISL AlwaysOn allows you to remotely access any Windows computer with an Internet connection.
Implementation is quick and does not require any configuration. Once granted, you can securely access the
computer by means of just one click and a private password. Register and try it for free.
1. Simple setup
2. Instant access
3. Remote work
On any computer:
From any computer:
Anytime, anywhere:
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
Introduction
1. Login with your ISL Online
products username
and
password.
1.3
5
1. Login with your ISL Online
products
username
and
password.
2. Add a new computer to your
list of computers.
Work on the remote computer as if you
were there. View desktop, control
keyboard and mouse, transfer files and
2. Choose a computer from the list more.
and press Connect.
3. Set the access password for
the new computer.
3. Enter the access password for
that computer.
Features
With ISL AlwaysOn's intuitive interface you will be accessing your remote computer within seconds. No
configurations are necessary to access a computer behind a firewall. Register and try it for free.
Automatic Setup
ISL AlwaysOn executable automatically launches,
installs and configures itself. No restart required.
Firewall Friendly
ISL AlwaysOn works with your existing firewall
and does not require a special configuration.
Set-up ready to go with just a few
mouse clicks.
The integrity of your firewall is not
compromised.
Encryption and Maximum Security
All data connections are encrypted with SSL
using symmetric 256-bit keys. The Computer
Access Password additionally protects host
computers from unauthorised access.
Highest security of Internet
connection available in the
remote-access product.
Temporary Lock
Lock your computer to make it
inaccessible anytime you want.
Be 100% in control when you
grant access to your computer to
third parties.
As easy as a mouse click, you can temporarily
lock your computer from being accessed by your
accepted visitors.
Optimal Performance
Our proprietary ISL Online network technology
assures global computer access with nearly
100% service up-time, fault tolerance, and
automatic session re-connection.
The remote access service works
fast, is reliable and 24/7 available.
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
Introduction
View and Control a Computer
View the unattended remote computer’s desktop
and control the keyboard and mouse.
6
Work on the remote computer as
if sitting in front of it.
File Transfer
Quickly transfer files between the local and the
host computer by simply dragging and dropping
them to the ISL AlwaysOn user interface. Files are
transferred to a selected folder.
Instant file exchange via the ISL
AlwaysOn's secure file transfer.
Access History
Have a full overview of who and
when accessed your computer.
Especially when having granted
access to others.
Monitor the ISL AlwaysOn's activities by tracking
the history of accesses to the host computer.
1.4
Reliability
ISL AlwaysOn, as a part of ISL Online network, uses an architecture that is designed for maximum reliability,
security and performance. With ISL AlwaysOn's screen-sharing technology and intuitive interface, accessing
remote computers could not be easier - simply add computers to your list and then access any of them from
anywhere on the internet.
Access any computer anywhere anytime
ISL AlwaysOn sessions are established through a global network of servers called ISL Online network. It
assures 24/7 availability of the service with a strong and reliable desktop connection between any two points in
the world. ISL Online network's architecture is fault tolerant, includes geographical load balancing
mechanisms and distributed session roaming. Not only is the connection relayed through the server with the
lowest traffic load, but also the geographically nearest server to both end points.
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
Introduction
7
Scalable to your needs
You can rely on ISL AlwaysOn to optimize its performance regardless of your Internet connection or the number
of computers being accessed remotely. Whether you are accessing 1 or 1,000 computers, our compression
mechanisms and color depth dynamically adapt to your Internet bandwidth, enabling optimized speed and
quality of the remote screen. We are committed to taking your ISL AlwaysOn sessions to a seamless and
effortless level.
ISL Customer Care
The ISL Online Team is available to assist you with technical issues or other questions over the telephone, via
e-mail and through our live chat (simply go to http://islonline.com/ and click the Chat Live button in the top-right
corner of the page). You are welcome to contact us directly or your nearest Authorized Reseller.
1.5
Security
Introduction
Security should be a crucial part of a remote access product, no matter for what purposes you are using it;
business or personal. ISL AlwaysOn uses maximum security.
ISL AlwaysOn is secured on multiple layers:
1. ISL AlwaysOn computer to ISL Online products user visibility.
2. ISL AlwaysOn computer access password.
3. ISL Light remote desktop session security.
4. MS Windows OS access security scheme.
Each ISL AlwaysOn connection from a computer to an ISL Conference Proxy server is encrypted with SSL.
ISL AlwaysOn's activities can be monitored by tracking the history of accesses to a computer. This report
shows which ISL Online users accessed the computer and when they accessed it.
A user can always lock access to his/her computer. When disabled, that computer becomes inaccessible until
further action.
1st layer - ISL AlwaysOn computer to ISL Online products user visibility
To access a remote computer, you need to establish a link between your ISL Online account and a computer
you want to add access to. Each user has its own digitally signed executable identifying his/her ISL Online user
account. No other ISL Online user will be able to see or try to start a remote connection if the ISL AlwaysOn
computer administrator has not installed a customized ISL AlwaysOn program.
The procedure of adding a new computer is described in the Add a new computer chapter.
2nd layer - ISL AlwaysOn computer access password
Installing ISL AlwaysOn on a computer does not yet enable the access. To enable the access, a strong access
password must first be set. This password is stored in the Local Machine registry as MD5 hash. The plain text
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
Introduction
8
password is not available anymore.
After installing ISL AlwaysOn and setting an access password, remote access for the specific ISL Online user
is finally enabled. Whenever the ISL Online user wants to connect to the remote computer, he/she needs to
enter the ISL AlwaysOn access password for each remote access session he/she starts.
Step
1.
ISL Online products user
send encrypt("connect")
2.
3.
<challenge> = generate challenge
send
"encrypt(authentication_required({chmd5,
<challenge>}))"
request input of password
make
chal-passmd5=md5(challenge,md5(password))
send encrypt("authenticate({chmd5, <chal-passmd5>})")
4.
5.
request = decrypt(received_data)
if request[key] = chmd5 then
load md5-password from registry into memory
if request[1] = md5(challenge, md5-password)
then
set authenticated user = true
send encrypt("get_code")
else
send encrypt("error authentication failed")
end
else
send encrypt("error authentication not
supported")
end
if received = get_code then
start ISL Light Desk, request code
send encrypt("code <ISL Light session code>")
else
goes again to step 3.
end
6.
7.
ISL AlwaysOn computer
received = decrypt(recieved_data)
if received = "code <code>" then
start ISL Light Client with --connect <code>
set authenticated user = false
end
ISL Light Desk is connected into session
ISL Light Client is connected into session
3rd layer - ISL Light remote desktop session security
The remote desktop control session is enabled by ISL Light. ISL Light (version 3.1) enables to create an instant
remote desktop control session, which is secured with SSL (a 1024-bit RSA key for the handshake and a 256bit AES session key). Once a session is established, no one can see this session's encrypted data. And when
an ISL Light session is ended you cannot connect to the same session again. For more information on ISL
Light security, please refer to this link.
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
Introduction
9
4th layer - MS Windows OS security
Once an ISL Online user is connected to a remote computer, he/she can see the Windows console desktop
session running on the computer. It is recommended that the user sets passwords for all Windows
accounts and disables accounts which are not in use. The user should always log off the computer when not
present, so when accessing the computer he/she needs to type in the Windows account password.
1.6
System Requirements
Operating Systems:
Microsoft Windows 7 (32-bit and 64-bit***)
Microsoft Windows Vista (32-bit and 64-bit***)
Microsoft Windows XP (32-bit and 64-bit***)
Microsoft Windows 2000
Microsoft Windows Server 2000
Microsoft Windows Server 2003
Microsoft Windows Server 2008
*** Please note that there is a delay of approx. 30 seconds when you start streaming desktop on 64-bit
Windows systems, i.e. you see the remote screen and it seems frozen for approx. 30 seconds. After that delay,
it functions normally.
Internet Connection:
ISL AlwaysOn uses less than 1 KB/minute when a computer is connected to ISL Online Network servers. When
connected to a remote computer, the required bandwidth minimum is not defined, although we recommend at
least a 50 kbits/s connection for more comfortable work.
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
2
Getting started
10
Getting started
Please continue to How to use ISL AlwaysOn chapter.
2.1
How to use ISL AlwaysOn
ISL AlwaysOn is a part of ISL Online family of products and there are two user models: a hosted service (1-year
subscription or PayPerUse Coupon) and a stand-alone server application (Server License).
Using ISL AlwaysOn as a hosted service, a secure connection is established through the ISL Online network ISL Online's massive network of servers worldwide.
Using ISL AlwaysOn as a server licence, a secure connection is established through your server (or a grid of
your servers) running ISL Conference Proxy.
This chapter describes the basic setup procedure and main features of ISL AlwaysOn. You need to do the
following:
1. Register an ISL Online account
2. Add a new computer
3. Access a computer
When you complete this basic procedure, please continue to the Features overview chapter to learn the ISL
AlwaysOn usage basics.
Please continue to the first step: Register ISL Online account.
2.2
Register ISL Online account
This chapter describes the procedure for registering a new ISL Online account. It involves four steps:
1. ISL Online account registration
2. Open inbox
3. Finish registration
4. Login to ISL Online account
Please continue to the first step: ISL Online account registration.
