Accessing Local System Resources

Because Netscape Navigator(TM) and Internet Explorer do not support the Java(TM) mechanism for applet signing, the Administration GUI cannot get access to your system's local resources. (Browser security mechanisms prevent this type of access to local system resources.)

The operations that require access to your local system resources from the Administration GUI are:

• Loading Certificates from a diskette
• Backing up all Policies
• Restoring all Policies
• Saving Log Files
• Loading Jar Signatures

To work around this limitation you can do one of the following:

• Use the Java plugin.
• Use the Hotjava browser version 1.1.

Using the Java Plugin

If you use a version of Netscape Navigator or Internet Explorer that does not support the Java 1.1 features and API's, dowload the latest Java plugin from the Sun Website or from the SunScreen EFS CDROM.

Installing the latest Java plugin from the Sun Website

1. Download the plugin from the Sun Website
2. On the machine from which you are running the Web browser, execute the shell script. At the shell prompt, type:
   

   # chmod a+x file_name.sh
   

   
   

   # ./file_name.sh
   

3. Save the file identitydb.obj on a diskette for distribution to all Administration Stations.

When the Java plugin is installed, connect to the Administration GUI with the following URL:
http://localhost:3852/plugin.

The documentation for the Java Plugin is on the Sun Website at http://java.sun.com/products/plugin/1.1.2/readme.html

Installing the Java plugin from the CDROM

1. Open a terminal window on the Screen and become root if you are not already root.
2. Put the SunScreen EFS CDROM in the CDROM drive of your machine.
3. At the shell prompt, type
   

   # volcheck
   

   
   

   # cp /cdrom/cdrom0/javaplugins/* /opt/SUNWicg/SunScreen/admin/htdocs/plugin/plugins
   

4. Open a Web browser window on the Administration Station. Download the plugin using one of the following links.
• Java plugin for SPARC system.
• Java plugin for x86 system.
• Java plugin for Windows system.
5. On the machine from which you are running the Web browser, execute the shell script. At the shell prompt, type:
   

   # chmod a+x file_name.sh
   

   
   

   # ./file_name.sh
   

6. Save the file identitydb.obj on a diskette for distribution to all Administration Stations.

When the Java plugin is installed, connect to the Administration GUI with the following URL:
http://localhost:3852/plugin.

The documentation for the Java Plugin is on the Sun Website at http://java.sun.com/products/plugin/1.1.2/readme.html

Saving the file identitydb.obj

After you install the Java plugin, save the file identitydb.obj for distribution to Administration Stations. To save the file identitydb.obj:

1. Go to http://localhost:3852/plugin/plugins.
2. Use the right mouse button to save the link as a file. If your browser does not support saving a file with this method, go to /opt/SUNWicg/SunScreen/admin/htdocs/plugin/plugins to access the file identitydb.obj.
3. Save identitydb.obj on a diskette for distribution to all Administration Stations.

Copy the file identitydb.obj from the diskette to one of the following locations if it does not already exist in one of these locations.

• $HOME on Unix systems
• C:\WINDOWS directory for Windows 95 users
• C:\WINDOWS\PROFILES\username for multiuser Windows 95 & 98 systems
• C:\WINNT\PROFILES\username on Windows NT systems

If the file identitydb.obj already exists in these locations, add SunScreen as one of the accepted signers to the file identitydb.obj (see ss_addsigner man page).

Using the HotJava 1.1 browser

If you use the HotJava 1.1 browser and want to access local system resources, the browser's preferences must allow medium security for unsigned applets. To set this level of security:

1. Go to the browser's Edit menu.
2. Choose Preferences.
3. Choose Applet Security.
4. Choose the Medium Security radio button from the Unsigned Applets column.
5. Choose Apply.