ZENworks Authentication Fails

  • 7016073
  • 19-Jan-2015
  • 19-Jan-2015

Environment

Novell ZENworks Configuration Management 11.2 Authentication

Situation

Authentication failing when trying to log into the zenworks agent.

zmd-messages.log:

ObtainAuthToken took exception: -939589594 System.Exception: -939589594
   at Novell.Casa.Client.Auth.Authtoken.ObtainAuthToken(String sService, String sHost, WinLuid luid, String()& extraData, IntPtr micasaContext)
   at Novell.Zenworks.Zmd.Common.CasaHelper.ObtainAuthToken(String SessionID, String RealmName, String Host, String& AuthToken, String()& ExtraAttribs, IntPtr MicasaContext)

Exception :An invalid IP address was specified.
ReplaceAspStyleTags received error from hander when looking up value for key Server_DNS: The requested name is valid, but no data of the requested type was found
   at System.Net.Dns.GetAddrInfo(String name)
   at System.Net.Dns.InternalGetHostByName(String hostName, Boolean includeIPv6)
   at System.Net.Dns.GetHostAddresses(String hostNameOrAddress)
   at Novell.Zenworks.NotifyIcon.Plugins.PropPages.StatusPage.ResolveVar(Session session, String token, Object data)
   at Novell.Zenworks.Zmd.HttpUtil.ReplaceAspStyleTags(Session session, String line, IDictionary`2 kvp, ReplaceAspStyleTagHandler handler, Object data)


ats.log:

WARN authtoksvc.PwdAuthenticate invoke()- NamingException: [LDAP: error code 49 - 80090308: LdapErr: DSID-0C090334, comment: AcceptSecurityContext error, data 52e, vece

Resolution

The LDAP server assigned directly to the ZENworks primary server in the user source is bad. Change the LDAP server order so the primary server connects to a different LDAP server first.

The data error 52e from the ats.log indicates the sub error.  For more information about Active Directory sub errors see https://www.novell.com/coolsolutions/tip/18470.html