2.2.1
ISL Online account registration
If you already have an ISL Online account, please continue with the next step and use your existing ISL
Online username and password.
Before you start using ISL AlwaysOn, you will need to create your ISL Online account. You are welcome to
register your ISL Online account now. To create an ISL Online account, you can also navigate to http://
www.islonline.com, then either click the Don't have an account yet? Sign up. link or the big Free Trial button
below.
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
Getting started
11
ISL Online Account Registration page will appear. You should enter a valid e-mail address which will serve as
your future ISL Online Account name:
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
Getting started
12
Please be sure that the e-mail account is accessible as the ISL Online Customer care system will send
important information to that address, including the confirmation link and account credentials. If needed, the
selected e-mail address could later be changed.
Check "send plain text e-mail" option if your e-mail system has rigorous anti-spam program installed.
An e-mail with a verification link and other useful information is sent to the provided e-mail address
immediately after you have pressed the Continue button.
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
Getting started
13
If the selected username already exists, an error message is shown:
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
Getting started
14
Please continue to Open inbox chapter.
2.2.2
Open inbox
You can check your e-mail account's inbox immediately after the verification e-mail has been sent by the
registration procedure. Open the received e-mail and follow the verification link. If it does not work for some
reason, copy the link below that link, paste it into your browser's address line and press enter.
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
Getting started
15
Sometimes some of the links in the e-mail get broken into multiple lines because of the e-mail system. In
that case please compose the link back into a single line before putting it into your browser's address line.
Please continue to Finish registration chapter.
2.2.3
Finish registration
The last form asks for some basic company information. Press Continue to finish the registration completely:
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
Getting started
16
A welcome screen appears with short instructions on how to obtain the account credentials, to manage your
account and start using ISL online products.
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
Getting started
17
There are two basic types of usernames and passwords:
1. ISL Online Account - for managing your account
2. ISL Online Products - for using the services.
Initially the usernames and passwords of both accounts are equal, but this can be changed later.
All credentials have been sent to your e-mail address. Please open your mailbox and check for another e-mail
from ISL Customer Care system with the subject ISL Online - Login Information. It should look like this:
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
Getting started
18
Later on you can use your username and password to log into your ISL Online Account (My Account at
www.islonline.com). Within your ISL Online Account you can manage your license(s), add and edit users, see
reports, activate a key after a purchase and modify your account information.
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
Getting started
19
When an account is registered for the first time, it is automatically activated with a 15-day fully functional no
obligation trial mode, with two active connections. Please select the Activate key link if you have purchased an
ISL Online service item and you wish to activate the activation key for this account.
Please continue to Login to ISL Online account chapter.
2.2.4
Login to ISL Online account
Having finished the registration procedure, your ISL Online account will be activated with a 15-day fully
functional no obligation trial mode and username and password for accessing this account will be sent to your
e-mail address. Enter your username and password and press Login button to enter your ISL Online Account.
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
Getting started
20
Select Forgot your password? option if you do not know your password. It will be sent to your e-mail
address.
When logged in, Hosted service Info page appears. It is in the Trial mode since no ISL Online items have been
activated yet:
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
Getting started
21
Using the My Account menu on the left, you can modify and configure your ISL Online Account:
Hosted Service entry is used to create additional users and view reports for Hosted Service.
Server License entry is used for setting up your own ISL Conference Proxy for running on your company's
server(s).
Activate Key entry is used for the activation of purchased keys (ISL Online items).
Preferences entry is used to set up general preferences for your ISL Online Account.
ISL Online Account is different from ISL Online Products username. While ISL Online account is used
primarily for general account settings, ISL Online Products username is used for features concerning ISL
Online products (session control, adding, editing and removing ISL AlwaysOn computers, Product user
settings etc). The following example illustrates this situation in detail:
Let us say that your company registered a new ISL Online Account for support@mycompany.com. You
received your username (support@mycompany.com) and password to your e-mail address. Initially, this
username/password combination is used for both your ISL Online Account and your ISL Online Products
account. If your company has several supporters and you wish to assign each an username (e.g. in order to be
able to check per-supporter statistics, set concurrent session limit per user), then ISL Online Products
accounts will look like this:
\\mycompany\john
\\mycompany\jane
...
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
Getting started
22
Each will have his/her own password and will use this username/password combination for using ISL Online
Products. ISL Online Account will still be support@mycompany.com.
Please continue to the next step: Add a new computer.
2.3
Add a new computer
This chapter describes the basic instructions on how to add a computer to your list of computers. It involves two
steps:
1. Login
2. Install ISL AlwaysOn
Please continue to the first step: Login.
2.3.1
Login
Please follow these steps:
1. Please go to ISL Online home page.
2. Enter your ISL Online products username and password in the provided space.
3. Click the ISL AlwaysOn icon to login.
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
Getting started
23
Please continue to the next step: Install ISL AlwaysOn.
2.3.2
Install ISL AlwaysOn
Important: In an environment where a Web Proxy is used, ISL Light and ISL AlwaysOn use Internet Explorer
connection settings. Since ISL AlwaysOn as well as ISL Light with restart and resume enabled run under
system account, they use Internet Explorer settings for the system account. It might happen that Internet
Explorer settings have not been set for the system account. Please refer to the following topic in the ISL LIght
manual: Checking system account connection settings
Please follow these steps:
1. Click the marked icon to download ISL AlwaysOn for this computer.
2. A security warning will appear - select Run.
Important: To install ISL AlwaysOn, administrative privileges are required!
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
Getting started
24
3. ISL AlwaysOn setup wizard will appear. Click Next and follow the wizard.
4. ISL AlwaysOn will now prompt you for the password.
As an important part of security, you need to set a strong access password. You will need to provide the
access password each time you try to access the remote computer. The access password can be changed in
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
Getting started
25
the Computer Access Configurations, but everybody having access to this computer has to be informed about
the change. The password is stored locally in the computer registry.
5. Click OK to grant access.
6. After the access is granted, you will see the ISL AlwaysOn Computer Access Configuration screen with
some basic information about accessibility settings.
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
Getting started
26
The same screen can later be reached simply by double-clicking the ISL AlwaysOn icon in the taskbar - the
icon appears after the installation of ISL AlwaysOn:
You have now successfully added a computer to your list. Please continue to the Access a computer chapter to
learn how to access that computer from anywhere.
2.4
Access a computer
This chapter describes the basic instructions on how to access a computer from your list of computers. It
involves three steps:
1. Login
2. Connect
3. Control
Please continue to the first step: Login.
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
2.4.1
Getting started
27
Login
Please follow these steps:
1. Please go to ISL Online home page.
2. Enter your ISL Online products username and password in the provided space.
3. Click the ISL AlwaysOn icon to login.
Please continue to the next step: Connect.
2.4.2
Connect
Please follow these steps:
1. You will be presented with a list of computers. Click Connect next to the computer you wish to connect to.
2. A security warning will appear - select Run.
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
Getting started
28
3. When prompted, enter the remote computer's access password and click OK.
Please continue to the next step: Control.
2.4.3
Control
ISL Light will automatically start on both your (ISL Light Desk) and the remote computer (ISL Light Client),
exchange a session code and connect. ISL View window will appear and you can start working on the remote
computer as if you were there.
Please continue to the Features overview chapter.
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
2.5
Getting started
29
Features overview
ISL AlwaysOn in its current form is a kind of a wrapper around ISL Light - all the computers that you have added
to your list have a service running that allows you to connect to those computers without someone manually
entering a session code. When you are connected through ISL AlwaysOn, the situation is identical to the
situation where you are connected directly using ISL Light, with the addition of automatically enabled
administrative mode and restart and resume support.
Please refer to the ISL Light manual for more information on ISL Light, especially the following chapters:
In session features
ISL Light GUI
Desktop sharing
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
3
Manual
30
Manual
This manual describes ISL AlwaysOn in detail. Everything within this chapter applies to both hosted service
users and server licence users. When there is a difference for server licence users, a special note will be
added and the user will be able to go to the appropriate server licence topic by clicking the link provided.
Example:
Server licence users: The procedure for server licence differs from the procedure for hosted service users
- please go to this topic for more information.
Please click here to go to the topic that describes usage and options of ISL AlwaysOn that are specific for
server licence users.
This manual is divided into the following sections:
How ISL AlwaysOn works
Add a new computer
Access a computer
ISL AlwaysOn GUI
ISL AlwaysOn executables and processes
User Management
Customization
3.1
How ISL AlwaysOn works
ISL AlwaysOn is a business software for fast and secure access to your PC over the Internet. ISL AlwaysOn
automatically handles all special network configurations, therefore remote access can be easy even if both
computers are behind a firewall and complex networks. Be more flexible and save time. You can work on your
office PC or administer a remote server from home, while on vacation or anywhere else.
You have a list of your computers within your ISL Online products username with computer descriptions and
their status. You can access any online computer from the list from anywhere in the world or add new
computers. You assign an access password to each computer and you need to enter it for each access.
