We're having a problem where Zenworks authentication will randomly fail and users will be unable to login to their workstation. This site is a school, so logins are frequent and I'd estimate the failure rate is about 1 every 10-15 logins - enough to be very disruptive. If they wait a few minutes and try again it usually works, however if they try a different workstation they normally can't login because the previous workstation is consuming a session.

The site runs ZCM 10.2.1 authenticating against an edirectory 8.8SP5 server on OES2-Linux, all OES2 patches were installed as of a couple of weeks ago, but the patch level of the ZCM server is a bit behind (it is SLES10 SP2 though). We forgot to patch it during the 10.2.1 update, and I'm a bit reluctant to patch it in retrospect in case the patches overwrite something - I didn't setup this server and have been bitten by SLES updates before.

They use the Novell client to login so the Zen agent logs in passively. Previously they were getting the Zenworks login screen popping up, but I disabled that, so now whenever it fails they just get the Novell client's prompt for Windows workstation credentials.

Any help with this would be greatly appreciated, I'm under quite a lot of pressure to get this resolved.

Here's the ZENLGN.LOG, note that the user tried to login at 13:34, came to see us, then when I went to see the workstation and got her to try again it worked (13:37):
[ZENLGN-2CC-2D0] Log file opened - 21OCT2009 13:34:56.609 - max log size 0KB (0x00000000KB, 0MB)



ZENLGN [2CC-2D0] [13:34:56:609] ZenLgnLoginUI entered

ZENLGN [2CC-2D0] [13:34:56:609] It would appear that we have been called from the Winlogon process (NWGina.dll)

ZENLGN [2CC-2D0] [13:34:57:093] WTSLoadDLL called!

ZENLGN [2CC-2D0] [13:34:57:125] WTSLoadDLL returning

ZENLGN [2CC-2D0] [13:34:57:125] RegQueryValueEx on value DisablePassiveModeLogin Failed: 2

ZENLGN [2CC-2D0] [13:34:57:125] CheckIfLoginAllowed Entered

ZENLGN [2CC-2D0] [13:34:57:125] Checking if this machine is an NT Server.

ZENLGN [2CC-2D0] [13:34:57:125] Microsoft Windows XP ZENLGN [2CC-2D0] [13:34:57:125] Professional

ZENLGN [2CC-2D0] [13:34:57:125] CheckIfLoginAllowed returning TRUE

ZENLGN [2CC-2D0] [13:34:57:156] IsWorkstationConnected entered

ZENLGN [2CC-2D0] [13:34:57:281] IsWorkstationConnected returning 0

ZENLGN [2CC-2D0] [13:34:57:281] Calling ZENGetAssociatedRealmNames

ZENLGN [2CC-2D0] [13:34:57:296] ZENGetAssociatedRealmNames returned

ZENLGN [2CC-2D0] [13:34:57:296] Found Realm : COLLEGE

ZENLGN [2CC-2D0] [13:34:57:296] We found 1 realm(s).

ZENLGN [2CC-2D0] [13:34:57:296] Calling ZENIsServerAvailable

ZENLGN [2CC-2D0] [13:34:57:906] Returned from ZENIsServerAvavilable

ZENLGN [2CC-2D0] [13:34:57:906] LgnGetPassiveLoginRetryParameters entered

ZENLGN [2CC-2D0] [13:34:57:906] *pdwRetryCount = 0

ZENLGN [2CC-2D0] [13:34:57:906] *pdwRetryInterval = 15000

ZENLGN [2CC-2D0] [13:34:57:906] ZenLgnLogin entered

ZENLGN [2CC-2D0] [13:34:57:906] About to call ZENLogin in agent service

ZENLGN [2CC-2D0] [13:35:04:187] Returned from calling ZENLogin in agent service

ZENLGN [2CC-2D0] [13:35:04:187] ZenLgnLogin returning 1244

ZENLGN [2CC-2D0] [13:35:04:187] Passive Login Failed: 0x000004DC

ZENLGN [2CC-2D0] [13:35:04:187] Passive mode login prompt disabled. Fail authentication.

ZENLGN [2CC-2D0] [13:35:04:187] ZenLgnLoginUI exiting: 1244

ZENLGN [2CC-2D0] [13:37:09:312] ZenLgnLoginUI entered

ZENLGN [2CC-2D0] [13:37:09:312] It would appear that we have been called from the Winlogon process (NWGina.dll)

ZENLGN [2CC-2D0] [13:37:09:328] WTSLoadDLL called!

ZENLGN [2CC-2D0] [13:37:09:328] WTSLoadDLL returning

ZENLGN [2CC-2D0] [13:37:09:328] RegQueryValueEx on value DisablePassiveModeLogin Failed: 2

ZENLGN [2CC-2D0] [13:37:09:328] CheckIfLoginAllowed Entered

ZENLGN [2CC-2D0] [13:37:09:328] Checking if this machine is an NT Server.

ZENLGN [2CC-2D0] [13:37:09:328] Microsoft Windows XP ZENLGN [2CC-2D0] [13:37:09:328] Professional

ZENLGN [2CC-2D0] [13:37:09:328] CheckIfLoginAllowed returning TRUE

ZENLGN [2CC-2D0] [13:37:09:328] IsWorkstationConnected entered

ZENLGN [2CC-2D0] [13:37:09:328] IsWorkstationConnected returning 0

ZENLGN [2CC-2D0] [13:37:09:328] Calling ZENGetAssociatedRealmNames

ZENLGN [2CC-2D0] [13:37:09:328] ZENGetAssociatedRealmNames returned

ZENLGN [2CC-2D0] [13:37:09:328] Found Realm : COLLEGE

ZENLGN [2CC-2D0] [13:37:09:328] We found 1 realm(s).

ZENLGN [2CC-2D0] [13:37:09:328] Calling ZENIsServerAvailable

ZENLGN [2CC-2D0] [13:37:09:328] Returned from ZENIsServerAvavilable

ZENLGN [2CC-2D0] [13:37:09:328] LgnGetPassiveLoginRetryParameters entered

ZENLGN [2CC-2D0] [13:37:09:328] *pdwRetryCount = 0

ZENLGN [2CC-2D0] [13:37:09:328] *pdwRetryInterval = 15000

ZENLGN [2CC-2D0] [13:37:09:328] ZenLgnLogin entered

ZENLGN [2CC-2D0] [13:37:09:328] About to call ZENLogin in agent service

ZENLGN [2CC-2D0] [13:37:17:140] Returned from calling ZENLogin in agent service

ZENLGN [2CC-2D0] [13:37:17:140] LgnSetZenUsernameHistory

ZENLGN [2CC-2D0] [13:37:17:140] LgnSetRealmNameHistory

ZENLGN [2CC-2D0] [13:37:17:140] CacheUsersZenName Entered

ZENLGN [2CC-2D0] [13:37:17:140] Create the value name

ZENLGN [2CC-2D0] [13:37:17:140] szUsername: st05115

, szTree: COLLEGE

ZENLGN [2CC-2D0] [13:37:17:140] Now create the ZEN name

ZENLGN [2CC-2D0] [13:37:17:140] CacheUsersZenName returning: 0

ZENLGN [2CC-2D0] [13:37:17:140] ZenLgnLogin returning 0

ZENLGN [2CC-2D0] [13:37:17:140] ZenLgnLoginUI exiting: 0