Environment
Situation
2010-04-07 13:03:03,590 WARN authtoksvc.SessionToken getSecureTokenUtilObj()-
Exception caught, message = Keystore was tampered with, or password was
incorrect
zenserver log (Embedded CASA) shows this:
2010-04-07 13:03:17,770 INFO [ClientAddr=192.168.0.30] Authenticate Rpc,
Status=INTERNAL_ERROR
[DEBUG] [04/07/2010 21:14:04.480] [1520] [ZenworksWindowsService] [25] []
[CommonCasa] [] [ObtainAuthToken took exception: -939589600 System.Exception:
-939589600
at Novell.Casa.Client.Auth.Authtoken.ObtainAuthToken(String sService, String
sHost, WinLuid luid)
at Novell.Zenworks.Zmd.Common.CasaHelper.ObtainAuthToken(String SessionID,
String RealmName, String
Resolution
Manual Workaround Steps:
casa_crypto.properties Path (Windows)
---------------------------------------
External CASA -
%ZENWORKS_HOME\share\ats\catalinabase\webapps\CasaAuthTokenSvc\WEB-INF\classes\casa_crypto.properties
Embedded CASA -
%ZENWORKS_HOME\share\tomcat\webapps\CasaAuthTokenSvc\WEB-INF\classes\casa_crypto.properties
casa_crypto.properties Path (Linux)
-------------------------------------
External CASA -
/srv/www/casaats/webapps/CasaAuthTokenSvc/WEB-INF/classes/casa_crypto.properties
Embedded CASA -
/opt/novell/zenworks/share/tomcat/webapps/CasaAuthTokenSvc/WEB-INF/classes/casa_crypto.properties
Passphrase file Path
------------------------
Windows - %ZENWORKS_HOME\conf\security\passphrase.txt
Linux - /etc/opt/novell/zenworks/security/passphrase.txt
serverConfig file Path
--------------------------
Windows - %ZENWORKS_HOME\conf\security\serverConfig.xml
Linux - /etc/opt/novell/zenworks/security/serverConfig.xml
Open the Passphrase file and note the password in it. It is a single line file with just the password.
Open the serverConfig file and note the Alias (contained within <Alias> ...<\Alias> tags)
Edit the casa_crypto.properties files (both external and embedded) and change the following:
- com.novell.casa.authtoksvc.crypto.keystore.password value to the password noted from passphrase file
- com.novell.casa.authtoksvc.crypto.alias.password value to the password noted from passphrase file
- com.novell.casa.authtoksvc.crypto.keystore.alias value to the alias noted from serverConfig file
Restart all services zenloader , zenserver , casa .