ISL AlwaysOn in its current form is a kind of a wrapper around ISL Light - all the computers that you have added
to your list have a service running that allows you to connect to those computers without someone manually
entering a session code. When you are connected through ISL AlwaysOn, the situation is identical to the
situation where you are connected directly using ISL Light, with the addition of automatically enabled
administrative mode and restart and resume support.
ISL Online offers two user models
ISL AlwaysOn is a part of ISL Online and there are two user models available.
Using ISL Online as a Hosted service (ASP Subscription or PayPerUse Coupon), a secure connection is
established through the ISL Grid - ISL Online's massive network of servers worldwide.
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
Manual
31
Server License allows you to set up your own ISL Conference Proxy server (or a grid of servers) and use it as a
connecting point for ISL Online products instead of our ISL Grid. You should be familiar with network and server
administration in order to install and configure it properly. If you wish to use the Server License, please visit our
Knowledge Center to learn how to setup the ISL Online system in your company.
3.2
Add a new computer
Important notice when cloning an installation: If you are using ISL AlwaysOn 1.2.2 or newer, please follow
these instructions, otherwise follow the notice below this one.
ISL AlwaysOn can also be installed in environments where computers are installed as clones from one master
image. First ISL AlwaysOn is installed (with predefined changes) onto the master computer, but final steps are
then performed on cloned computers.
Before cloning the master image to target computers, the master machine must have ISL AlwaysOn already
installed and please make sure that you have granted access to all the desired users (the users that you
intend to allow access to cloned computers). Having done that, please follow these steps:
1. Stop ISL AlwaysOn service on the master machine (go to command prompt and execute n e t
i s l _ a l wa y s _ o n )
s t op
2. Close any ISL AlwaysOn computer configuration dialogs that might be running.
3. Open r e g e d i t and navigate to HKEY_ L OCAL _ MACHI NE\ SOFTWARE\ I SL On l i n e \ I SL Al wa y s On
4. Delete the binary content key called u i d
5. Create a new binary content key called _ g h o s t _ with content 0 1
This concludes the preparation steps - you should now shut down the master computer and clone it. Please
be extra careful not to boot the master computer after the last step or the cloning process will not work properly!
Important notice when cloning an installation and using an older version of ISL AlwaysOn (version lower
than 1.2.2): In case you are cloning an installation, please make sure that the following key is not present in the
registry prior to cloning:
KEY_ L OCAL _ MACHI NE\ So f t wa r e \ I SL On l i n e \ I SL Al wa y s On \ u i d
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
Manual
32
This key represents a unique machine ID and does not get deleted when you uninstall ISL AlwaysOn! If it
remains on the machine and gets cloned, then all machines will have this key with the same ID, effectively
identifying themselves as the same computer.
To avoid this, please follow the correct procedure for situations where cloning is involved:
1. Make sure that the key mentioned above is not present on the machine before cloning. If you have previously
installed ISL AlwaysOn on that machine, it will be there, otherwise not.
2. Clone the computer to n computers.
3. Install ISL AlwaysOn manually on each of the n computers.
4. Each cloned computer will now have a unique machine ID for ISL AlwaysOn and you will see them all in your
list of computers.
Important: In an environment where a Web Proxy is used, ISL Light and ISL AlwaysOn use Internet Explorer
connection settings. Since ISL AlwaysOn as well as ISL Light with restart and resume enabled run under
system account, they use Internet Explorer settings for the system account. It might happen that Internet
Explorer settings have not been set for the system account. Please refer to the following topic in the ISL LIght
manual: Checking system account connection settings
Server licence users: The procedure for server licence differs from the procedure for hosted service users
- please go to this topic for more information.
Apart from the procedure described in the Add a new computer topic (in the Getting started section), there are
also additional options when adding a new computer:
1. Please go to ISL Online home page.
2. Enter your ISL Online products username and password in the provided space.
3. Click the ISL AlwaysOn icon to login.
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
Manual
33
4. Check the Show more possibilities option.
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
Manual
34
5. Installation instructions for the client will appear.
6. You can send these instructions via email by clicking the Send button - if you choose this option, please
proceed to the next step (step 7). The procedure can also be performed manually - if you choose this option,
please skip to step 9.
7. Invitation page will appear. Provide the email address(es), click the Send Invitations button and
automatically generated invitation will be sent out immediately. If you want to modify the content of the
message seen in the Preview, click the Change button, enter your changes and Apply them:
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
Manual
35
8. The recipient will receive an e-mail that looks like the picture below. If the recipient follows the grant link,
please proceed to step 10. If the grant link does not work and the recipient follows the alternate link, please
proceed to the next step (step 9).
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
Manual
36
9. Instruct your client to navigate to http://www.islonline.net/join from the computer to be available to the ISL
AlwaysOn user and then tell him/her to enter the code that was displayed to you in the step 5.
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
Manual
37
10. The client will see the Grant remote access confirmation page. If the client agree to grant access to the
current computer to the user who has issued the user code, he/she should click the Grant Access button.
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
Manual
38
11. A security warning will appear - the client should select Run.
Important: To install ISL AlwaysOn, administrative privileges are required!
12. ISL AlwaysOn setup wizard will appear. The client should click Next and follow the wizard.
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
Manual
39
13. ISL AlwaysOn will now prompt for the password.
As an important part of security, the client will need to set a strong access password. This password is
required for every access to the remote computer. The access password can be changed in the Computer
Access Configurations, but everybody having access to the client's computer has to be informed about the
change. The password is stored locally in the computer registry. Obviously, the client will need to contact you
and tell you the password in order for you to access the client's computer.
14. The client should click OK to grant access.
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
Manual
40
15. After the access is granted, the client will see the ISL AlwaysOn Computer Access Configuration screen
with some basic information about accessibility settings.
The same screen can be reached simply by double-clicking the ISL AlwaysOn icon in the taskbar - the icon
appears after the installation of ISL AlwaysOn:
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
Manual
41
You have now successfully added a computer to your list. Please continue to the Access a computer chapter to
learn how to access that computer from anywhere.
3.3
Access a computer
Server licence users: The procedure for server licence differs from the procedure for hosted service users
- please go to this topic for more information.
Apart from the procedure described in the Access a computer topic (in the Getting started section), where you
chose the Run option in step 5, you can also choose Save and save the executable for later use - e.g. place it
on your desktop and rename it to a more friendly name, e.g. J o h n ' s h o me c o mp u t e r . e x e .
When you wish to access that remote computer, simply double-click the executable on your desktop, enter your
ISL Online products username and password when prompted, then the computer access password and you
will be connected - no need to visit ISL Online web pages each time.
3.4
ISL AlwaysOn GUI
ISL AlwaysOn GUI consists of two separate parts - the first part is the computer access configuration window
that can be reached by double-clicking the ISL AlwaysOn icon in the taskbar - the icon appears after the
installation of ISL AlwaysOn:
The computer access configuration window looks like this:
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
Manual
42
You can use it to perform the following actions:
see the list of users that have access to that computer
see the time of the last access and the IP address of the last access for each user with access to that
computer
change the program language
view and change connection security settings by right-clicking on a user and selecting Change Connection
Settings - refer to the Connection security chapter for detailed instructions
view and change global security settings - refer to the Global security chapter for detailed instructions
browse access history for that computer - refer to the History chapter for detailed instructions
open the online manual
check program information
The following actions (marked with red in the picture above) are available only if the user has administrative
privileges, otherwise they are greyed-out:
enable or disable access to that computer
change the access password for that computer
Important: If you use only the global access password and change it, other users will obviously not be able
to connect until you tell them the new global password. Consider using a password for each user or one-time
global passwords to avoid such situations.
The second part is the ISL Light GUI that is shown when you connect to a remote computer. Please refer to the
ISL Light manual for more information on ISL Light, especially the following chapters:
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
Manual
43
In session features
ISL Light GUI
Desktop sharing
3.4.1
Connection security
When you right-click on the user and choose the Change Connection Settings option, you are presented with a
new window that contains three tabs for changing this connection's security settings.
Passwords
Additional to the global password, you can set a password for this connection - check the This connection
password and click Change Password. When accessing this computer, you will be able to enter either the
global password or this connection's password.
You can also enable a one-time password for accessing this computer for this connection - check the One
time password checkbox, click the Generate Passwords button, then confirm by clicking the OK button. You
will be offered a PDF file (p wd . p d f ) - select a location to save this file. This file contains 50 generated one
time passwords for this computer. When connecting to this computer, you can enter its global password, its
connection password (if set) or the required one time password (e.g. you will be prompted for the one time
password number 13 - look it up in the list and enter it to proceed).
Important: Each password from the list can only be used once. If you use all 50 passwords, you will need
to generate a new list.
Filters
You can enable access filters for this connection by checking the Enable access filters checkbox. This will
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
Manual
44
allow you to set certain limitations, based on the IP and/or MAC address.
Each filter definition consists of pairs of filter name and filter descriptions. Pairs are delimited with a new line or
using the ; character.
