Error promoting Authentication Satellite

  • 7013406
  • 03-Oct-2013
  • 15-Jul-2021

Environment

Novell ZENworks Configuration Management 11.2

Situation

Error promoting satellite.

These logs are for prior to 2020 version.  For more information about 2020 and later see additional information.

ERROR (on satellite zmd-messages.log):

[DEBUG] [09/29/2013 10:53:50.898] [304] [ZenworksWindowsService] [53] [] [AuthSatelliteModule] [] [Unable to start Authentication Satellite Server Type: Novell.Zenworks.AuthSatellite.AuthServerConfigureException Message: Unable to sign CSR because no authentication token was provided by the server. Try reconfiguring the server using the zac command.

Note the following in primary: CertToken=null

[Returning response: com.novell.zenworks.webservice.zoneconfig.schema.GetSatelliteServerConfigExResponse={com.novell.zenworks.webservice.zoneconfig.schema.SatelliteServerConfigResponseExType={_DeviceUID=d37d1d109af7fa4091facf4a65873e47,_WebServerConfig=com.novell.zenworks.webservice.zoneconfig.schema.WebServerConfig={_Port=80,_MaxThreads=null,_SSLPort=443,_CertToken=null,_WebServerConfigAny=null},_ContentReplicationConfig=com.novell.zenworks.webservice.zoneconfig.schema.ContentReplicationConfigEx={_Enabled=true,_Port=null,_ParentURL=[[Ljava.lang.String;@2c6f0fd3,_ContentTypeReplication=[[Lcom.novell.zenworks.webservice.zoneconfig.schema.ContentTypeReplication;@2f77fc6f,_ContentReplicationConfigAny=com.novell.zenworks.webservice.zoneconfig.schema.ContentReplicationConfigAny={_ExtendedSettings=com.novell.zenworks.webservice.zoneconfig.schema.ExtendedSettings={_ServersToUse=Parent,_any0=null},_any0=null}},_CurrentRoles=[[Lcom.novell.zenworks.webservice.zoneconfig.schema.SatelliteServerConfig;@6e5df3c1,_GetSatelliteServerConfigExAny=com.novell.zenworks.webservice.zoneconfig.schema.GetSatelliteServerConfigExAny={_GetSatelliteServerConfigExAnyExtended=com.novell.zenworks.webservice.zoneconfig.schema.GetSatelliteServerConfigExAnyExtended={_OutputThrottleRate=0,_any0=null},_any0=null}}] [] []


Resolution

Confirm that all primaries and satellite server are in time sync.
 
Workaround:  Prior to version 2020.  After confirming above, run zac asr -t jetty

Status

Reported to Engineering

Additional Information

Note: In later versions of the product, this error may be seen on agent:

Received exception from Jetty provider: Unable to sign CSR because no authentication token was provided by the server.  Try reconfiguring the server using the zac command.

but the server error is different:

[ZoneConfig] [] [Certificates are not null for this device and hence not issuing token] [] [] [] [ZENServer]

In this case it can be because the satellite already has a certificate due to ssl for collection or content role is enabled.  If so use the zac ssr command to fix or remove all ssl configuration for collection/content, then demote and promote the authentication role again.