
When using RHEL/CentOS 7.x and Ubuntu distributions, SSO fails to unlock a locked KDE session. You must install KDE and MATE using the commands listed in Commands to Install Desktop Environments. Single sign-on (SSO) for KDE and the MATE Desktop Environment only works when your Linux desktop is using the GDM3 greeter (login screen). Note: Gnome Display Manager (GDM) is the only display manager supported on Linux desktops. Linux OS built-in or AD user or LDAP user Java Standalone Agent, mksvchanserver, shell scripts

Account Name and Account Type Account Name The following table lists the account name and account type used by Linux virtual machines. Verify the Linux Account Used by Linux Virtual Machines When the BSG is not enabled, connections are made directly from the Horizon Client device to the Linux desktop.

When the BSG is enabled, client connections are directed from a Horizon Client device through the BSG on the Horizon Connection Server to the Linux desktop. Make sure that iptables on an RHEL or CentOS guest operating system has an input policy of ACCEPT for new connections from the Blast port, 22443. On RHEL and CentOS distributions, where possible, the Horizon Agent installer script configures the iptables firewall with an input policy of ACCEPT.

On Ubuntu distributions, the iptables firewall is configured by default with an input policy of ACCEPT. To allow users to connect to their Linux desktops, the desktops must be able to accept incoming TCP connections from Horizon Client devices, Unified Access Gateway, and Horizon Connection Server. Note: For more information on TCP and UDP ports used by clients, see the