Filter syntax:
( a l l o w_ | d e n y _ ) ( a l l | i p | ma c )
<f i l t e r d e s c r i p t i o n 1 > . . . ]
<f i l t e r
des c r i pt i on>
[ ; ( a l l o w_ | d e n y _ ) ( i p | ma c )
First part of the pair begins with a l l o w_ or d e n y _ and is followed by i p or ma c (applying IP or MAC filtering).
The second part (f i l t e r _ d e s c r i p t i o n ) depends on the filtering type - either an IP address/subnet/... or a
MAC address using the a a - b b - c c - d d - e e format.
When accessing a computer, its access rules are read from the top down and stop immediately when a rule is
matched, whether it is allow or deny. If it gets to the bottom of the list, d e n y _ a l l is implicitly used - i.e. if all the
rules fail to match and it gets to the bottom of the list, access is denied. This means that you do not need to
append d e n y _ a l l to your list.
An example:
deny _i p 192. 168. 0. 113
a l l o w_ i p 1 9 2 . 1 6 8 . 0 . 1 1 2 / 2 5 5 . 2 5 5 . 2 5 5 . 0
a l l o w_ ma c 0 0 - 1 9 - d 1 - 0 6 - c 9
This will allow connections from any IP in the 192.168.0.* subnet except 192.168.0.113 and allow connections
coming from the 00-19-d1-06-c9 MAC address with any IP.
Important: IP and MAC addresses can be spoofed, so filters alone are not a substitute for a strong access
password!
Notifications
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
Manual
45
You can enable e-mail notifications by checking the Enable e-mail notifications checkbox and entering e-mail
addresses in the space below (put each e-mail address in its own line). These addresses will receive a
notification when this computer is accessed over ISL AlwaysOn.
Recording
You can enable automatic session recording and specify the desired location for recordings.
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
3.4.2
Manual
46
Global security
When you click on the Security link, you are presented with a new window that contains three tabs for changing
global security settings.
Passwords
Additional to the global password, you can enable a one-time password for accessing this computer - check
the One time password checkbox, click the Generate Passwords button, then confirm by clicking the OK
button. You will be offered a PDF file (p wd . p d f ) - select a location to save this file. This file contains 50
generated one time passwords for this computer. When connecting to this computer, you can enter its global
password or the required one time password (e.g. you will be prompted for the one time password number 13
- look it up in the list and enter it to proceed).
Important: Each password from the list can only be used once. If you use all 50 passwords, you will need
to generate a new list.
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
Manual
47
Filters
You can enable access filters by checking the Enable access filters checkbox. This will allow you to set certain
limitations, based on the IP and/or MAC address.
Each filter definition consists of pairs of filter name and filter descriptions. Pairs are delimited with a new line or
using the ; character.
Filter syntax:
( a l l o w_ | d e n y _ ) ( a l l | i p | ma c )
<f i l t e r d e s c r i p t i o n 1 > . . . ]
<f i l t e r
des c r i pt i on>
[ ; ( a l l o w_ | d e n y _ ) ( i p | ma c )
First part of the pair begins with a l l o w_ or d e n y _ and is followed by i p or ma c (applying IP or MAC filtering).
The second part (f i l t e r _ d e s c r i p t i o n ) depends on the filtering type - either an IP address/subnet/... or a
MAC address using the a a - b b - c c - d d - e e format.
When accessing a computer, its access rules are read from the top down and stop immediately when a rule is
matched, whether it is allow or deny. If it gets to the bottom of the list, d e n y _ a l l is implicitly used - i.e. if all the
rules fail to match and it gets to the bottom of the list, access is denied. This means that you do not need to
append d e n y _ a l l to your list.
An example:
deny _i p 192. 168. 0. 113
a l l o w_ i p 1 9 2 . 1 6 8 . 0 . 1 1 2 / 2 5 5 . 2 5 5 . 2 5 5 . 0
a l l o w_ ma c 0 0 - 1 9 - d 1 - 0 6 - c 9
This will allow connections from any IP in the 192.168.0.* subnet except 192.168.0.113 and allow connections
coming from the 00-19-d1-06-c9 MAC address with any IP.
Important: IP and MAC addresses can be spoofed, so filters alone are not a substitute for a strong access
password!
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
Manual
48
Notifications
You can enable e-mail notifications by checking the Enable e-mail notifications checkbox and entering e-mail
addresses in the space below (put each e-mail address in its own line). These addresses will receive a
notification when this computer is accessed over ISL AlwaysOn.
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
Manual
49
Updates
You can enable or disable automatic software updates initiated from the ISL Conference Proxy server - this
options is useful for corporate environments where administrator wants to update multiple computers at the
same time.
Server licence users: Please refer to this topic for instructions on how to perform push updates.
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
Manual
50
Recording
You can enable automatic session recording and specify the desired location for recordings.
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
3.4.3
Manual
51
History
This window allows you to browse and export the ISL AlwaysOn access history. You can select the desired
user (or select all for all users), time range and enter search parameters. If you click Options and check the
Show all events option, you will be able to expand each access entry to see more information (e.g. light, code,
connect events).
To export search results, click the Export button and save the offered XML file.
3.5
ISL AlwaysOn executables and processes
This topic describes executables and processes that are running/started on a computer that has ISL AlwaysOn
installed as well as on computer that is trying to connect to it via ISL AlwaysOn Connect.
On server side:
I SL Al wa y s On Se r v i c e . e x e (watchdog service process - it ensures that ISLAlwaysOn server process is
always running)
I SL Al wa y s On . e x e (main process that serves ISL AlwaysOn functionality)
I SL Al wa y s On Mo n i t o r . e x e (proxy process is started in each windows session - this program starts ISL
Light program in the appropriate session)
I SL Al wa y s On . e x e (tray process is started in each session - it shows ISL AlwaysOn status icon in system
tray)
When a user connects, I SL Al wa y s On Mo n i t o r . e x e will start I SL L i g h t . e x e that will enable restart and
resume:
I SL L i g h t . e x e (main ISL Light program showing GUI in serving remote desktop session)
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
Manual
52
I SL L i g h t Se r v i c e . e x e (watchdog service process - it ensures that ISLLight process is always running;
proxy process that starts desktop streaming service under appropriate account)
I SL L i g h t Se r v i c e . e x e (desktop streaming service process)
i s l l i g h t . e x e (main ISL Light program showing GUI in serving remote desktop session that was
restarted due to FUS, restart or logoff)
So on the computer there might be running many I SL Al wa y s On Mo n i t o r . e x e processes (one for each
windows session) and there might be running many I SL Al wa y s On . e x e processes showing tray icon status
(one for each windows session).
On client side (accessing remote desktop) there are only two processes:
I SL Al wa y s On Co n n e c t . e x e (process where you enter your ISL Online product password, computer
access password and see the connection progress)
I SL L i g h t . e x e (main ISL Light program that is started by ISL AlwaysOn Connect)
3.6
User Management
Server licence users: The procedure for server licence differs from the procedure for hosted service users
- please go to this topic for more information.
User administration for hosted service users is available within your ISL Online account. Please login to your
ISL Online account (refer to this topic for instructions) and go to Hosted service - users.
There are two modes of user administration available - simple administration (default) and advanced mode.
Simple administration is the default mode and it includes only one user - this user's username is the same as
the ISL Online account e-mail address. The following options are available:
Change password (use it to change the user password - note that this password is independent from your
ISL Online account password)
Forgot password (use it to resend the user's password to the user's e-mail address)
Change contact (use it to change user's name and e-mail address)
Advanced mode allows creation and administration of multiple users within your ISL Online Domain (e.g.
mycompany). To register an ISL Online Domain, please follow the link Register Your ISL Online Domain. You
can add a new user or change settings for the existing user(s). The following options are available:
Change password (use it to change the user password - note that this password is independent from your
ISL Online account password)
Forgot password (use it to resend the user's password to the user's e-mail address)
Change contact (use it to change user's name and e-mail address)
Delete user (use it to delete a user)
Limitations (enable or disable a user, limit the number of concurrent sessions, enable or disable certain
plugins)
Customizations (change customization settings for this user)
If you click on Preferences, you have the following options available:
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
Manual
53
personal info (view your ISL Online account's contact information)
change info (change your ISL Online account's contact information)
change password (change your ISL Online account's password)
change email (change your ISL Online account's e-mail address)
Please note: if the advanced mode is enabled, users must enter their ISL Online Domain in front of their
username, with two leading backslashes. The separator between the ISL Online Domain and a username is a
single backslash. Example: \ \ I SL On l i n e Do ma i n \ u s e r n a me .
Useful hint: It is possible to share a computer from one user's list with another user. Please check the
following topic for instructions: Grouping
Warning: "Back to simple administration" option deletes your ISL Online Domain and all users within this
domain!
3.6.1
Grouping
It is possible to share a computer from one user's list with one or more other users from the same domain.
Please note that it is required to have a registered ISL Online domain within your ISL Online account. If you
have not done it yet, please do so before following the procedure below. Check the user management topic for
instructions.
With a registered ISL Online domain your ISL Online product username will look like this (replace my d o ma i n
with your ISL Online domain and u s e r with the appropriate username):
\ \ my d o ma i n \ u s e r
If you have not done it yet, you should create at least one more user within your ISL Online account, e.g. u s e r 2 .
