Environment
Novell ZENworks Configuration Management 11.2
Situation
Users fail to login to ZENworks agent after rights unset on Windows primary server. In this particular case, the workaround in https://support.microfocus.com/kb/doc.php?id=7003486 step 1 of "Specific troubleshooting for Windows ZCM servers:" section does fix but the root cause is different.
From micasad.log:
[MICASA] [DEBUG ] [30/12/2011 03:11:01.387] [6 ] [Writing Secret:Key
[SS_CredSet:BLR-SRM-R7S-TREE
[MICASA] [DEBUG ] [30/12/2011 03:11:01.387] [6 ] [ High: 0]
[MICASA] [DEBUG ] [30/12/2011 03:11:01.387] [6 ] [ LOW: 102046052]
[MICASA] [DEBUG ] [30/12/2011 03:11:01.387] [6 ] [ SID:
S-1-5-21-63028823-155944362-1621118436-1003]
[MICASA] [DEBUG ] [30/12/2011 03:11:19.064] [7 ] [Reading Secret ID:
SS_CredSet:BLR-SRM-R7S-TREE
[MICASA] [DEBUG ] [30/12/2011 03:11:19.064] [7 ] [ High: 0]
[MICASA] [DEBUG ] [30/12/2011 03:11:19.064] [7 ] [ LOW: 47831857]
[MICASA] [DEBUG ] [30/12/2011 03:11:19.064] [7 ] [ SID:
S-1-5-21-63028823-155944362-1621118436-1003]
[MICASA] [DEBUG ] [30/12/2011 03:11:19.064] [7 ] [Secret does not exist:
[SS_CredSet:BLR-SRM-R7S-TREE
[MICASA] [DEBUG ] [30/12/2011 03:11:01.387] [6 ] [ High: 0]
[MICASA] [DEBUG ] [30/12/2011 03:11:01.387] [6 ] [ LOW: 102046052]
[MICASA] [DEBUG ] [30/12/2011 03:11:01.387] [6 ] [ SID:
S-1-5-21-63028823-155944362-1621118436-1003]
[MICASA] [DEBUG ] [30/12/2011 03:11:19.064] [7 ] [Reading Secret ID:
SS_CredSet:BLR-SRM-R7S-TREE
[MICASA] [DEBUG ] [30/12/2011 03:11:19.064] [7 ] [ High: 0]
[MICASA] [DEBUG ] [30/12/2011 03:11:19.064] [7 ] [ LOW: 47831857]
[MICASA] [DEBUG ] [30/12/2011 03:11:19.064] [7 ] [ SID:
S-1-5-21-63028823-155944362-1621118436-1003]
[MICASA] [DEBUG ] [30/12/2011 03:11:19.064] [7 ] [Secret does not exist:
Note that the read secret uses a differnt luid than the write secret.
Resolution
This is fixed in version 11.2.1 - see KB 7010042 "ZENworks Configuration Management 11.2.1 - update information and list of fixes" which can be found at https://support.microfocus.com/kb/doc.php?id=7010042