Unable to read contexts. One or more of your connections don't support non-SSL

  • 7016435
  • 17-Apr-2015
  • 17-Apr-2015

Environment

Novell ZENworks Configuration Management 11.2 Authentication
Novell ZENworks Configuration Management 11.3 Authentication
Active Directory

Situation

Active Directory users cannot log into ZENworks Control Center (ZCC) or the ZENworks agent.
When navigating to the User Source in ZCC, the error below appears.

"Unable to read contexts. One or more of your connections don't support non-SSL."


Resolution

In Active Directory check the user ZENworks is using to connect to the user source. Make sure the user's password hasn't expired, the user isn't locked, and the user has proper permissions.

If the user's permissions appear fine, but the error is still seen in ZCC, try replacing the user ZENworks is using to connect to the user source with a different Active Directory administrator to verify permissions.

Cause

Even if the user's password is good, the error can appear in ZCC if the user does not have proper permissions.

Additional Information

The error "One or more of your connections don't support non-SSL" can have multiple causes depending on the stack dump in the log.  In the case covered by this TID the root cause is listed below.

zcc.log shows:

Exception occured
com.novell.zenworks.datamodel.exceptions.AuthoritativeSourceConnectionException
    at com.novell.zenworks.datamodel.services.authsources.AuthoritativeSourceSessionPool.getSession(AuthoritativeSourceSessionPool.java:57)
    at com.novell.zenworks.datamodel.services.authsources.AuthoritativeSourceManager.getSession(AuthoritativeSourceManager.java:218)
    at com.novell.zenworks.datamodel.services.authsources.AuthoritativeSourceManager.newAuthoritativeSourceService(AuthoritativeSourceManager.java:82)
    at com.novell.zenworks.datamodel.services.DirectServiceStoreImpl.newAuthoritativeSourceService(DirectServiceStoreImpl.java:422)
    at com.novell.zenworks.core.web.internal.pages.users.AuthContextsSnapshot.prerender(AuthContextsSnapshot.java:93)
    at com.novell.web.controls.WebControl.preRenderRecursiveInternal(WebControl.java:2634)
    at com.novell.web.controls.WebControl.preRenderRecursiveInternal(WebControl.java:2645)
    at com.novell.web.controls.WebControl.preRenderRecursiveInternal(WebControl.java:2645)
    at com.novell.zenworks.fw.web.internal.layout.SnapshotTemplate.preRenderRecursiveInternal(SnapshotTemplate.java:460)
    at com.novell.web.controls.WebControl.preRenderRecursiveInternal(WebControl.java:2645)
    at com.novell.web.controls.WebControl.preRenderRecursiveInternal(WebControl.java:2645)
    at com.novell.web.controls.WebControl.preRenderRecursiveInternal(WebControl.java:2645)
    at com.novell.web.controls.WebControl.preRenderRecursiveInternal(WebControl.java:2645)
    at com.novell.web.controls.WebControl.preRenderRecursiveInternal(WebControl.java:2645)
    at com.novell.web.controls.WebControl.preRenderRecursiveInternal(WebControl.java:2645)
    at com.novell.web.controls.WebControl.preRenderRecursiveInternal(WebControl.java:2645)
    at com.novell.web.controls.WebControl.preRenderRecursiveInternal(WebControl.java:2645)
    at com.novell.web.controls.WebControl.preRenderRecursiveInternal(WebControl.java:2645)
    at com.novell.web.controls.WebControl.preRenderRecursiveInternal(WebControl.java:2645)
    at com.novell.web.controls.Page.internalProcessRequest(Page.java:738)
    at com.novell.web.controls.Page.processRequest(Page.java:667)
    at com.novell.zenworks.fw.web.internal.layout.Index.processRequest(Index.java:631)
    at com.novell.web.internal.controls.PageTag.doEndTag(PageTag.java:86)
    at org.apache.jsp.jsp.index_jsp._jspService(index_jsp.java:187)
    at org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:70)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
    at org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:377)
    at org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:313)
    at org.apache.jasper.servlet.JspServlet.service(JspServlet.java:260)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
    at org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:646)
    at org.apache.catalina.core.ApplicationDispatcher.processRequest(ApplicationDispatcher.java:436)
    at org.apache.catalina.core.ApplicationDispatcher.doForward(ApplicationDispatcher.java:342)
    at org.apache.catalina.core.ApplicationDispatcher.forward(ApplicationDispatcher.java:302)
    at com.novell.web.NJWCServlet.serviceImpl(NJWCServlet.java:97)
    at com.novell.zenworks.fw.web.internal.ZENworksServlet.service(ZENworksServlet.java:84)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
    at com.patchlink.sapphire.web.pages.vulnerability.session.HibernateSessionFilter.doFilter(HibernateSessionFilter.java:75)
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
    at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
    at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
    at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:563)
    at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
    at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
    at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
    at com.novell.zenworks.tomcat.ZENRequestValve.invoke(ZENRequestValve.java:1293)
    at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:298)
    at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:857)
    at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:588)
    at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:489)
    at java.lang.Thread.run(Thread.java:662)
Exception Info:
Class....... com.novell.zenworks.datamodel.exceptions.AuthoritativeSourceConnectionException
Message..... null
Logged at... AuthContextsSnapsh..109


