RAS PARALLELS CLIENT INSTALL
RAS PARALLELS CLIENT MANUAL
RAS PARALLELS CLIENT PASSWORD

RAS PARALLELS CLIENT MANUAL

For some workloads, additional manual steps may be required such as assigning a certificate or applying port following, these steps are covered in the document, if needed. You can use the template to easily create the required VSs with the recommended settings.

RAS PARALLELS CLIENT INSTALL

You can install this template to help create Virtual Services (VSs) because it automatically populates the settings. Kemp has developed a template containing our recommended settings for this workload. However, the content is in sync with the latest LoadMaster LTS firmware. This document has not required substantial changes since 7.2.48.4 LTS. Published with LMOS version 7.2.48.4 LTS. Intended AudienceĪnyone who is interested in configuring the LoadMaster to optimize Parallels RAS.

This document provides the recommended LoadMaster settings used when load balancing Parallels RAS. The Kemp Support Team is available to provide solutions for scenarios not explicitly defined in this guide. Easy to deploy, configure, and maintain, Parallels RAS provides organizations of any size with a seamless application delivery and VDI experience - while reducing Total Cost of Ownership (TCO) and improving security. Set this value either to ad_client to use Active Directory for primary authentication OR to duo_only_client to utilize Authentication Proxy for secondary authentication only.Parallels RAS (Remote Application Server) is a cost-effective application delivery and Virtual Desktop Infrastructure (VDI) solution that allows your employees and customers to access and use applications, desktops, and data from any device. This should correspond with a 'client' section elsewhere in the config file. When set to 'secure,' all users' authentication attempts will be rejected.Ĭlient - The mechanism that the Authentication Proxy should use to perform primary authentication. When set to 'safe,' authentication attempts will be permitted if primary authentication succeeds. If you have only one PA, don't add this line įailmode - Either 'safe' or 'secure' defines the behavior of the system when Duo's service cannot be contacted. Radius_secret_2 - The same secret key as for radius_secret_1.

If you have only one PA, don't add this line Radius_ip_2 - IP address of your secondary Publishing Agent if you have any. Radius_secret_1 - The secret key that you will specify in step 6 Radius_ip_1 - IP address of your RAS Publishing Agent. The user's passcode or factor choice, encrypted using the PAP mechanism, is submitted for the RADIUS password.Īpi_host - Your Duo API hostname (e.g., “”) to use a RADIUS integration that does not handle primary authentication credentials. This section has no additional properties to configure.

to use Authentication Proxy for secondary authentication and let the Publishing Agent handle primary authentication independently. Others users will not pass primary authentication. Security_group_dn - To further restrict access, specify the LDAP distinguished name (DN) of a security group that contains the users who should be able to log in. Search_dn - The LDAP distinguished name (DN) of an Active Directory container or organizational unit (OU) containing all of the users you wish to permit to log in

RAS PARALLELS CLIENT PASSWORD

Service_account_password - The password corresponding to service_account_username Service_account_username - The username of an account that has permission to read from your Active Directory database This section accepts the following options: is to use an Active Directory domain controller to perform primary authentication. Note: Please refer to the Authentication Proxy guide for additional information.

Ras parallels client