Windows 2003 system hangs when calling Windows LOGONUser function when
Novell Authentication package is installed.

Memory dump confirms the problem is in the LsaApLogonTerminated function
in the Novell Authentication package.

Is there a newer Novell client? is there a patch that fixes this known

All three threads in LSASS.EXE have the same stack trace and are stuck in
this function.

00b2fdcc 742f4ffc nwv1_0!LsaApLogonTerminated+0xd

Here is the complete stack trace:

THREAD 852aabd8 Cid 02ac.0320 Teb: 7ffa9000 Win32Thread:
e1ca17e8 WAIT: (WrResource) KernelMode Non-Alertable
856338a8 Semaphore Limit 0x7fffffff
852aac50 NotificationTimer
Not impersonating
DeviceMap e10001b0
Owning Process 8559b020 Image: lsass.exe
Wait Start TickCount 481554 Ticks: 116
Context Switch Count 1851 LargeStack
UserTime 00:00:00.0062
KernelTime 00:00:00.0078
Start Address kernel32!BaseThreadStartThunk (0x77e6b5bb)
Win32 Start Address LSASRV!LsapThreadBase (0x742e7414)
Stack Init f5e0d000 Current f5e0c9f8 Base f5e0d000 Limit f5e0a000
Call 0
Priority 14 BasePriority 9 PriorityDecrement 5
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for nwv1_0.dll -
ChildEBP RetAddr
f5e0ca10 8082fc11 nt!KiSwapContext+0x25 (FPO: [Uses EBP] [0,0,4])
[d:\srvrtm\base\ntos\ke\i386\ctxswap.asm @ 139]
f5e0ca28 80828046 nt!KiSwapThread+0x83 (FPO: [Non-Fpo]) (CONV:
fastcall) [d:\srvrtm\base\ntos\ke\thredsup.c @ 2013]
f5e0ca6c 808771d5 nt!KeWaitForSingleObject+0x2e0 (FPO: [Non-Fpo])
(CONV: stdcall) [d:\srvrtm\base\ntos\ke\wait.c @ 1256]
f5e0caa8 80877540 nt!ExpWaitForResource+0xd3 (FPO: [Non-Fpo])
(CONV: fastcall) [d:\srvrtm\base\ntos\ex\resource.c @ 2764]
f5e0cabc f781b3ba nt!ExAcquireResourceSharedLite+0xae (FPO: [Non-
Fpo]) (CONV: stdcall) [d:\srvrtm\base\ntos\ex\resource.c @ 1086]
WARNING: Stack unwind information not available. Following frames may be
f5e0cad8 f6801696 resmgr+0x43ba
f5e0cafc f68456ca nwfs+0xa696
f5e0cb3c f680aeb2 nwfs+0x4e6ca
f5e0cb4c f680b061 nwfs+0x13eb2
f5e0cb88 f680ae5c nwfs+0x14061
f5e0cbc8 f682e038 nwfs+0x13e5c
f5e0cbe0 f682da4c nwfs+0x37038
f5e0cbf8 8081d39d nwfs+0x36a4c
f5e0cc0c f727d693 nt!IofCallDriver+0x45 (FPO: [Non-Fpo]) (CONV:
fastcall) [d:\srvrtm\base\ntos\io\iomgr\iosubs.c @ 2263]
f5e0cc38 8081d39d fltmgr!FltpFsControl+0xd7 (FPO: [Non-Fpo])
(CONV: stdcall) [d:\srvrtm\base\fs\filtermgr\filter\fltmgr.c @ 5629]
f5e0cc4c 808ec789 nt!IofCallDriver+0x45 (FPO: [Non-Fpo]) (CONV:
fastcall) [d:\srvrtm\base\ntos\io\iomgr\iosubs.c @ 2263]
f5e0cc60 808ed507 nt!IopSynchronousServiceTail+0x10b (FPO: [Non-
Fpo]) (CONV: stdcall) [d:\srvrtm\base\ntos\io\iomgr\internal.c @ 7520]
f5e0cd00 808e60f2 nt!IopXxxControlFile+0x5db (FPO: [Non-Fpo])
(CONV: stdcall) [d:\srvrtm\base\ntos\io\iomgr\internal.c @ 9239]
f5e0cd34 80882fa8 nt!NtFsControlFile+0x2a (FPO: [Non-Fpo]) (CONV:
stdcall) [d:\srvrtm\base\ntos\io\iomgr\fsctrl.c @ 108]
f5e0cd34 7c82ed54 nt!KiFastCallEntry+0xf8 (FPO: [0,0] TrapFrame @
f5e0cd64) [d:\srvrtm\base\ntos\ke\i386\trap.asm @ 1414]
00b2fd58 7c821514 ntdll!KiFastSystemCallRet (FPO: [0,0,0])
[d:\srvrtm\base\ntos\rtl\i386\userdisp.asm @ 545]
00b2fd5c 6920144d ntdll!ZwFsControlFile+0xc (FPO: [10,0,0])
[d:\srvrtm\base\ntdll\daytona\obj\i386\usrstubs.asm @ 827]
00b2fd9c 69201407 nwv1_0!LsaApLogonUser+0x205
00b2fdbc 6920121d nwv1_0!LsaApLogonUser+0x1bf
00b2fdcc 742f4ffc nwv1_0!LsaApLogonTerminated+0xd
00b2fde4 742f4e21 LSASRV!LsapAuLogonTerminatedPackages+0x37 (FPO:
[Non-Fpo]) (CONV: stdcall)
[d:\srvrtm\ds\security\base\lsa\server\cfiles\aulog on.c @ 3055]
00b2fe00 742c3e2c LSASRV!LsapLogonSessionDelete+0xa7 (FPO: [Non-
Fpo]) (CONV: stdcall) [d:\srvrtm\ds\security\base\lsa\server\logons.cxx @
00b2fe1c 742f4ce5 LSASRV!LhtDeleteHandle+0x85 (FPO: [Non-Fpo])
(CONV: stdcall) [d:\srvrtm\ds\security\base\lsa\server\lht.cxx @ 656]
00b2fe38 742f506c LSASRV!LsapLogonSessionDeletedWrkr+0x2a (FPO:
[Non-Fpo]) (CONV: stdcall)
[d:\srvrtm\ds\security\base\lsa\server\logons.cxx @ 1360]
00b2ff54 742c3035 LSASRV!LsapAsyncRmWorker+0x29 (FPO: [Non-Fpo])
(CONV: stdcall) [d:\srvrtm\ds\security\base\lsa\server\cfiles\lsarm .c @
00b2ff78 742e746b LSASRV!SpmPoolThreadBase+0xb9 (FPO: [Non-Fpo])
(CONV: stdcall) [d:\srvrtm\ds\security\base\lsa\server\thdpool.cxx @ 569]
00b2ffb8 77e66063 LSASRV!LsapThreadBase+0x91 (FPO: [Non-Fpo])
(CONV: stdcall) [d:\srvrtm\ds\security\base\lsa\server\sphelp.cxx @ 1513]
00b2ffec 00000000 kernel32!BaseThreadStart+0x34 (FPO: [Non-Fpo])
(CONV: stdcall) [d:\srvrtm\base\win32\client\support.c @ 767]