Now you can login with the user that wishes to share a computer, e.g. \ \ my d o ma i n \ u s e r and click Edit next
to the desired computer from the list. You will see an option called Share this computer with - mark the
checkbox and enter the desired ISL Online product username, e.g. u s e r 2 and click Save changes.
From that moment on, the user \ \ my d o ma i n \ u s e r 2 will see that computer in his/her list (with a comment
about the owner below the computer description), but available options next to that computer will only be
Connect and History (instead of Connect, Edit, Delete, History), since that user is not the owner. When the
user \ \ my d o ma i n \ u s e r 2 clicks History, he/she sees only his access history. When the user \ \ my d o ma i n
\ u s e r (i.e. the main user) clicks History, he/she also sees only his access history. If you open ISL AlwaysOn
GUI at the remote computer and click History, you can see a list of all accesses.
The main user (in this case \ \ my d o ma i n \ u s e r ) can remove the sharing at any moment by clicking Edit next
to that computer and removing the checkbox next to the appropriate user in the Share this computer with
section.
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
3.7
Manual
54
Customization
Server licence users: The procedure for server licence differs from the procedure for hosted service users
- please go to this topic for more information.
The following ISL AlwaysOn customizations are available at the moment:
change the icon for each computer in the list
change the description for each computer in the list
command line arguments (e.g. implementing silent install)
Apart from these ISL AlwaysOn customizations, you can use customizations that are specific to ISL Light.
Please refer to the following chapter in the ISL Light manual for more information: ISL Light customization
Please note that certain options are already used or enabled due to the way ISL AlwaysOn works, e.g. desktop
sharing is automatically started, control is automatically granted, administrative mode and restart and resume
support activated etc.
3.7.1
Command line arguments
ISL AlwaysOn is controlled through command line parameters. When installing ISL AlwaysOn through product
pages, the same parameters are used as a whole command line in the CGI parameter c md l i n e .
Important: These command line arguments are discarded when passed to push upgrade of ISL AlwaysOn
from ISL Conference Proxy, so you cannot use them when doing a push upgrade. They are also not used when
ISL AlwaysOn management dialog or setup is started from a non-admin or non-system account. In order to
allow the ISL AlwaysOn management dialog (and use command line arguments) under system account
please add the command line option i g n o r e _ s y s t e m_ a c c o u n t .
An example of a valid URL that has these command line parameters can be seen on the first ISL AlwaysOn
product page (link download) after the user has entered its username - it looks like this:
http://alwayson.islonline.net/start/ISLAlwaysOn&...&cmdline=grant+...&...
Syntax of parameters
[ / SI L ENT] [ g r a n t | g r a n t _ s i l e n t <g r a n t b l o b >] [ p a s s wo r d <d e f a u l t p a s s wo r d >]
[ d e s c r i p t i o n <c o mp u t e r
d e s c r i p t i o n >]
[ pus h_upgr ade ( t r ue| f al s e) ]
[ r ec or d
<p a t h
to
r e c o r d i n g s >]
[ s h u t d o wn | s h u t d o wn _ s i l e n t ]
[ g r a n t _ p a s s wo r d
<c o n n e c t i o n _ p a s s wo r d >]
- - opt s
" <c g i _ e n c o d e d _ o p t i o n s >" [ i g n o r e _ s y s t e m_ a c c o u n t ] [ s k i p _ c h e c k _ s t a r t ]
Command line option / SI L ENT enables silent setup of ISL AlwaysOn computer. The setup will not be started
when ISL AlwaysOn is already installed on computer.
Adding option p u s h _ u p g r a d e will enable or disable automatic software updates initiated from the ISL
Conference Proxy server - this options is useful for corporate environments where administrator wants to
update multiple computers at the same time.
Option p u s h _ u p g r a d e is available in ISL AlwaysOn version 1.2.2 or newer.
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
Manual
55
Option r e c o r d is used to set the session recordings folder. When an ISL Light session is started and
session recording folder is set, the session will be recorded to the specified folder.
Option r e c o r d is available in ISL AlwaysOn version 1.2.2 or newer.
Link that is used by the default ISL AlwaysOn web page used command line option g r a n t that is followed by
grant blob. If silent install is needed (no user confirmation), g r a n t _ s i l e n t can be used instead.
Option p a s s wo r d will set access password if the password hasn't already been set.
Command line option d e s c r i p t i o n is followed by the description text that will be shown in the ISL AlwaysOn
page. Description text can also specify environment variables that are available to ISL AlwaysOn process and
some additional variables:
d i s k i d (disk serial ID)
ma c (MAC addresses of network cards that are present on system delimited with '_'. Single MAC address
has the following syntax x x : : x x : : . . . , where x x is a hexadecial number in lowercase)
n i f s (all (but localhost) IPs that are present on system, delimited with ',')
c p u i d ... (processor cpuid - normally 0)
n a me (computer name as it would be seen in ISL AlwaysOn web page without "description" command line
option)
Environment and additional variables must be prefixed with $ [ and must end with ] . An example of a valid
description text:
" $ [ n a me ]
-
$[ ni f s ] "
Option s h u t d o wn stops all ISL AlwaysOn services on local computer. If no user confirmation is needed, use
s h u t d o wn _ s i l e n t .
Option g r a n t _ p a s s wo r d defines a new granted connection password. This option is used together with the
option g r a n t _ s i l e n t .
List of possible entries for c g i _ e n c o d e d _ o p t i o n s :
a u t o _ u p d a t e s =1 (this will enable automatic software updates initiated from the ISL Conference Proxy
server)
c o n f _ p r o t e c t =1 (this will protect ISL AlwaysOn computer management dialog with the global password)
Option s k i p _ c h e c k _ s t a r t will always upgrade the ISL AlwaysOn program first and then perform actions
that are specified with parameters.
These are general steps that need to be done:
1. Declare wanted command line arguments.
2. Login to ISL AlwaysOn product page and obtain common URL link for granting access.
3. Add/change URL encoded string of declared command line arguments from the first step (google for online
urlencoding).
4. If needed, replace g r a n t with g r a n t _ s i l e n t .
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
Manual
56
An example of such procedure:
1. We want the following command line:
/ SI L ENT g r a n t _ s i l e n t
$ [ n i f s ] - $ [ ma c ] "
<b l o b > p a s s wo r d " 5 g r 4 t x x "
des c r i pt i on " t es t
$ [ n a me ]
-
2. After login, we have obtained:
https://alwayson.islonline.net/start/ISLAlwaysOn?cmdline=grant+%22.some.grant.blob.%22
3. We added the following URL encoded string to the c md l i n e CGI parameter:
%2 FSI L ENT+p a s s wo r d +%2 2 5 g r 4 t x x %2 2 +d e s c r i p t i o n +%2 2 t e s t +%2 4 %5 Bn a me %5 D+- +%2 4 %
5 Bn i f s %5 D+- +%2 4 %5 Bma c %5 D%2 2
4. We also changed g r a n t to g r a n t _ s i l e n t .
5. Final URL looks like this:
https://alwayson.islonline.net/start/ISLAlwaysOn?cmdline=grant_silent+%22.some.grant.blob.%22+%
2FSILENT+password+%225gr4txx%22+description+%22test+%24%5Bname%5D+-+%24%5Bnifs%5D+-+%
24%5Bmac%5D%22
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
4
Server licence
57
Server licence
This chapter describes usage and options of ISL AlwaysOn that are specific for server licence users. The first
topic (Quick setup) includes some basic instructions to get your own ISL Conference Proxy server up and
running. Please refer to the ISL Conference Proxy Manual for further instructions and advanced features.
Whenever you see a reference to l o c a l h o s t in this manual, it refers to the server that runs ISL
Conference Proxy. Please replace it with the appropriate address for your situation.
This chapter includes the following sections:
Quick setup
Conference Proxy points of interest
Add a new computer
Access a computer
Customization
User management
Pushing updates
Integration
Please continue to the Quick setup chapter.
4.1
Quick setup
In order to install ISL Conference Proxy, you first need to create a new packet. Please follow these steps:
1. Please login to your ISL Online account (refer to this topic for instructions).
2. Go to Server license - info and read the three steps on the right - this is what you need to do now.
3. Click define a new server and enter your server's inner and outer IP address, then click Define server.
4. Having defined a new server, click assign licenses, select your server IP from the list and click Change.
5. Having assigned a licence, go to Server license - packets and click create new packet.
6. Select your server IP from the list next to Server and select ISL Conference Proxy 3.1 next to Release, then
click Next.
7. You can enter a comment if you wish and then press Create packet.
You have now created a new ISL Conference Proxy 3.1 packet - it contains two files: Readme.html and
confproxy-3-1.license. Please download those two files to your computer and open the Readme.html file - it
contains installation instructions. Please follow the appropriate section (depending on your server OS Windows or Linux).