Exception occured
com.novell.zenworks.datamodel.exceptions.ConnectionException: <LDAP server IP>:636
    at com.novell.zenworks.datamodel.utils.ldap.LDAPUtil.getLDAPConnectionInfo(LDAPUtil.java:810)
    at com.novell.zenworks.datamodel.utils.ldap.LDAPUtil.getLDAPConnectionInfo(LDAPUtil.java:529)
    at com.novell.zenworks.datamodel.utils.ldap.LDAPUtil.getLDAPConnectionInfo(LDAPUtil.java:356)
    at com.novell.zenworks.datamodel.utils.ldap.LDAPUtil.getLDAPConnectionInfo(LDAPUtil.java:329)
    at com.novell.zenworks.datamodel.utils.ldap.LDAPUtil.getLDAPConnectionInfo(LDAPUtil.java:295)
    at com.novell.zenworks.datamodel.utils.ldap.LDAPUtil.getLDAPConnectionInfo(LDAPUtil.java:281)
    at com.novell.zenworks.core.web.internal.UserSourceStatusAJAX.getImageData(UserSourceStatusAJAX.java:77)
    at com.novell.web.ajax.ImageAJAX.service(ImageAJAX.java:38)
    at com.novell.web.ajax.AJAXDataHandler.service(AJAXDataHandler.java:40)
    at com.novell.web.AjaxServlet.serviceImpl(AjaxServlet.java:95)
    at com.novell.web.AjaxServlet.service(AjaxServlet.java:70)
    at com.novell.zenworks.fw.web.internal.ZENworksAjaxServlet.service(ZENworksAjaxServlet.java:47)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
    at com.patchlink.sapphire.web.pages.vulnerability.session.HibernateSessionFilter.doFilter(HibernateSessionFilter.java:75)
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
    at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
    at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
    at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:470)
    at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
    at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
    at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
    at com.novell.zenworks.tomcat.ZENRequestValve.invoke(ZENRequestValve.java:1293)
    at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:298)
    at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:857)
    at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:588)
    at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:489)
    at java.lang.Thread.run(Thread.java:662)
Exception Info:
 Class....... com.novell.zenworks.datamodel.exceptions.ConnectionException
 Message..... 157.145.160.44:636
 Logged at... UserSourceStatusAJA..92


