Environment
Novell ZENworks Configuration Management 11.3 Authentication
Situation
Device can not connect primary server so ZCM cache user login is enforced.
Device later gets connected to a ZCM primary e.g. by VPN login.
The user sessions get logged-out.
All (cached) user assignments become unavailable until the user manually logs-in back to ZCM.
Device later gets connected to a ZCM primary e.g. by VPN login.
The user sessions get logged-out.
All (cached) user assignments become unavailable until the user manually logs-in back to ZCM.
Resolution
This is fixed in version 11.3.2 - see KB 7015776 "ZENworks Configuration Management 11.3.2 - update information and list of fixes" which can be found at https://support.microfocus.com/kb/doc.php?id=7015776
Workaround:
Enable traditional CASA client authentication with the following registry value:
HKLM\Software\Novell\ZCM\EnableTraditionalCasa (Reg_SZ): True
Cause
The ZCM agent service included CASA client incorrectly stores the user password while doing a cache login so authentication fails when trying an online login to the CASA service with the cached user credentials.
Additional Information
New with ZCM 11.3, the ZCM Agent has been equipped with an embedded CASA client to improve ZCM user login performance. The traditional CASA client is still getting installed. It is possible to switch with the registry value EnableTraditionalCasa between the embedded so called zenCASA and the traditional external miCASA client. By default if this registry is not set, the embedded zenCASA client is active.