ZCM agent with nwclient ignores DefaultRealm configuration when multiple realms are configured

  • Document ID:7010869
  • Creation Date:03-Oct-2012
  • Modified Date:17-Oct-2014
    • Micro Focus Products:
      ZENworks Configuration Management

Environment

Novell ZENworks Configuration Management 11.2

Situation

NetWare client is installed on a device where the ZENworks agent is set with EnableSeamlessLogin and DefaultRealm.  The DefaultRealm is set to Active Directory usersource.  The zone is configured for both AD and eDirectory user source.
 
Passive mode login using the NetWare client will default to the eDirectory usersource, ignoring the DefaultRealm setting.

Resolution

For ZCM 10.x: A fix for this issue is intended to be included in a future update to ZCM 11.x: however, in the interim, Novell has made a Patch available for testing, in the form of a Field Test File (FTF): it can be obtained at https://download.novell.com/Download?buildid=R3Tl8c-jmWQ~ as "ZCM 10.3.4 - fix for ZCM agent with nwclient ignores DefaultRealm configuration - see TID 7010869". This Patch should only be applied if the symptoms above are being experienced, and are causing problems.

This Patch has had limited testing, and should not be used in a production system without first being checked in a test environment. Some Patches have specific requirements for deployment, it is very important to follow any instructions in the readme at the download site. Please report any problems encountered when using this Patch, by using the feedback link on this TID.

For ZCM 11.x: This is fixed in version 11.2.3a - see KB 7011295 "ZENworks Configuration Management 11.2.3a - update information and list of fixes" which can be found at https://support.microfocus.com/kb/doc.php?id=7011295

Cause

In version 11.2.1 the order for login is this:
  1. If only one user source is configured in the zone, by default agent consumes it and proceeds with Passive Login.
  2. Agent checks for any Cached Realm names  in the registry :
    HKLM\SOFTWARE\NOVELL\ZCM\ZenLgn\History\CachedUserZenNames.
    If it matches with entry of current user, it retrieves the Realm name from registry.
  3. Check if passed Realm name (from either NWClient or MS login) matches the configured Realms, then use it.
  4. Check for Seamless login & Default realm reg keys and proceed with Default realm.

In 11.2.3 and later the order is changed for 3. and 4.