NOVELL FORUMS

jrassette · #1 08-Aug-2008, 09:15 AM

Hi,
I have recently done a fresh install of my ZPM server (SQL 2005 express) and it is patched up to 6.4.2.1378.
I have a 125 count license with 19 available.
60 of my devices (all win xp sp2) complete the DAU with the 0x0000190c error. These 60 machines also do not have any results for found vulnerabilites. The 60 machines display on the "devices" tab but are not included in the vulnerabilities tab totals.

The default logs last couple of lines show:
08/08/08:09:30:07: INFO Job (Desc:PLUS - Package Replication, Guid:15) already running!
08/08/08:09:30:17: INFO Getting Job Data AppName= Domain= JobName=
08/08/08:09:30:17: INFO Job (Desc:PLUS - Package Replication, Guid:15) already running!
08/08/08:09:30:27: INFO Getting Job Data AppName= Domain= JobName=
08/08/08:09:30:27: INFO Job (Desc:PLUS - Package Replication, Guid:15) already running!
08/08/08:09:30:27: INFO Starting Job:PLUS: Validate Agent Policies Task:SQL Query
08/08/08:09:30:27: INFO Executing stored procedure "spSys_ValidateAgentPolicies"
08/08/08:09:30:27: INFO Exiting (success) Job:PLUS: Validate Agent Policies Task:SQL Query
08/08/08:09:30:27: INFO Setting Job 14 state to Scheduled
08/08/08:09:30:37: INFO Getting Job Data AppName= Domain= JobName=
08/08/08:09:30:37: INFO Job (Desc:PLUS - Package Replication, Guid:15) already running!
08/08/08:09:30:47: INFO Getting Job Data AppName= Domain= JobName=
08/08/08:09:30:47: INFO Job (Desc:PLUS - Package Replication, Guid:15) already running!
08/08/08:09:30:57: INFO Getting Job Data AppName= Domain= JobName=
08/08/08:09:30:57: INFO Job (Desc:PLUS - Package Replication, Guid:15) already running!
08/08/08:09:30:57: INFO Starting Job:PLUS: Send E-Mail Task:PLUS: Shell Send SMTP Mail
08/08/08:09:30:57: INFO System Configuration value for "SmartHost" returned mail.michedcu.org
08/08/08:09:30:57: INFO Getting the Email List.
08/08/08:09:30:57: INFO Exiting (success) Job:PLUS: Send E-Mail Task:PLUS: Shell Send SMTP Mail
08/08/08:09:30:57: INFO Setting Job 13 state to Scheduled
08/08/08:09:30:57: INFO Starting Job:Generate OSPacks Task Task:Generate OSPacks Task
08/08/08:09:30:57: INFO Getting OS Pack Data.
08/08/08:09:30:57: INFO Exiting (success) Job:Generate OSPacks Task Task:Generate OSPacks Task
08/08/08:09:30:57: INFO Setting Job 18 state to Scheduled
08/08/08:09:31:07: INFO Getting Job Data AppName= Domain= JobName=
08/08/08:09:31:17: INFO Getting Job Data AppName= Domain= JobName=
08/08/08:09:31:27: INFO Getting Job Data AppName= Domain= JobName=
08/08/08:09:31:37: INFO Getting Job Data AppName= Domain= JobName=
08/08/08:09:31:47: INFO Getting Job Data AppName= Domain= JobName=
08/08/08:09:31:57: INFO Getting Job Data AppName= Domain= JobName=
08/08/08:09:32:07: INFO Getting Job Data AppName= Domain= JobName=
08/08/08:09:32:17: INFO Getting Job Data AppName= Domain= JobName=
08/08/08:09:32:27: INFO Getting Job Data AppName= Domain= JobName=
08/08/08:09:32:37: INFO Getting Job Data AppName= Domain= JobName=
08/08/08:09:32:47: INFO Getting Job Data AppName= Domain= JobName=
08/08/08:09:32:57: INFO Getting Job Data AppName= Domain= JobName=
08/08/08:09:33:07: INFO Getting Job Data AppName= Domain= JobName=
08/08/08:09:33:17: INFO Getting Job Data AppName= Domain= JobName=
08/08/08:09:33:27: INFO Getting Job Data AppName= Domain= JobName=

The last couple of the PLFW show:

08/08/08:05:51:01: DEBUGLOW SConnect return addrfam=2 addrlen=16

08/08/08:05:51:01: INFO SSLCONNECT: TCP CONNECT COMPLETE
08/08/08:05:51:01: INFO SSLCONNECT: SSL ENABLED
08/08/08:05:51:01: INFO SSLCONNECT: SSL CRYPTO REGISTERED
08/08/08:05:51:01: INFO SSLCONNECT: SSL CTX ALLOCED - ATTEMPTING SSL CONNECT
08/08/08:05:51:01: ERROR SSLCONNECT: CONNECT FAILED
08/08/08:05:51:01: DEBUGLOW Failed to connect to novell.patchlinksecure.net:443 errno=0
08/08/08:06:00:07: DEBUGLOW Socket options set (SO_REUSEADDR, SO_KEEPALIVE, TCP_NODELAY, SO_SNDLOWAT, SND_RCVLOWAT)
08/08/08:06:00:07: DEBUGLOW SConnect addr=novell.patchlinksecure.net port=443 paddr=(null) pport=-1 puser=0
08/08/08:06:00:07: DEBUGLOW SConnect gettaddrinfo caddr=novell.patchlinksecure.net cport=443
08/08/08:06:00:07: DEBUGLOW SConnect: addrinfo loop...
08/08/08:06:00:07: DEBUGLOW loop connected 16

08/08/08:06:00:07: DEBUGLOW SConnect return addrfam=2 addrlen=16

08/08/08:06:00:07: INFO SSLCONNECT: TCP CONNECT COMPLETE
08/08/08:06:00:07: INFO SSLCONNECT: SSL ENABLED
08/08/08:06:00:07: INFO SSLCONNECT: SSL CRYPTO REGISTERED
08/08/08:06:00:07: INFO SSLCONNECT: SSL CTX ALLOCED - ATTEMPTING SSL CONNECT

Replication status shows sleeping. The Package, Vulnerabilities, and license subscription have a true status.
The 50 or so other machines seem to be working quite normally. The agent versions installed go from 6.3.2.669 - 6.4.2.378 (I have been trying lots of them

)

The 0x0000190c errors do not discriminate against any certain agent version so far. The 0x0000190c does not go away after trying the re-registering of the wshom.ocx and vbscript from TID 591 on Lumension's site.

On the workstations DAUscript.log has:
Script version 7.11
Error: Failed to create the WScript.Shell.
(-2147024769)
DAU Results: .
Main Error Number: -2147024769

It looks like the detection hasn't ran since 7-25-08 on the test machine I am looking at.
2008/08/07 12:05:15.0375,0,A connection between a PDDM and the agent was closed. [TaskManager.cpp:168]
2008/08/08 09:55:37.0406,0,Agent: Get TaskList Communications Failure. Open Request Error (1114) occurred opening request to http://10.27.14.18/update/gravitixISAPI.dll. The error string is: (Could not connect to the internet. The error code is 12029.) [AgentThread.cpp:1376]

Hmm . . . I must be getting close to what is actually wrong? Because I am still probably leaving out the most important piece of info needed I'll stop here

Thanks for your time and input!