Instructions for first installation are included below for convenience:
Windows
1. Run the latest ISL Conference Proxy installation file and follow the installation wizard.
2. Web administration will appear (also available from Start menu or address http://localhost:7615/conf).
3. Login as user a d mi n , password a s d .
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
Server licence
58
4. Select Basic configuration and enter all necessary fields.
5. Select Licenses and upload license file.
6. Select Online update and download all necessary software components (ISL Light, ...).
Linux
1. Download the latest ISL Conference Proxy installation file.
2. Login as root and install ISL Conference Proxy: s h I SL _ Co n f e r e n c e _ Pr o x y _ 3 _ 2 _ x _ l i n u x . b i n
(where 3.2.x is the version of the downloaded installation file)
3. Open web administration, which is available at address http://localhost:7615/conf.
4. Login as user a d mi n , password a s d .
5. Select Basic configuration and enter all necessary fields.
6. Select Licenses and upload license file.
7. Select Online update and download all necessary software components (ISL Light, ...).
You should now have a running ISL Conference Proxy on your server. In order to use ISL Online products with
your ISL Conference Proxy, you need to create at least one user, since the a d mi n user is only used for
administration purposes. Please follow these steps to add a user:
1. Login to your ISL Conference Proxy administration (http://localhost:7615/conf).
2. Go to User management and click Create user....
3. Enter the details (User name, password, password again, full name, e-mail, nickname) and click Create.
You have now successfully created a new user and you can use that username and password for ISL
AlwaysOn. For more information on user management, refer to the User management chapter.
This concludes the Quick setup chapter.
Please continue to the Add a new computer chapter to learn how to add a new computer to your list.
You may also be interested in some of the main ISL AlwaysOn-related settings in the Conference Proxy
administration - please check the Conference Proxy points of interest chapter for more information.
4.2
Conference Proxy points of interest
For reference purposes, this topic includes some ISL AlwaysOn points of interest in the ISL Conference Proxy
administration. Please refer to ISL Conference Proxy Manual for more information about ISL Conference Proxy
administration.
Activity monitor - Servers
Information about your servers - you can restart, connect a server to grid, disconnect a server from grid.
Activity monitor - Clients
Shows connections to servers and concurrent usage statistics.
Activity monitor - System statistics
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
Server licence
59
Shows system information and current usage statistics - e.g. cpu load, memory usage.
Activity monitor - Sessions - Active - ISL AlwaysOno
Shows a list of active ISL AlwaysOn sessions.
Configuration - General - HTTPT ports
Default values (80, 443, 7615) can be changed - e.g. if port 80 is already taken by the web server,
remove it from the list and ISL Conference Proxy will not try to bind that port. If possible, please have a separate
IP address for ISL Conference Proxy and all three ports available in order to allow most users to connect.
Configuration - General - Default domain for user authentication
Change the default domain from "default" to some other domain, e.g. "mycompany".
Configuration - General - Default program customization
Assign a certain customization as the default value - default is none.
Configuration - ISL AlwaysOn
General ISL AlwaysOn options.
User management
Used for managing domains and users. Please refer to the User management chapter for more
information on user management.
Manage software - Licenses
Displays information about the currently installed license - most important entries are "Concurrent
limit" and "Max release date".
Manage software - Online update
Offers an easy way to update your ISL Conference Proxy server and its components.
Manage software - Install ZIP
Used for manually updating ISL Conference Proxy in case it is not connected to the internet.
4.3
Add a new computer
Standard interface for accessing ISL Online products can be reached through the http://localhost/ address in
your browser (replace l o c a l h o s t in the address with the appropriate server address for your situation):
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
Server licence
60
Click ISL AlwaysOn on the left and login with the desired username and password. Once logged in, you will be
presented with a list of your computers (initially it is empty).
1. There are two ways of adding a new computer. The default way is to click the marked icon to download ISL
AlwaysOn for this computer. The alternative way is to use the invitation code. If you choose the default way,
please click the download icon and skip to step 8. If you choose the alternative way, check the Show more
possibilities option and proceed to the next step (step 2).
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
Server licence
61
2. Installation instructions for the client will appear.
3. You can send these instructions via email by clicking the Send button - if you choose this option, please
proceed to the next step (step 4). The procedure can also be performed manually - if you choose this option,
please skip to step 6.
4. Invitation page will appear. Provide the email address(es), click the Send Invitations button and
automatically generated invitation will be sent out immediately. If you want to modify the content of the
message seen in the Preview, click the Change button, enter your changes and Apply them:
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
Server licence
62
5. The recipient will receive an e-mail that looks like the picture below. If the recipient follows the grant link,
please proceed to step 7. If the grant link does not work and the recipient follows the alternate link, please
proceed to the next step (step 6).
6. Instruct your client to navigate to http://localhost:7615/join (replace localhost with your server's address) from
the computer to be available to the ISL AlwaysOn user and then tell him/her to enter the code that was
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
Server licence
63
displayed to you in the step 2.
7. The client will see the Grant remote access confirmation page. If the client agree to grant access to the
current computer to the user who has issued the user code, he/she should click the Grant Access button.
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
Server licence
64
8. A security warning will appear - select Run.
Important: To install ISL AlwaysOn, administrative privileges are required!
9. ISL AlwaysOn setup wizard will appear. Click Next and follow the wizard.
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
Server licence
65
10.ISL AlwaysOn will now prompt you for the password.
As an important part of security, you need to set a strong access password. You will need to provide the
access password each time you try to access the remote computer. The access password can be changed in
the Computer Access Configurations, but everybody having access to this computer has to be informed about
the change. The password is stored locally in the computer registry.
11.Click OK to grant access.
12.After the access is granted, you will see the ISL AlwaysOn Computer Access Configuration screen with
some basic information about accessibility settings.
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
Server licence
66
The same screen can later be reached simply by double-clicking the ISL AlwaysOn icon in the taskbar - the
icon appears after the installation of ISL AlwaysOn:
You have now successfully added a computer to your list. Please continue to the Access a computer chapter to
learn how to access that computer from anywhere.
4.4
Access a computer
Standard interface for accessing ISL Online products can be reached through the http://localhost/ address in
your browser (replace l o c a l h o s t in the address with the appropriate server address for your situation):
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
Server licence
67
Click ISL AlwaysOn on the left and login with the desired username and password. Once logged in, you will be
presented with a list of your computers.
To access a computer from the list, please follow this procedure:
1. Click Connect next to the computer you wish to connect to.
2. Security warning will appear - select Run.
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
Server licence
68
3. When prompted, enter the remote computer's access password and click OK.
4. ISL Light will automatically start on both your (ISL Light Desk) and the remote computer (ISL Light Client),
exchange a session code and connect. ISL View window will appear and you can start working on the
remote computer as if you were there.
Apart from the above procedure, where you chose the Run option in step 2, you can also choose Save and save
the executable for later use - e.g. place it on your desktop and rename it to a more friendly name, e.g. J o h n ' s
h o me c o mp u t e r . e x e .
When you wish to access that remote computer, simply double-click the executable on your desktop, enter the
appropriate username and password when prompted, then the computer access password and you will be
connected - no need to visit the product pages of your ISL Conference Proxy each time.
4.5
Customization
The following ISL AlwaysOn customizations are available at the moment:
change the icon for each computer in the list
change the description for each computer in the list
command line arguments (e.g. implementing silent install)
To access these settings for a certain computer on the list, please select the Edit action.
Apart from these ISL AlwaysOn customizations, you can use customizations that are specific to ISL Light.
Please refer to the following chapter in the ISL Light manual for more information: ISL Light customization
Please note that certain options are already used or enabled due to the way ISL AlwaysOn works, e.g. desktop
sharing is automatically started, control is automatically granted, administrative mode and restart and resume
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
Server licence
69
support activated etc.
4.5.1
Command line arguments
ISL AlwaysOn is controlled through command line parameters. When installing ISL AlwaysOn through product
pages, the same parameters are used as a whole command line in the CGI parameter c md l i n e .
An example of a valid URL that has these command line parameters can be seen on the first ISL AlwaysOn
product page (link download) after the user has entered its username - it looks like this:
http://localhost:7615/start/ISLAlwaysOn&...&cmdline=grant+...&...
Syntax of parameters
[ / SI L ENT] [ g r a n t | g r a n t _ s i l e n t <g r a n t
[ d e s c r i p t i o n <c o mp u t e r d e s c r i p t i o n >]
b l o b >]
[ p a s s wo r d
<d e f a u l t
p a s s wo r d >]
Command line option / SI L ENT enables silent setup of ISL AlwaysOn computer. The setup will not be started
when ISL AlwaysOn is already installed on computer.
Link that is used by the default ISL AlwaysOn web page used command line option g r a n t that is followed by
grant blob. If silent install is needed (no user confirmation), g r a n t _ s i l e n t can be used instead.
Option p a s s wo r d will set access password if the password hasn't already been set.
