Anyware Connector Features
Updating the Connector
When updating Anyware Connector, it restarts to apply the updated configurations and all the active sessions going through the connector are disconnected. This require users to log in again and reconnect. The only configuration update that does not require a Connector restart is running the diagnose command.
| Items | Connector on RHEL/Rocky Linux |
|---|---|
| Operating System | RHEL/Rocky Linux 8.x |
| Packaging | RPM Package |
| Connector Configuration | Configuration files and/or command line flags and parameters. |
| Required Configuration Flags | --token--domain--sa-user--sa-password--accept-policies--self-signed (or --tls-key and --tls-cert must be provided)--ldaps-ca-cert (or --ldaps-insecure or --enable-ldap-plaintext)--external-pcoip-ip 'public.ipv4.sg.ip' |
| MFA Configuration | All connection requests both internal and external will require MFA credentials to be entered. |
| Federated User Authentication/SSO | Not supported in v23.04.0, will be available in the future version. |
| Active Directory LDAPS Certificate | The Active Directory CA certificate must be provided to the installer by entering the information with the --ldaps-ca-cert parameter or by setting it in the configuration file. Skip the certificate validation when connecting to the Active Directory using the following flag --ldaps-insecure. For testing purposes the AD connection can use ldap in the plaintext form with the --enable-ldap-plaintext flag. |
| Diagnose Commands | Diagnose commands has two flags --health to check the overall status of Anyware Connector and --support-bundle to generate support bundle. |
| Key path and Certificate path flag | --tls-key and --tls-cert |
| Installation Commands | Add the repository and install the Connector RPM with the following command: sudo dnf install -y anyware-connector. Configure the Connector with flags or configuration files using the following command: sudo /usr/local/bin/anyware-connector configure {flags or path to config file}. The configure command fails with a missing parameter error if the mandatory flags or parameters are missing,the mandatory flags are --token, --domain, -sa-user, --sa-password, --ldaps-ca-cert (or must provide ldaps-insecure or --enable-ldap-plaintext), --self-signed(or must provide --tls-key and --tls-cert). |
| Update Configuration | Update the configuration using: sudo /usr/local/bin/anyware-connector configure {flags or path to config file} command. |
| Upgrade Commands | sudo dnf update anyware-connector and sudo /usr/local/bin/anyware-connector upgrade |
| Internal/External Session Detection | In most cases the Connector on RHEL/Rocky Linux works without any special configuration, but if you know the Connector on RHEL/Rocky Linux is only for LAN connections, it is recommended to set the --enable-security-gateway flag to false by using --enable-security-gateway=false. |