zenCASA authentication fails with multiple configured users sources

  • Document ID:7016028
  • Creation Date:05-Jan-2015
  • Modified Date:05-Jan-2015
    • Micro Focus Products:
      ZENworks Configuration Management
      ZENworks Endpoint Security Management
      ZENworks Full Disk Encryption

Environment

Novell ZENworks Configuration Management 11.3 Authentication

Situation

More than one user source is configured in ZCM.
Devices are configured to try the different user sources on first user login as in Enabling Seamless Authentication on a Device.

Login only works if the user can be authenticated to first tried user source otherwise the ZCM agent user login prompt gets displayed and the matching user source name needs to be selected.

Resolution

Workaround:
  1. If the users authentication to a specific device usually login to the same user source configure this as the default one as in Reducing Device Login Time by Specifying the Default User Source.
  2. Configure the ZCM agent to authenticate with the traditional miCASA client instead of the internal zenCASA agent module: HKLM\Software\Novell\ZCM\EnableTraditionalCasa(String):True

Cause

The zenCASA authentication client removes the user credentials from its cache after first login failure.

Status

Reported to Engineering

Additional Information

With ZCM 11.3 the ZCM agent has been enhanced with the so called zenCASA client authentication module to improve ZCM login experience. For fallback and compatibility reason the miCASA client is still getting installed but is not used with default configuration.