Exception occured
com.novell.zenworks.datamodel.exceptions.InvalidAuthSourceCredentialsException: javax.naming.AuthenticationException: [LDAP: error code 49 - 80090308: LdapErr: DSID-0C0903A8, comment: AcceptSecurityContext error, data 52e, v1db1 ]
    at com.novell.zenworks.datamodel.utils.ldap.LDAPUtil.handleAuthenticationException(LDAPUtil.java:1309)
    at com.novell.zenworks.datamodel.utils.ldap.LDAPUtil.getLDAPConnectionInfo(LDAPUtil.java:764)
    at com.novell.zenworks.datamodel.utils.ldap.LDAPUtil.getLDAPConnectionInfo(LDAPUtil.java:529)
    at com.novell.zenworks.datamodel.utils.ldap.LDAPUtil.getLDAPConnectionInfo(LDAPUtil.java:356)
    at com.novell.zenworks.datamodel.utils.ldap.LDAPUtil.getLDAPConnectionInfo(LDAPUtil.java:329)
    at com.novell.zenworks.datamodel.utils.ldap.LDAPUtil.getLDAPConnectionInfo(LDAPUtil.java:295)
    at com.novell.zenworks.datamodel.utils.ldap.LDAPUtil.getLDAPConnectionInfo(LDAPUtil.java:281)
    at com.novell.zenworks.core.web.internal.UserSourceStatusAJAX.getImageData(UserSourceStatusAJAX.java:77)
    at com.novell.web.ajax.ImageAJAX.service(ImageAJAX.java:38)
    at com.novell.web.ajax.AJAXDataHandler.service(AJAXDataHandler.java:40)
    at com.novell.web.AjaxServlet.serviceImpl(AjaxServlet.java:95)
    at com.novell.web.AjaxServlet.service(AjaxServlet.java:70)
    at com.novell.zenworks.fw.web.internal.ZENworksAjaxServlet.service(ZENworksAjaxServlet.java:47)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
    at com.patchlink.sapphire.web.pages.vulnerability.session.HibernateSessionFilter.doFilter(HibernateSessionFilter.java:75)
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
    at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
    at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
    at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:470)
    at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
    at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
    at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
    at com.novell.zenworks.tomcat.ZENRequestValve.invoke(ZENRequestValve.java:1293)
    at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:298)
    at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:857)
    at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:588)
    at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:489)
    at java.lang.Thread.run(Thread.java:662)
Caused by: javax.naming.AuthenticationException: [LDAP: error code 49 - 80090308: LdapErr: DSID-0C0903A8, comment: AcceptSecurityContext error, data 52e, v1db1 ]
    at com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:3041)
    at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2987)
    at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2789)
    at com.sun.jndi.ldap.LdapCtx.connect(LdapCtx.java:2703)
    at com.sun.jndi.ldap.LdapCtx.<init>(LdapCtx.java:293)
    at com.sun.jndi.ldap.LdapCtxFactory.getUsingURL(LdapCtxFactory.java:175)
    at com.sun.jndi.ldap.LdapCtxFactory.getUsingURLs(LdapCtxFactory.java:193)
    at com.sun.jndi.ldap.LdapCtxFactory.getLdapCtxInstance(LdapCtxFactory.java:136)
    at com.sun.jndi.ldap.LdapCtxFactory.getInitialContext(LdapCtxFactory.java:66)
    at javax.naming.spi.NamingManager.getInitialContext(NamingManager.java:667)
    at javax.naming.InitialContext.getDefaultInitCtx(InitialContext.java:288)
    at javax.naming.InitialContext.init(InitialContext.java:223)
    at javax.naming.ldap.InitialLdapContext.<init>(InitialLdapContext.java:134)
    at com.novell.zenworks.datamodel.utils.ldap.LDAPUtil.getLDAPConnectionInfo(LDAPUtil.java:729)
    ... 29 more
Exception Info:
 Class....... com.novell.zenworks.datamodel.exceptions.InvalidAuthSourceCredentialsException
Message..... javax.naming.AuthenticationException: [LDAP: error code 49 - 80090308: LdapErr: DSID-0C0903A8, comment: AcceptSecurityContext error, data 52e, v1db1 ]