ZENworks agent can't login due to ZENIsServerAvailable failure

  • 7001731
  • 24-Oct-2008
  • 27-Apr-2012

Environment

Novell ZENworks 10 Configuration Management with Support Pack 1 - 10.1 Authentication

Situation

ZENworks agent login fails.
 
ERROR (from zenlgn.log):  "Could not find any available servers"
 
ERROR (from zmd-messages.log):
 
[DEBUG] [10/23/2008 10:31:46.129] [1656] [ZenworksWindowsService] [29] [] [RemotingService] [] [ZENIsServerAvailable entered] [] []
 [DEBUG] [10/23/2008 10:31:46.129] [1656] [ZenworksWindowsService] [29] [] [RemotingService] [] [Unfiltered zone config list is:] [] []
 [DEBUG] [10/23/2008 10:31:46.129] [1656] [ZenworksWindowsService] [29] [] [RemotingService] [] [ 
https://zenserver.novell.com:443/] [] []
 [DEBUG] [10/23/2008 10:31:46.129] [1656] [ZenworksWindowsService] [29] [] [RemotingService] [] [ 
https://192.168.0.8:443/] [] []
 [DEBUG] [10/23/2008 10:31:46.129] [1656] [ZenworksWindowsService] [29] [] [RemotingService] [] [Filtered zone config list is:] [] []
 [DEBUG] [10/23/2008 10:31:46.129] [1656] [ZenworksWindowsService] [29] [] [RemotingService] [] [No hosts returned from ZoneConfigManager] [] []

Resolution

In the logs the unfiltered server list shows the ZENworks server.  But the filtered list is empty.  The filtering is based on the server certificate.  Specifically, the subject name of the server certificate should match the DNS name used to contact the server. 
 
Be certain that the server certificate subject matches the DNS name used to resolve the server. 
 
A workaround for the mismatched certificate issue is to use the option on the server object's Properties / Settings / Infrastructure Management  / Additional DNS Names to allow clients to use the incorrect subject name.
 
 

Additional Information

The server certificate and CA can be found on the server in the conf/security folder.  Or view the certificates in a browser certificate viewer when browsing to the https://zenserverIPAddress/.
 
Alternatively, a log may show this:
 
[DEBUG] [10/23/2008 10:31:46.129] [1656] [ZenworksWindowsService] [29] [] [RemotingService] [] [ZENIsServerAvailable entered] [] []
 [DEBUG] [10/23/2008 10:31:46.129] [1656] [ZenworksWindowsService] [29] [] [RemotingService] [] [Unfiltered zone config list is:] [] [] 
 [DEBUG] [10/23/2008 10:31:46.129] [1656] [ZenworksWindowsService] [29] [] [RemotingService] [] [ https://192.168.0.8:443/] [] []
 [DEBUG] [10/23/2008 10:31:46.129] [1656] [ZenworksWindowsService] [29] [] [RemotingService] [] [Filtered zone config list is:] [] []
 [DEBUG] [10/23/2008 10:31:46.129] [1656] [ZenworksWindowsService] [29] [] [RemotingService] [] [No hosts returned from ZoneConfigManager] [] []
 
Note in this case the server name won't match the certificate subject as no DNS name is returned in the unfiltered zone config list.  This indicates a problem with DNS on original install that was ignored.  Use the same workaround to correct.


For other TIDs relating to login issues, see TID 3273870 - Troubleshooting ZCM login problems