Environment
Novell ZENworks Configuration Management 11.2 Bundles
Novell ZENworks Configuration Management 11.2 Policies
Novell ZENworks Configuration Management 11.2 Policies
Situation
The statistics in one or both of the following locations are blank:
ZCC > Bundles > [bundle-name] > Summary > Bundle Status
ZCC > Policies > [policy-name] > Summary > Policy Status
Example:

Affected bundles or policies are only assigned to users
User assignments in the bundle or policy Relationships tab show as "[Unknown External Reference]"
User source icon shows as red X on the page ZCC > Configuration
NOTE: This error could be different depending on the issue with the user source
ERROR:
17 Oct 2012 10:45:19 ============== Exception (begin) ===========================
17 Oct 2012 10:45:19 Exception occured
com.novell.zenworks.datamodel.exceptions.UntrustedCertificateException: com.novell.zenworks.datamodel.exceptions.UntrustedCertificateException: javax.naming.CommunicationException: simple bind failed: <ldap-server-ip>:636 [Root exception is javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: timestamp check failed]
ZCC > Bundles > [bundle-name] > Summary > Bundle Status
ZCC > Policies > [policy-name] > Summary > Policy Status
Example:

Affected bundles or policies are only assigned to users
User assignments in the bundle or policy Relationships tab show as "[Unknown External Reference]"
User source icon shows as red X on the page ZCC > Configuration
- This indicates an issue with the Primary server's connection to the user source
NOTE: This error could be different depending on the issue with the user source
ERROR:
17 Oct 2012 10:45:19 ============== Exception (begin) ===========================
17 Oct 2012 10:45:19 Exception occured
com.novell.zenworks.datamodel.exceptions.UntrustedCertificateException: com.novell.zenworks.datamodel.exceptions.UntrustedCertificateException: javax.naming.CommunicationException: simple bind failed: <ldap-server-ip>:636 [Root exception is javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: timestamp check failed]
Resolution
The specific error shown in the zcc.log on the server will give more information on the specific issue with the user source.
NOTE: The error above was caused by an expired LDAP certificate
NOTE: The error above was caused by an expired LDAP certificate
Additional Information
For more information about troubleshooting the user source, refer to Troubleshooting LDAP Connections (7010961).