Hey folks, help <g>!

I've got a Windows XP workstation where, no matter how I try, I can't
log in to the ZCM server. The message is "Unable to log into the
network because the login credentials or the server certificate is
incorrect". We're running the Novell Windows Client 4.91.5 connecting
to an eDirectory tree without any problems.

I'm actually testing out ZCM on a pilot server and a couple of
workstations. The adaptive agent installs fine, the workstation will
register within the ZCM control center (running under Linux), and when
I open the workstation object both the
'last full refresh' and 'last contact' have very recent values.

I've followed the steps in TID 3418069 to turn on the logs and see if
there is anything obvious, but no luck (at least nothing that I can
find references).

In ZENLGN.LOG I get the following messages:

ZENLGN [1A14-2458] [07:34:47:437] ZenLgnLoginUI entered
ZENLGN [1A14-2458] [07:34:47:453] It would appear that we have been
called from the ZenNotifyIcon process (ZenNotifyIcon.exe)
ZENLGN [1A14-2458] [07:34:47:640] WTSLoadDLL called!
ZENLGN [1A14-2458] [07:34:47:656] WTSLoadDLL returning
ZENLGN [1A14-2458] [07:34:47:843] IsWorkstationConnected entered
ZENLGN [1A14-2458] [07:34:47:890] IsWorkstationConnected returning 0
ZENLGN [1A14-2458] [07:34:47:890] Calling ZENGetAssociatedRealmNames
ZENLGN [1A14-2458] [07:34:47:921] ZENGetAssociatedRealmNames returned
ZENLGN [1A14-2458] [07:34:47:921] Found Realm : CDS_TREE
ZENLGN [1A14-2458] [07:34:47:937] Found Realm : ZENworks Zone
ZENLGN [1A14-2458] [07:34:47:937] We found 2 realm(s).
ZENLGN [1A14-2458] [07:34:47:937] Calling ZENIsServerAvailable
ZENLGN [1A14-2458] [07:34:48:312] Returned from ZENIsServerAvavilable
ZENLGN [1A14-2458] [07:34:48:312] RetrieveUsersCachedZenName Entered
ZENLGN [1A14-2458] [07:34:48:312] RetrieveUsersCachedZenName
returning: 2
ZENLGN [1A14-2458] [07:34:48:312] Passive Login Failed: 0x0000001F
ZENLGN [1A14-2458] [07:34:48:312] Launching the ZEN login dialog
prompt
ZENLGN [1A14-2458] [07:34:48:359] ZenLgnLoginInitDialog entered
ZENLGN [1A14-2458] [07:34:48:375] ZenLgnLoginInitDialog returning
ZENLGN [1A14-2458] [07:34:51:625] Received window message - WM_COMMAND
- OK button hit.
ZENLGN [1A14-2458] [07:34:51:625] ZenLgnLogin entered
ZENLGN [1A14-2458] [07:34:51:625] About to call ZENLogin in agent
service
ZENLGN [1A14-2458] [07:34:56:171] Returned from calling ZENLogin in
agent service
ZENLGN [1A14-2458] [07:34:56:171] ZenLgnLogin returning 1244
ZENLGN [1A14-2458] [07:35:03:265] Window message - WM_COMMAND - OK
button hit ending
ZENLGN [1A14-2458] [07:35:11:031] Received window message - WM_COMMAND
- Cancel button hit.
ZENLGN [1A14-2458] [07:35:11:031] Calling EndDialog with
ERROR_CANCELLED
ZENLGN [1A14-2458] [07:35:11:234] Window message - WM_COMMAND - Cancel
button hit ending.
ZENLGN [1A14-2458] [07:35:11:234] Received window message - WM_DESTROY
ZENLGN [1A14-2458] [07:35:11:234] Window message - WM_DESTROY - ending
ZENLGN [1A14-2458] [07:35:11:234] ZEN login dialog prompt returned
failure - Login failed
ZENLGN [1A14-2458] [07:35:11:234] ZenLgnLoginUI exiting: 1244

I tried looking through the KB, but error 1244 doesn't seem to exist.

In zmd-messages.log I get LOTS of information, but only the following
error:

[DEBUG] [09/25/2009 09:22:09.859] [1728] [ZenworksWindowsService]
[30] [] [AssignmentManager] [] [Entered GetAssignmentsFromWebService]
[] []
[DEBUG] [09/25/2009 09:22:09.859] [1728] [ZenworksWindowsService]
[30] [] [AssignmentManager] [] [Session is not Authenticated] [] []
[DEBUG] [09/25/2009 09:22:09.859] [1728] [ZenworksWindowsService]
[30] [] [AssignmentManager] [] [Error returned from Web Service] [] []
[DEBUG] [09/25/2009 09:22:09.859] [1728] [ZenworksWindowsService] [30]
[] [AssignmentManager] [] [Error code: 3, Zenworks user is not
authenticated.] [] []
[DEBUG] [09/25/2009 09:22:09.859] [1728] [ZenworksWindowsService]
[30] [] [AssignmentManager] [] [Attempting to get cache information]
[] []

From the ZCM console the User Sources object is shown in green, and
from the Users panel I can browse the tree and open user objects.

When I take an LDAP trace during the login process, this is the
information displayed:

11:23:33 98D81380 LDAP: BIO ctrl called with unknown cmd 7
11:23:33 98D81380 LDAP: DoBind on connection 0x98f35c60
11:23:33 98D81380 LDAP: Bind name:cn=zcm_proxy,o=cds, version:3,
authentication:simple
11:23:33 98D81380 LDAP: Sending operation result 0:"":"" to connection
0x98f35c60
11:23:33 98D81380 LDAP: DoSearch on connection 0x98f35c60
11:23:33 98D81380 LDAP: Search request:
base: "ou=CDS_Cincy,o=CDS"
scope:2 dereference:0 sizelimit:0 timelimit:0 attrsonly:0
filter: "(&(cn=BValaski)(!(objectClass=aliasObject)))"
no attributes
11:23:33 98D81380 LDAP: Empty attribute list implies all user
attributes
11:23:33 98D81380 LDAP: Sending operation result 0:"":"" to connection
0x98f35c60
11:23:33 98D81380 LDAP: DoSearch on connection 0x98f35c60
11:23:33 98D81380 LDAP: Search request:
base: "ou=CDS_NKY,o=CDS"
scope:2 dereference:0 sizelimit:0 timelimit:0 attrsonly:0
filter: "(&(cn=BValaski)(!(objectClass=aliasObject)))"
no attributes
11:23:33 98D81380 LDAP: Empty attribute list implies all user
attributes
11:23:33 98D81380 LDAP: Sending operation result 0:"":"" to connection
0x98f35c60
11:23:34 98D81380 LDAP: DoUnbind on connection 0x98f35c60

Does anyone have some additional recommendations about how to
troubleshoot this? Is there error logs on the Linux server I need to
also be looking through to troubleshoot this issue? Thanks!


Bill Valaski
Director of IT
CDS Associates, Inc.
Cincinnati, OH USA
www.cds-assoc.com