V2: Failed to initialize Credential manager

[zFernand0]

V2: Failed to initialize Credential manager

[JillieBeanSim]

@zFernand0 is there any more info that can be included? version of ZE, version of CICS ext. Is this with all v2 releases or just recently an issue possibly from a change in ZE or the Zowe CLI dependency?

[awharn]

This is a bit weird. It appears that, when a user is using Remote SSH, Zowe Explorer is storing credentials on the VSCode Client machine's keyring, but the Zowe Explorer CICS Extension is storing credentials in the VSCode Server machine's keyring. I am going to look into this a bit more - I do not believe this is the behavior that we expect to encounter.

[awharn]

I took a look at this, and it appears to be an error in trying to access the OS keyring - I was only able to replicate this in a 'headless' Linux environment with a locked keyring.

To get around the actual issue, the user will need to unlock their keyring - either via a script, starting a UI, or enabling PAM login via SSH. There is also the issue with messaging - this may need to be implemented as a change in Imperative, and suggest the user check that they are on a supported system and their OS keyring is unlocked.

[JillieBeanSim]

@awharn maybe we should include a section in our docs for prereq like the CLI team does with the Secure Credential Store section.

[jt-nti]

@awharn @JTonda has this issue been fixed? I was seeing it in a vscode devcontainer with the keyring unlocked and working for other extensions.

[awharn]

@jt-nti It does not appear to be fixed quite yet, though we do have a fix available in the Zowe Explorer API that should resolve this issue. However, we became aware that VSCode is planning to remove support for keytar, the mechanism we use for storing the user's credentials. We are currently discussing how to approach this issue, because we can fix it now, but it will very likely break again in under a month when we are forced to migrate to a different credential storage mechanism.

[jt-nti]

That makes sense, thanks for the update @awharn