Command line option d e s c r i p t i o n is followed by the description text that will be shown in the ISL AlwaysOn
page. Description text can also specify environment variables that are available to ISL AlwaysOn process and
some additional variables:
d i s k i d (disk serial ID)
ma c (MAC addresses of network cards that are present on system delimited with '_'. Single MAC address
has the following syntax x x : : x x : : . . . , where x x is a hexadecial number in lowercase)
n i f s (all (but localhost) IPs that are present on system, delimited with ',')
c p u i d ... (processor cpuid - normally 0)
n a me (computer name as it would be seen in ISL AlwaysOn web page without "description" command line
option)
Environment and additional variables must be prefixed with $ [ and must end with ] . An example of a valid
description text:
" $ [ n a me ]
-
$[ ni f s ] "
These are general steps that need to be done:
1. Declare wanted command line arguments.
2. Login to ISL AlwaysOn product page and obtain common URL link for granting access.
3. Add/change URL encoded string of declared command line arguments from the first step (google for online
urlencoding).
4. If needed, replace g r a n t with g r a n t _ s i l e n t .
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
Server licence
70
An example of such procedure:
1. We want the following command line:
/ SI L ENT g r a n t _ s i l e n t
$ [ n i f s ] - $ [ ma c ] "
<b l o b > p a s s wo r d " 5 g r 4 t x x "
des c r i pt i on " t es t
$ [ n a me ]
-
2. After login, we have obtained:
http://localhost:7615/start/ISLAlwaysOn?cmdline=grant+%22.some.grant.blob.%22
3. We added the following URL encoded string to the c md l i n e CGI parameter:
%2 FSI L ENT+p a s s wo r d +%2 2 5 g r 4 t x x %2 2 +d e s c r i p t i o n +%2 2 t e s t +%2 4 %5 Bn a me %5 D+- +%2 4 %
5 Bn i f s %5 D+- +%2 4 %5 Bma c %5 D%2 2
4. We also changed g r a n t to g r a n t _ s i l e n t .
5. Final URL looks like this:
https://localhost:7615/start/ISLAlwaysOn?cmdline=grant_silent+%22.some.grant.blob.%22+%2FSILENT
+password+%225gr4txx%22+description+%22test+%24%5Bname%5D+-+%24%5Bnifs%5D+-+%24%5Bmac
%5D%22
4.6
User management
This topic will shows you the basics of user management.
To access a list of users or domains on your ISL Conference Proxy, please do the following:
1. Login to your ISL Conference Proxy administration (http://localhost:7615/conf).
2. Go to User management.
3. To manage domains, click the Domains tab. To manage users, click the Users tab.
4. You will be presented with a list of domains or users, depending on your choice. Filtering of the results is
available, including standard wildcards like * and ?.
Creating a domain
1. Click the Domains tab and then click Create domain....
2. Enter the desired domain name and click Create.
3. You will be presented with the General tab for the newly created domain. After making the desired changes,
please click Save. For a detailed description of settings in each tab please refer to the ISL Conference Proxy
manual.
Creating a user
1. Click the Users tab and then click Create user....
2. Enter user information (User name, password, password again, full name, e-mail, nickname) and click
Create. You can change the domain from the default value to some other domain - click (change...) and
select the desired domain.
3. You will be presented with the General tab for the newly created user. After making the desired changes,
please click Save. For a description of settings in each tab please refer to the ISL Conference Proxy manual.
Important: If you assign a blank password to a user, that user will not be able to obtain a session code.
Important: Users from a non-default domain have to enter their usernames in the following format: \
\ d o ma i n \ u s e r n a me
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
Server licence
71
Deleting a domain
1. Click the Domains tab and select the desired domain.
2. Click the checkbox next to the Delete domain button.
3. Click the Delete domain button to delete the domain.
Important: Deleting a domain automatically deletes all users within that domain.
Deleting a user
1. Click the Users tab and select the desired user.
2. Click the checkbox next to the Delete user button.
3. Click the Delete user button to delete the user.
Useful hint: It is possible to share a computer from one user's list with another user. Please check the
following topic for instructions: Grouping
4.6.1
Grouping
It is possible to share a computer from one user's list with one or more other users.
Your ISL Online product username looks like this (replace d o ma i n with the appropriate domain and u s e r
with the appropriate username):
\ \ d o ma i n \ u s e r
If you have not done it yet, you should create at least one more user in the ISL Conference Proxy administration,
e.g. \ \ d o ma i n \ u s e r 2 . Check the user management topic for instructions.
Now you need to enable the grouping feature:
1. Login to your ISL Conference Proxy administration (http://localhost:7615/conf).
2. Go to User management.
3. Click the Domains tab and select the desired domain (in this example, it is d o ma i n ).
4. Click the ISL AlwaysOn tab.
5. Uncheck the Use grouping functionality option and change the setting on the right to Yes.
6. Uncheck the User (as guest) can share connection with owner in the same domain option and change the
setting on the right to Yes.
7. Click Save to save these changes.
Now you can login at http://localhost:7615 (replace l o c a l h o s t with the appropriate server address) with the
user that wishes to share a computer, e.g. \ \ d o ma i n \ u s e r and click Edit next to the desired computer from
the list. You will see an option called Share this computer with - mark the checkbox and enter the desired ISL
Online product username, e.g. u s e r 2 and click Save changes.
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
Server licence
72
From that moment on, the user \ \ d o ma i n \ u s e r 2 will see that computer in his/her list (with a comment
about the owner below the computer description), but available options next to that computer will only be
Connect and History (instead of Connect, Edit, Delete, History), since that user is not the owner. When the
user \ \ d o ma i n \ u s e r 2 clicks History, he/she sees only his access history. When the user \ \ d o ma i n
\ u s e r (i.e. the main user) clicks History, he/she also sees only his access history. If you open ISL AlwaysOn
GUI at the remote computer and click History, you can see a list of all accesses.
The main user (in this case \ \ d o ma i n \ u s e r ) can remove the sharing at any moment by clicking Edit next to
that computer and removing the checkbox next to the appropriate user in the Share this computer with section.
4.7
Pushing updates
ISL AlwaysOn 1.2.2 or newer includes a special option for enabling/disabling push updates - please refer to
the following topic for more information: Global security
To push an update to one or more computers that have push updates enabled, please login to your ISL
Conference Proxy administration (at http://localhost:7615/conf, replace l o c a l h o s t with the appropriate
address), go to Activity Monitor - Sessions - Active, select the ISL AlwaysOn tab. Then select the desired
computers from the list that have push updates enabled (please note the Supports Upgrade column), click the
Push Upgrade radio button, select the desired ISL AlwaysOn version from the list and click Execute.
Please note that the value in the Supports Upgrade column for a specific computer gets updated only when
a computer connects, so if you change the option, it will not be refreshed until the next time this computer
connects. However, the functionality is enabled immediately - you can push an update immediately after
enabling the option on a specific computer.
Useful tip: If you are using (or plan to use) a default customization, you can set the that customization's
option Enable automatic updates to enabled and all ISL AlwaysOn installations will have the push updates
enabled by default, making your administration tasks much easier. Please note that changing the option
manually overrides the customization preference - if at some point you disable this option in the ISL AlwaysOn
GUi, the setting from the customization will not be used any more and you will have to enable it manually.
4.8
Integration
This chapter contains some integration examples for ISL AlwaysOn using ISL Conference Proxy's means of
integration.
For a general description of ISL Conference Proxy's integration capabilities and a description of ISL Conference
Proxy administration settings please refer to the ISL Conference Proxy manual.
Please click the desired topic:
XMLMSG (includes a few ISL AlwaysOn-related XMLMSG examples)
Since ISL Light is a part of ISL AlwaysOn, ISL Light-related integration instructions also apply. Please refer
to the Integration chapter in the ISL Light manual for more information on ISL Light integration.
4.8.1
XMLMSG
XMLMSG is a way to control ISL Conference Proxy database remotely by using XML messages. XMLMSG is
available as a simple web page entry form or direct HTTP POST access for developers. Most XMLMSG
messages will need the database secret. Please set the database secret in ISL Conference Proxy
administration (available at Configuration - General - Database secret).
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
Server licence
73
Web entry form is particularly suitable for testing or quick database updates. It is available at http://
localhost:7615/xmlmsg_form.html (open the link in the web browser on the server). The message will be sent
by pressing the Send button. Server will respond with a message which describes the actions taken.
HTTP POST can be used to send XMLMSG messages automatically from a program. "Content-Type" of the
HTTP POST request must be set to t e x t / x ml .
Whole protocol specification is available at http://localhost:7615/xmlmsg/relaxng.xml.
This chapter includes the following sections:
Querying computer list
4.8.1.1
Querying computer list
Information about ISL AlwaysOn Computers can also be obtained through XMLMSG interface - it offers same
functionality as default web pages served by ISL AlwaysOn module on Conference Proxy.
Querying ISL AlwaysOn computer list is supported on ISL Conference Proxy 3.2.5 or newer with ISL AlwaysOn
module 1.2.1dev1 or newer.
Replace dbsecret in the examples below with the appropriate database secret.
Query user id
<mo d u l e s e c r e t =" d b s e c r e t " n a me =" I SL _ AL WAYSON" >
<u s e r
u s e r n a me =" t e s t e r " p a s s wo r d =" 1 2 3 " / >
</ mo d u l e >
Returned is user information (direct user ID in database and user tags). Returned user ID can be used in
subsequent queries. Error is returned if invalid username and/or password is specified.
