Automatic Workstation Import on Linux is not Working
Не працює імпорт робочих станцій в дерево.

environment:

OES2 on SLES10SP1
oes1:/opt/novell/zenworks/bin # ./novell-zdm-version

ZENworks Desktop Management Components
--------------------------------------
ZENworks Auto Workstation Import/Removal -- 7.0.1-0
ZENworks Desktop Management Agent        -- 7.0.1-0
ZENworks Application Management          -- 7.0.1-0
ZENworks Imaging Service                 -- 7.0.1-0
ZENworks Inventory Database              -- 7.0.1-0
ZENworks Inventory Proxy                 -- 7.0.1-0
ZENworks Inventory Service               -- 7.0.1-0
ZENworks Middle Tier Server              -- 3.1.3-12.sles9
ZENworks Application Management Database -- 7.0.1-0
ZENworks PXE Services                    -- 7.0.1-0
ZENworks Remote Management               -- 7.0.1-0

situation:

Неможливо провести імпорт робочої станції в дерево eDirectory 8.7.3-8.8, no Import Policy Found

Jan 15, 2008 4:42:33 PM javax.naming.CommunicationException: anonymous bind failed: localhost:636 [Root exception is
javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: No trusted certificate found]

resolution

необхідно включити в  LDAP сервері вашого сервера можливість PROXY -користувачу переглядати дерево від кореня, що дасть можливість сервісу zenworks-awsi отримати сертифікати з контейнера Security.

LDAP-Group - server  встановити Proxy Username = anonymous , ну але перед тим створити користувача anonymous з правом перегляду кореня дерева, користувач без паролю. Вимкніть опцію Require TLS for Simple Binds with Password.

document

Рекомендуємо також ознайомитися з :
Document ID:    3743380
Creation Date:    2006-10-06 07:22:34.0
Modified Date:    2006-10-06 07:20:42.0
Novell Product:    ZENworks Desktop Management

 

---

additional notes

forums.novell.com/novell-product-support-forums/zenworks/desktop-management/zw-desktop-management-7x/zdm7-policies-import/226055-wsreg-error-2-when-importing-workstation.html
www.novell.com/support/search.do
forums.novell.com/novell-product-support-forums/edirectory/edir-linux/49520-error-getting-edirectory-certificate.html
www.novell.com/support/search.do

!!!
www.novell.com/support/search.do
!!!

============================================================================
Jan 15, 2008 4:42:32 PM Connection opened: /192.168.20.8:1164
Jan 15, 2008 4:42:32 PM Header = POST /oneNet/wsimport HTTP/1.1
NovINet: v2.0
User-Agent: ZenHttp
Host: zenwsimport:8039
Content-Length: 830
Connection: Keep-Alive

Jan 15, 2008 4:42:32 PM contentLength = 830
Jan 15, 2008 4:42:32 PM bytesRead=830  byteCount=830
Jan 15, 2008 4:42:32 PM Content is UTF-16LE encoded.
Jan 15, 2008 4:42:32 PM request = <?xml version="1.0" encoding="UTF-16LE"?>
<new_ws>
  <computer>WSXXX</computer>
  <cpu>PENTIUM 4</cpu>
  <dns>wsxxx</dns>
  <subnet_mask>255.255.255.0</subnet_mask>
  <ip>192.168.20.8</ip>
  <ipx></ipx>
  <mac>00:0C:29:F9:65:4A</mac>
  <os>WINXP (5.1 Service Pack 2)</os>
  <server>OES1</server>
  <user_dn>Admin.LP</user_dn>
  <login_count>0</login_count>
  <auditing_version>7.0.1.0</auditing_version>
</new_ws>

Jan 15, 2008 4:42:32 PM OS = <linux>
Jan 15, 2008 4:42:32 PM FindImport Policy serverDN = CN=oes1.OU=net.O=LP
============================================================================
Jan 15, 2008 4:42:33 PM javax.naming.CommunicationException: anonymous bind failed: localhost:636 [Root exception is
javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: No trusted certificate found]
============================================================================
Jan 15, 2008 4:42:33 PM No import policy found.
Jan 15, 2008 4:42:33 PM Connection closed: /192.168.20.8:1164

Jan 15, 2008 3:16:23 PM Connection opened: /192.168.20.8:1155
Jan 15, 2008 3:16:23 PM Header = POST /oneNet/wsimport HTTP/1.1
NovINet: v2.0
User-Agent: ZenHttp
Host: zenwsimport:8039
Content-Length: 830
Connection: Keep-Alive

Jan 15, 2008 3:16:23 PM contentLength = 830
Jan 15, 2008 3:16:23 PM bytesRead=830  byteCount=830
Jan 15, 2008 3:16:23 PM Content is UTF-16LE encoded.
Jan 15, 2008 3:16:23 PM request = <?xml version="1.0" encoding="UTF-16LE"?>
<new_ws>
  <computer>WSXXX</computer>
  <cpu>PENTIUM 4</cpu>
  <dns>wsxxx</dns>
  <subnet_mask>255.255.255.0</subnet_mask>
  <ip>192.168.20.8</ip>
  <ipx></ipx>
  <mac>00:0C:29:F9:65:4A</mac>
  <os>WINXP (5.1 Service Pack 2)</os>
  <server>OES1</server>
  <user_dn>Admin.LP</user_dn>
  <login_count>0</login_count>
  <auditing_version>7.0.1.0</auditing_version>
</new_ws>

Jan 15, 2008 3:16:23 PM OS = <linux>
Jan 15, 2008 3:16:23 PM FindImport Policy serverDN = CN=oes1.OU=net.O=LP


Jan 15, 2008 3:16:55 PM javax.naming.CommunicationException: anonymous bind failed: localhost:636 [Root exception is
javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: No trusted certificate found]
Jan 15, 2008 3:16:55 PM No import policy found.
Jan 15, 2008 3:16:55 PM java.net.SocketException: Connection reset
Jan 15, 2008 3:16:55 PM Connection closed: /192.168.20.8:1155