Can any body guide me how to map drives through JSAM? I mean what would be the format of JSAM resource policy?
Thanks
Solved! Go to Solution.
Create a new under Resource Profile ->SAM -> Client Applications with:
Type: JSAM
Application: NetBIOS File Browsing
Server: Fully-Qualified server hostname
Leave the 'Create an access control policy allowing SAM access to this server' checked and when it is created the Resource Policies ->SAM -> Access Control will show the resource's FQDN name with port 139 allowed.
You might need to also allow ports 137 and 138, the 6.5 Admin Guide has a section 'Defining Resource Profiles: JSAM' which contains the following:
'If you want to enable drive mapping on a Windows client machine, use the
standard NetBIOS file browsing option. When you do, JSAM automatically
modifies the registry to disable port 445 on Windows XP machines, which
forces Windows XP to use port 137, 138, or 139 for drive-mapping. Windows
XP users need to reboot one time to enable the registry change to take effect.
If you want to enable drive mapping on a Windows client machine, use the
standard NetBIOS file browsing option. When you do, JSAM automatically
modifies the registry to disable port 445 on Windows XP machines, which
forces Windows XP to use port 137, 138, or 139 for drive-mapping. Windows
XP users need to reboot one time to enable the registry change to take effect.'
Some caveats listed are:
"You can only use JSAM to configure NetBIOS file browsing once per user role.
The IVE does not support NetBIOS file browsing through SVW, since NetBIOS
requires HKLM registry key changes. For more information, see Enabling the
Secure Virtual WorkspaceÓ on page 331."
Sorry - it is early in California so I may not be understanding your question correctly. SAM is used to to provide application / specific resource access for client applications. It is not used for drive mapping "per se"
Create a new under Resource Profile ->SAM -> Client Applications with:
Type: JSAM
Application: NetBIOS File Browsing
Server: Fully-Qualified server hostname
Leave the 'Create an access control policy allowing SAM access to this server' checked and when it is created the Resource Policies ->SAM -> Access Control will show the resource's FQDN name with port 139 allowed.
You might need to also allow ports 137 and 138, the 6.5 Admin Guide has a section 'Defining Resource Profiles: JSAM' which contains the following:
'If you want to enable drive mapping on a Windows client machine, use the
standard NetBIOS file browsing option. When you do, JSAM automatically
modifies the registry to disable port 445 on Windows XP machines, which
forces Windows XP to use port 137, 138, or 139 for drive-mapping. Windows
XP users need to reboot one time to enable the registry change to take effect.
If you want to enable drive mapping on a Windows client machine, use the
standard NetBIOS file browsing option. When you do, JSAM automatically
modifies the registry to disable port 445 on Windows XP machines, which
forces Windows XP to use port 137, 138, or 139 for drive-mapping. Windows
XP users need to reboot one time to enable the registry change to take effect.'
Some caveats listed are:
"You can only use JSAM to configure NetBIOS file browsing once per user role.
The IVE does not support NetBIOS file browsing through SVW, since NetBIOS
requires HKLM registry key changes. For more information, see Enabling the
Secure Virtual WorkspaceÓ on page 331."
Hi
Thanks for the help. But when i specify the server IP instead of server FQDM, I can not access through IP of server but when I checked on J-SAM on client side It was showing some loopback IP. When I access through loopback its working?
How can I access through IP of server?
Thanks
Hi,
JSAM listens on the client loopback address and encapsulates the traffic to the IVE. To re-direct the client connections through this loopback the client host file is modified, when the client makes DNS requests looking up the FQDN the host file entry returns the loopback address. If the priveleges to modify the hosts file with the automatic host-mapping option are not available for the user then DNS can be used to return the loopback address for the FQDN. You need to access the resource using the FQDN not the server's 'true' IP when using J-SAM.
Hi Matt
Thanks for the great explaination.