Setting valid user tags
<mo d u l e s e c r e t =" d b s e c r e t " n a me =" I SL _ AL WAYSON" >
<u s e r
i d =" s - 1 _ 0 _ 2 " >
<t a g s ><t a g >t e s t </ t a g ><t a g >wo r k </ t a g ></ t a g s >
</ u s e r >
</ mo d u l e >
Query latest used computers (equal to first page)
<mo d u l e s e c r e t =" d b s e c r e t " n a me =" I SL _ AL WAYSON" >
<u s e r
u s e r n a me =" t e s t e r " p a s s wo r d =" 1 2 3 " / >
<l i s t / >
</ mo d u l e >
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
Server licence
74
Query computers through search (equal to search page)
<mo d u l e s e c r e t =" d b s e c r e t " n a me =" I SL _ AL WAYSON" >
<u s e r
i d =" s - 1 _ 0 _ 2 " / >
<l i s t >
<c g i >
<p r o p n a me =" s e a r c h _ f o r m" >t r u e </ p r o p >
<p r o p n a me =" a o n l i s t _ c o u n t " >2 </ p r o p >
<p r o p n a me =" s e a r c h _ d e s c " ></ p r o p >
<p r o p n a me =" s e a r c h _ t a g " ></ p r o p >
</ c g i >
</ l i s t >
</ mo d u l e >
Search parameters can be obtained by studying URL location of default ISL AlwaysOn search page. Pass
relevant search parameters in cgi/prop elements.
Query stored icon for connection
<mo d u l e s e c r e t =" d b s e c r e t " n a me =" I SL _ AL WAYSON" >
<u s e r
i d =" s - 1 _ 0 _ 2 " / >
<i c o n
i d =" 1 c 1 6 f 2 7 0 9 f a d 4 9 7 6 7 5 1 0 3 6 2 e 7 3 4 0 a 4 5 5 5 0 3 8 b 4 a a 0 0 1 2 b 9 7 2 9 f e 5 8 a 0 9 9 7 6 4 4 a 3 4 d 9 a 4 d 0 8
3c ed0595490e19d65d06de59c c 8d9980010d15a6448c 0f f e84e0916340181" / >
</ mo d u l e >
Query ISL AlwaysOn history (equal to history page)
<mo d u l e s e c r e t =" d b s e c r e t " n a me =" I SL _ AL WAYSON" >
<u s e r
u s e r I d =" s - 1 _ 0 _ 2 " / >
<h i s t o r y >
<c g i >
<p r o p n a me =" s e a r c h _ c o mp u t e r " >* MUX</ p r o p >
</ c g i >
</ h i s t o r y >
</ mo d u l e >
To specify range use following fields:
session_after_date_year=2009
session_after_date_month=3
session_after_date_day=22
session_after_time_hour=0
session_after_time_minute=0
session_before_date_year=2009
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
Server licence
75
session_before_date_month=3
session_before_date_day=23
session_before_time_hour=0
session_before_time_minute=0
Search parameters can be obtained by studying URL location of default ISL AlwaysOn history page. Pass
relevant search parameters in cgi/prop elements.
Delete ISL AlwaysOn computer
<mo d u l e s e c r e t =" d b s e c r e t " n a me =" I SL _ AL WAYSON" >
<u s e r
u s e r I d =" s - 1 _ 0 _ 2 " / >
<d e l e t e c o _ i d =" 2 3 4 5 2 3 4 5 2 3 4 5 2 3 4 5 2 3 4 5 2 3 4 5 " >
</ d e l e t e >
</ mo d u l e >
To update ISL AlwaysOn computer options
<mo d u l e s e c r e t =" d b s e c r e t " n a me =" I SL _ AL WAYSON" >
<u s e r
u s e r I d =" s - 1 _ 0 _ 2 " / >
<o p t i o n s c o _ i d =" 2 3 4 5 2 3 4 5 2 3 4 5 2 3 4 5 2 3 4 5 2 3 4 5 " >
<d e s c r i p t i o n >t e s t
c o mp u t e r </ d e s c r i p t i o n >
<t a g s ><t a g >t e s t </ t a g ></ t a g s >
<i c o n >2 9 8 3 5 2 3 4 5 6 2 3 4 5 </ i c o n >
</ o p t i o n s >
</ mo d u l e >
Element i c o n must be base64 encoded content of PNG file that will be displayed in web page.
Show a list of offline ISL AlwaysOn computers
This example includes a perl script that shows a list of offline computers for a specific user - the output looks
like this:
1 . 2 . 3 . 4 Wo r k
5 . 6 . 7 . 8 Ho me
(the first column represents the IP address, the second column represents the computer description)
Prerequisites:
1. Enabled XMLMSG access with database secret set.
2. Perl (on most Linux systems it is already installed; on Windows, you can install ActivePerl: http://
downloads.activestate.com/ActivePerl/Windows/5.10/ActivePerl-5.10.1.1006-MSWin32-x86-291086.msi)
3. Perl packages L WP: : Us e r Ag e n t and XML : : DOM
Having fulfilled those prerequisites, please follow these steps:
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
Server licence
76
1. Download example_aon_offline.zip and extract a o n _ o f f l i n e . p l to the desired location.
To view the source of a o n _ o f f l i n e . p l , click here.
2. Change the parameters in the script with the correct values for your case (i.e. $ d b s e c r e t , $ u s e r , $ p wd ,
$ s e r v e r ).
3. Go to the directory where you extracted aon_offline.pl, open the command prompt (Windows) or terminal
(Linux), then run the script by typing p e r l a o n _ o f f l i n e . p l and it will show a list of offline computers.
..
4.8.1.1.1 Source code
This section includes source code for the following scripts (click the desired script to go to its source):
aon_offline.pl
aon_offline.pl
us e s t r i c t ;
u s e L WP: : Us e r Ag e n t ;
u s e XML : : DOM;
#- - - - - -
p a r a me t e r s - - - - - -
my $ d b s e c r e t
my $ u s e r
= " dbs ec r et " ;
= " us er 1" ;
my $ p wd = " u s e r 1 " ;
my $ s e r v e r
#- - - - - -
= " h t t p : / / 1 2 7 . 0 . 0 . 1 : 7 6 1 5 / x ml ms g " ;
body - - - - - -
my $ f r o m = " 0 " ;
my $ d o m_ p a r s e r
= n e w XML : : DOM: : Pa r s e r ;
my $ u a = L WP: : Us e r Ag e n t - >n e w;
s u b n o d e Va l u e {
my ( $ e l m, $ v a l u e )
= @_ ;
r et ur n
$ e l m- >g e t El e me n t s By Ta g Na me ( $ v a l u e ) - >i t e m( 0 ) - >g e t Fi r s t Ch i l d >g e t No d e Va l u e ( ) ;
}
wh i l e ( 1 )
{
my $ o u t
$out
.=
= ' ' ;
<<EOF
<mo d u l e s e c r e t =" $ d b s e c r e t " n a me =" I SL _ AL WAYSON" >
<u s e r
u s e r n a me =" $ u s e r " p a s s wo r d =" $ p wd " / >
<l i s t >
<c g i >
<p r o p n a me =" s e a r c h _ f o r m" >t r u e </ p r o p >
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
Server licence
77
<p r o p n a me =" a o n l i s t _ c o u n t " >1 0 0 </ p r o p >
<p r o p n a me =" a o n l i s t _ f r o m" >$ f r o m</ p r o p >
<p r o p n a me =" s e a r c h _ d e s c " ></ p r o p >
<p r o p n a me =" s e a r c h _ t a g " ></ p r o p >
</ c g i >
</ l i s t >
</ mo d u l e >
EOF
;
my $ r e q = HTTP: : Re q u e s t - >n e w( POST => $ s e r v e r ) ;
$ r e q - >c o n t e n t _ t y p e ( ' t e x t / x ml ' ) ;
$ r e q - >c o n t e n t ( $ o u t ) ;
my $ r e s = $ u a - >r e q u e s t ( $ r e q ) ;
my $ d o m = $ d o m_ p a r s e r - >p a r s e ( $ r e s - >c o n t e n t ) ;
my @c o mp s =$ d o m- >g e t El e me n t s By Ta g Na me ( ' c o mp u t e r ' ) ;
i f
( s c a l a r ( @c o mp s )
== 0 )
{
ex i t ;
}
$ f r o m += s c a l a r ( @c o mp s ) ;
f o r e a c h my $ c o mp ( @c o mp s )
{
my $ s t a t u s = n o d e Va l u e ( $ c o mp ,
i f
( $s t at us eq ' of f l i ne' )
' s t at us ' ) ;
{
pr i nt
n o d e Va l u e ( $ c o mp ,
' addr es s ' )
.
" ";
pr i nt
n o d e Va l u e ( $ c o mp ,
' des c r i pt i on' )
.
" \ n" ;
}
}
}
© 2014 Xlab d.o.o., Ljubljana
ISL AlwaysOn 1.2 Manual
5
Frequently answered questions
78
Frequently answered questions
Please refer to the Frequently answered questions manual.
© 2014 Xlab d.o.o., Ljubljana
Download