Anonymous_User Absent Member.
Absent Member.
1582 views

Agent 11.2 on VDI - User Authentication

Hello,

I'm going to test ZCM 11.2 in our VMWare-View-environment.
We have XP VMs with Novell-Client, AD-integration and VMWare View agent.
Now I recogniced, that the test-ws doesn't authenticate the logged-in user
to ZCM.
After playing around a while I found in the zen11_system_admin.pdf on page
71 following explanations:

[...]
Seamless Authentication fails on a Windows XP virtual device
Explanation: If you install the ZENworks Adaptive Agent on a Windows XP
virtual device that is provisioned in a VMWare VDI environment and has
Novell Client installed, then seamless login to ZENworks fails on the
device.
Action: Use the ZENworks icon to log in to ZENworks.

Seamless Authentication fails on a Windows 7 virtual device
Explanation: If both ZENworks Adaptive Agent and VMWare View agent are
installed on a Windows 7 virtual device hat is provisioned in a VMWare VDI
environment, then seamless login to ZENworks fails on the device.
Action: Use the ZENworks icon to log in to ZENworks.
[...]

Well, the sounds for me, I cant't use ZCM11 in my environment now (and also
not, if I switch to Win7), because I don't wanna explain my user, that they
have to login a second time.

Or do I missundersand something? Are there any plans to change that?

thx
Philipp
Labels (2)
0 Likes
4 Replies
Anonymous_User Absent Member.
Absent Member.

Re: Agent 11.2 on VDI - User Authentication

Philipp,

It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.

Has your problem been resolved? If not, you might try one of the following options:

- Visit http://support.novell.com and search the knowledgebase and/or check all
the other self support options and support programs available.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://forums.novell.com)

Be sure to read the forum FAQ about what to expect in the way of responses:
http://forums.novell.com/faq.php

If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.

Good luck!

Your Novell Product Support Forums Team
http://forums.novell.com/

0 Likes
Anonymous_User Absent Member.
Absent Member.

Antw: Agent 11.2 on VDI - User Authentication

Hi!

We have the exact same problem.

Currently we just use an ugly workaround. We login to Zenworks with a simple
AutoIt-Tool.
http://www.autoitscript.com/site/autoit/


If a windows with the matching name is found, the Username and Password
fields are set and the Login button is pressed.
....
WinWait ("ZENworks Configuration Management", "", 30)

ControlSetText("ZENworks Configuration Management", "", "Edit1", $Username)
ControlSetText("ZENworks Configuration Management", "", "Edit2", $PW)
ControlClick ("ZENworks Configuration Management", "", "[CLASS:Button;
INSTANCE:1]")
....

You just have to somehow (in our environment this is easy for us) supply the
correct $Username and $PW values. 🙂

The ZCM Login Windows start automatically in a minimized state and our tool
immediately enter the credentials.
So the user experience is ok.

Clumsy solution, but anyone with a better idea?

Georg


0 Likes
bkelsen Absent Member.
Absent Member.

Re: Antw: Agent 11.2 on VDI - User Authentication

In the Novell official documentation the "workaround" to this credential chaining issue is to manually login right clicking the ZCM agent icon !
Not really SSO 🙂
Anyway we discovered by chance that it is the ORDER of installation that is important. If the ZCM agent is not installed before the VMware Agent + Tools + UserExperince/Blast the chaining will most likely fail. The reason being that the VMware agents DO NOT pass on the credentials - We are in luck that the ZCM agent does this 🙂

http://www.novell.com/documentation/zenworks11/zen11_sys_user_sources/data/bryu6pp.html#bvfzu1y
Note This:
Seamless Authentication fails on a Windows 7 virtual device
Explanation: If both ZENworks Adaptive Agent and VMWare View agent are installed on a Windows 7 virtual device hat is provisioned in a VMWare VDI environment, then seamless login to ZENworks fails on the device.
Action: Use the ZENworks icon to log in to ZENworks.

http://blogs.vmware.com/euc/2010/12/troubleshooting-single-sign-on.html
Note this:
Third-party single sign-on products
When installing third-party SSO programs, we recommend that you install the 3rd-party product first then install the View Agent
0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Agent 11.2 on VDI - User Authentication

This has not been required since about 11.2.1 (Maybe 11.2.2)
Novell's Credential Provider is no longer required for ZCM
Authentication to take place automatically and hence all of the old info
below does not apply.


On 9/2/2014 9:46 AM, bkelsen wrote:
>
> In the Novell official documentation the "workaround" to this
> credential chaining issue is to manually login right clicking the ZCM
> agent icon !
> Not really SSO 🙂
> Anyway we discovered by chance that it is the ORDER of installation that
> is important. If the ZCM agent is not installed before the VMware Agent
> + Tools + UserExperince/Blast the chaining will most likely fail. The
> reason being that the VMware agents DO NOT pass on the credentials - We
> are in luck that the ZCM agent does this 🙂
>
> http://www.novell.com/documentation/zenworks11/zen11_sys_user_sources/data/bryu6pp.html#bvfzu1y
> Note This:
> Seamless Authentication fails on a Windows 7 virtual device
> Explanation: If both ZENworks Adaptive Agent and VMWare View agent are
> installed on a Windows 7 virtual device hat is provisioned in a VMWare
> VDI environment, then seamless login to ZENworks fails on the device.
> Action: Use the ZENworks icon to log in to ZENworks.
>
> http://blogs.vmware.com/euc/2010/12/troubleshooting-single-sign-on.html
> Note this:
> Third-party single sign-on products
> When installing third-party SSO programs, we recommend that you install
> the 3rd-party product first then install the View Agent
>
>



--
Going to Brainshare 2014?
http://www.brainshare.com
Use Registration Code "nvlcwilson" for $300 off!


Craig Wilson - MCNE, MCSE, CCNA
Novell Technical Support Engineer

Novell does not officially monitor these forums.

Suggestions/Opinions/Statements made by me are solely my own.
These thoughts may not be shared by either Novell or any rational human.
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.