Hello,

I have installed ZCM 10.0.2 on two Windows 2003 Server. Both server are in
the same management zone.
The user accounts are in a eDirectory and in a ActiveDirectory. The
AD-Version ist R2 (mixed environment).

The login to the eDir worked fine.
The login to the AD failed with the default messgage (password empty, etc.).
I have checked the certificate / servernamen / ping -a / etc as I found in
the Novell-Documentation, Support-Sites an this newsgroup. It seem all
fine.Browsing through the user objecte in the zcm-console works fine too.
No ZEN-Agent is installed on the domain-controller, but the Certificate is
importet.

Can someone help me to successfull login with a AD-User?
Are there more trace-options?

Thanks.


--

woodle
(System-Engeneer)


Here is the trace from the ZENLGN.LOG file:
---------------------
[ZENLGN-1D4-1D8] Log file opened - 15MAY2008 14:55:42.187 - max log size 0KB
(0x00000000KB, 0MB)

ZENLGN [1D4-1D8] [14:55:42] ZenLgnLoginUI entered
ZENLGN [1D4-1D8] [14:55:42] It would appear that we have been called from
the Winlogon process (NWGina.dll)
ZENLGN [1D4-1D8] [14:55:42] AUTHTOKENLoadDLL called!
ZENLGN [1D4-1D8] [14:55:42] MICASALoadDLL called!
ZENLGN [1D4-1D8] [14:55:42] WTSLoadDLL called!
ZENLGN [1D4-1D8] [14:55:42] WTSLoadDLL returning
ZENLGN [1D4-1D8] [14:55:42] RegQueryValueEx on value DisablePassiveModeLogin
Failed: 2
ZENLGN [1D4-1D8] [14:55:42] CheckIfLoginAllowed Entered
ZENLGN [1D4-1D8] [14:55:42] Checking if this machine is an NT Server.
ZENLGN [1D4-1D8] [14:55:42] Microsoft Windows XP ZENLGN [1D4-1D8] [14:55:42]
Professional
ZENLGN [1D4-1D8] [14:55:42] CheckIfLoginAllowed returning TRUE
ZENLGN [1D4-1D8] [14:55:42] IsWorkstationConnected entered
ZENLGN [1D4-1D8] [14:55:42] IsWorkstationConnected returning 0
ZENLGN [1D4-1D8] [14:55:42] Calling ZENGetAssociatedRealmNames
ZENLGN [1D4-1D8] [14:55:42] ZENGetAssociatedRealmNames returned
ZENLGN [1D4-1D8] [14:55:42] Found Realm : windows2003dom.local
ZENLGN [1D4-1D8] [14:55:42] We found 1 realm(s).
ZENLGN [1D4-1D8] [14:55:42] bTryLoginWithoutPrompt is TRUE
ZENLGN [1D4-1D8] [14:55:42] LgnGetPassiveLoginRetryParameters entered
ZENLGN [1D4-1D8] [14:55:42] *pdwRetryCount = 0
ZENLGN [1D4-1D8] [14:55:42] *pdwRetryInterval = 15000
ZENLGN [1D4-1D8] [14:55:42] ZenLgnLogin entered
ZENLGN [1D4-1D8] [14:55:42] Calling ZenLgnSetCasaCredentials
ZENLGN [1D4-1D8] [14:55:42] ZenLgnSetCasaCredential entered
ZENLGN [1D4-1D8] [14:55:42] Username is: Administrator
ZENLGN [1D4-1D8] [14:55:42] RealmName is: windows2003dom.local
ZENLGN [1D4-1D8] [14:55:42] About to call miCasaSetCredential
ZENLGN [1D4-1D8] [14:55:42] Returned from calling miCasaSetCredential
ZENLGN [1D4-1D8] [14:55:42] miCASASetCredential successful for
windows2003dom.local!.
ZENLGN [1D4-1D8] [14:55:42] ZenLgnSetCasaCredential returning 0
ZENLGN [1D4-1D8] [14:55:42] ZenLgnSetCasaCredentials returned
ZENLGN [1D4-1D8] [14:55:42] Calling ZENGetHostNames
ZENLGN [1D4-1D8] [14:55:42] ZENGetHostNames returned
ZENLGN [1D4-1D8] [14:55:42] Retrieved host names are:
ZENLGN [1D4-1D8] [14:55:42] zcmserver2.windows2003dom.local
ZENLGN [1D4-1D8] [14:55:42] 10.21.1.21
ZENLGN [1D4-1D8] [14:55:42] zcmserver1.int.mhdom.com
ZENLGN [1D4-1D8] [14:55:42] 10.11.1.70
ZENLGN [1D4-1D8] [14:55:42] About to call ObtainAuthToken with the following
parameters
ZENLGN [1D4-1D8] [14:55:42] szServiceNameA is:
com.novell.zenworks.windows2003dom.local
ZENLGN [1D4-1D8] [14:55:42] szHostNameA is:
zcmserver2.windows2003dom.local
ZENLGN [1D4-1D8] [14:55:42] dwAuthTokenSize is: 0
ZENLGN [1D4-1D8] [14:55:42] ObtainAuthToken Failed: 0xC7FF001F
ZENLGN [1D4-1D8] [14:55:42] About to call ObtainAuthToken with the following
parameters
ZENLGN [1D4-1D8] [14:55:42] szServiceNameA is:
com.novell.zenworks.windows2003dom.local
ZENLGN [1D4-1D8] [14:55:42] szHostNameA is: 10.21.1.21
ZENLGN [1D4-1D8] [14:55:42] dwAuthTokenSize is: 0
ZENLGN [1D4-1D8] [14:55:42] ObtainAuthToken Failed: 0xC7FF0023
ZENLGN [1D4-1D8] [14:55:42] About to call ObtainAuthToken with the following
parameters
ZENLGN [1D4-1D8] [14:55:42] szServiceNameA is:
com.novell.zenworks.windows2003dom.local
ZENLGN [1D4-1D8] [14:55:42] szHostNameA is: zcmserver1.int.mhdom.com
ZENLGN [1D4-1D8] [14:55:42] dwAuthTokenSize is: 0
ZENLGN [1D4-1D8] [14:55:42] ObtainAuthToken Failed: 0xC7FF0024
ZENLGN [1D4-1D8] [14:55:42] About to call ObtainAuthToken with the following
parameters
ZENLGN [1D4-1D8] [14:55:42] szServiceNameA is:
com.novell.zenworks.windows2003dom.local
ZENLGN [1D4-1D8] [14:55:42] szHostNameA is: 10.11.1.70
ZENLGN [1D4-1D8] [14:55:42] dwAuthTokenSize is: 0
ZENLGN [1D4-1D8] [14:55:49] ObtainAuthToken Failed: 0xC7FF0023
ZENLGN [1D4-1D8] [14:55:49] Calling ZenLgnDeleteCasaCredential
ZENLGN [1D4-1D8] [14:55:49] ZenLgnDeleteCasaCredential entered
ZENLGN [1D4-1D8] [14:55:49] RealmName is: windows2003dom.local
ZENLGN [1D4-1D8] [14:55:49] About to call miCasaDeleteCredential
ZENLGN [1D4-1D8] [14:55:49] Returned from calling miCasaDeleteCredential
ZENLGN [1D4-1D8] [14:55:49] miCASADeleteCredential successful for
windows2003dom.local!.
ZENLGN [1D4-1D8] [14:55:49] ZenLgnDeleteCasaCredential returning 0
ZENLGN [1D4-1D8] [14:55:49] ZenLgnDeleteCasaCredential returned
ZENLGN [1D4-1D8] [14:55:49] Calling CleanUpAuthTokenCacheEx
ZENLGN [1D4-1D8] [14:55:49] CleanUpAuthTokenCacheEx returned
ZENLGN [1D4-1D8] [14:55:49] About to call ZENSetSessionAuthenticationState
ZENLGN [1D4-1D8] [14:55:49] Returned from calling
ZENSetSessionAuthenticationState
ZENLGN [1D4-1D8] [14:55:49] ZenLgnLogin returning 1244
ZENLGN [1D4-1D8] [14:55:49] Passive Login Failed: 0x000004DC
ZENLGN [1D4-1D8] [14:55:49] RegQueryValueEx on value
DisablePassiveModeLoginPrompt Failed: 2
ZENLGN [1D4-1D8] [14:55:49] Launching the ZEN login dialog prompt
ZENLGN [1D4-1D8] [14:55:49] ZenLgnLoginInitDialog entered
ZENLGN [1D4-1D8] [14:55:49] ZenLgnLoginInitDialog returning
ZENLGN [1D4-1D8] [14:55:52] Received window message - WM_COMMAND - Cancel
button hit.
ZENLGN [1D4-1D8] [14:55:52] ZenLgnLogin entered
ZENLGN [1D4-1D8] [14:55:52] Workstation is disconnected, primary server is
unavailable, or cancel
ZENLGN [1D4-1D8] [14:55:52] was hit when prompted for user credentials.
ZENLGN [1D4-1D8] [14:55:52] RetrieveUsersCachedZenName Entered
ZENLGN [1D4-1D8] [14:55:52] RetrieveUsersCachedZenName returning: 2
ZENLGN [1D4-1D8] [14:55:52] Could not retrieve a user cached zen name
ZENLGN [1D4-1D8] [14:55:52] ZenLgnLogin returning 197984257
ZENLGN [1D4-1D8] [14:55:52] Calling EndDialog with 197984257
ZENLGN [1D4-1D8] [14:55:52] Window message - WM_COMMAND - Cancel button hit
ending.
ZENLGN [1D4-1D8] [14:55:52] Received window message - WM_DESTROY
ZENLGN [1D4-1D8] [14:55:52] Window message - WM_DESTROY - ending
ZENLGN [1D4-1D8] [14:55:52] ZEN login dialog prompt returned failure - Login
failed
ZENLGN [1D4-1D8] [14:55:52] ZenLgnLoginUI exiting: 1244
---------------------