I'm having an issue in which passive logins fail for only one user account, which is the account used to unregister, clear cache, reset guid, then reregister a system. This is a very consistent, easily recreated issue.

We have Win7 and XP systems. We create an image of the system, load it on other PCs, and unregister if not already, reset the GUID, register again as a new PC. Works great.

However the one account we use for this whole process has problems logging in one reboot after registering the system. At that point, the user gets a secondary login window after the novell client successfully authenticates the user and I guess CASA hands this off to ZCM. At this secondary login, the correct password does not work even if i type it in again directly into the zcm login window. After 3 failures at the secondary login, or just canceling, it lets you into though ZCM didnt log in. At this point, you could log out and try again, it would fail. You could reboot and log in again, it will fail. If you log in with any other account it works perfectly fine. There are at least a few threads on this forum describing the exact same symptom.

The fix in my case is to get to the desktop and log in from the zcm tray icon using this "bad" account. At this point you can see no user policies exist for the user. DLU and GOP are missing, which we apply to the user, so I assume this may be part of the cause. All workstation policies and user and workstation assigned bundles are delivered properly.

I have to run "zac ref bypasscache" while logged in with this bad account and this forces policies to refresh, and from then on the system is perfectly fine. Somehow unregistering and reregistering damages something on the account, which I assume are user policies, and the passive login process fails, brining up the secondary login. If I had to guess, it seems like it thinks this account has a cached policy and zcm wants to use it but there is no cached policy to use, so I have to force it to get a new copy of the policy from the server? Thats totally just a guess.

I checked CASA logs and found no errors. The ZCM debug log did show an error, though I cant interpret it myself. It attempts to connect to each of our 4 primary servers, each time failing with this.


[DEBUG] [06/30/2011 11:07:32.785] [1724] [ZenworksWindowsService] [39] [] [RemotingService] [] [ZENLogin took exception: Novell.Zenworks.Zmd.ZenException: RegisterUser - Unable to register with any service
at Novell.Zenworks.Registration.RegistrationManager.R egisterUser(IService() services, Boolean ignoreRandomRefresh, Boolean retry, String authTokenHost)
at Novell.Zenworks.Registration.RegistrationManager.R egisterUser(String host)
at Novell.Zenworks.Registration.RegistrationModule.Re gisterUser(Session session, String host)
at Novell.Zenworks.Native.RemotingService.RemotingSer viceImp.ZENLoginUser(String SessionID, String Realm, String Username, String Password, String Host, String AuthToken, Boolean bZIconLogin)] [] []

Then a definite failure:

[DEBUG] [06/30/2011 11:07:32.816] [1724] [ZenworksWindowsService] [39] [] [RemotingService] [] [ZENLoginUser returning] [] []
[DEBUG] [06/30/2011 11:07:32.816] [1724] [ZenworksWindowsService] [39] [] [RemotingService] [] [Returned from calling ZENLoginUser] [] []
[DEBUG] [06/30/2011 11:07:32.816] [1724] [ZenworksWindowsService] [39] [] [RemotingService] [] [Calling DeleteMiCasaCredential realm: HUSD] [] []
[DEBUG] [06/30/2011 11:07:32.816] [1724] [ZenworksWindowsService] [39] [] [CommonCasa] [] [DeleteMiCasaCredential entered] [] []
[DEBUG] [06/30/2011 11:07:32.816] [1724] [ZenworksWindowsService] [39] [] [CommonCasa] [] [Calling MiCasa.DeleteCredential] [] []
[DEBUG] [06/30/2011 11:07:32.816] [1724] [ZenworksWindowsService] [39] [] [CommonCasa] [] [MiCasa.DeleteCredential using Luid value: 0:12880051] [] []
[DEBUG] [06/30/2011 11:07:32.816] [1724] [ZenworksWindowsService] [39] [] [CommonCasa] [] [MiCasa.DeleteCredential returned] [] []
[DEBUG] [06/30/2011 11:07:32.816] [1724] [ZenworksWindowsService] [39] [] [CommonCasa] [] [DeleteMiCasaCredential returning] [] []
[DEBUG] [06/30/2011 11:07:32.816] [1724] [ZenworksWindowsService] [39] [] [RemotingService] [] [Calling DeleteMiCasaCredential realm: HUSD.zcmSharedSecret] [] []
[DEBUG] [06/30/2011 11:07:32.816] [1724] [ZenworksWindowsService] [39] [] [CommonCasa] [] [DeleteMiCasaCredential entered] [] []
[DEBUG] [06/30/2011 11:07:32.816] [1724] [ZenworksWindowsService] [39] [] [CommonCasa] [] [Calling MiCasa.DeleteCredential] [] []
[DEBUG] [06/30/2011 11:07:32.816] [1724] [ZenworksWindowsService] [39] [] [CommonCasa] [] [MiCasa.DeleteCredential using Luid value: 0:12880051] [] []
[DEBUG] [06/30/2011 11:07:32.816] [1724] [ZenworksWindowsService] [39] [] [CommonCasa] [] [MiCasa.DeleteCredential took exception. The error code is: -802] [] []
[DEBUG] [06/30/2011 11:07:32.816] [1724] [ZenworksWindowsService] [39] [] [CommonCasa] [] [DeleteMiCasaCredential returning] [] []
[DEBUG] [06/30/2011 11:07:32.816] [1724] [ZenworksWindowsService] [39] [] [RemotingService] [] [Calling ClearAuthTokenCache] [] []
[DEBUG] [06/30/2011 11:07:32.816] [1724] [ZenworksWindowsService] [39] [] [CommonCasa] [] [ClearAuthTokenCache entered] [] []
[DEBUG] [06/30/2011 11:07:32.816] [1724] [ZenworksWindowsService] [39] [] [CommonCasa] [] [Calling AuthToken.CleanUpAuthTokenCache] [] []
[DEBUG] [06/30/2011 11:07:32.816] [1724] [ZenworksWindowsService] [39] [] [CommonCasa] [] [AuthToken.CleanUpAuthTokenCache using Luid value: 0:12880051] [] []
[DEBUG] [06/30/2011 11:07:32.847] [1724] [ZenworksWindowsService] [39] [] [CommonCasa] [] [AuthToken.CleanUpAuthTokenCache returned] [] []
[DEBUG] [06/30/2011 11:07:32.847] [1724] [ZenworksWindowsService] [39] [] [CommonCasa] [] [ClearAuthTokenCache returning] [] []
[DEBUG] [06/30/2011 11:07:32.847] [1724] [ZenworksWindowsService] [39] [] [RemotingService] [] [Calling ZENSetSessionAuthenticationState] [] []
[DEBUG] [06/30/2011 11:07:32.847] [1724] [ZenworksWindowsService] [39] [] [RemotingService] [] [ZENSetSessionAuthenticationState entered] [] []
[DEBUG] [06/30/2011 11:07:32.847] [1724] [ZenworksWindowsService] [39] [] [RemotingService] [] [ZENSetSessionAuthenticationState returning SUCCESS] [] []
[DEBUG] [06/30/2011 11:07:32.847] [1724] [ZenworksWindowsService] [39] [] [RemotingService] [] [ZENSetSessionAuthenticationState returned] [] []
[DEBUG] [06/30/2011 11:07:32.847] [1724] [ZenworksWindowsService] [39] [] [RemotingService] [] [ZENLogin returning FAILURE] [] []
[DEBUG] [06/30/2011 11:07:35.140] [1724] [ZenworksWindowsService] [39] [] [RemotingService] [] [ZENSwapSessionID entered] [] []
[DEBUG] [06/30/2011 11:07:35.140] [1724] [ZenworksWindowsService] [39] [] [RemotingService] [] [ZENSwapSessionID calling GetSession for old sessionID] [] []
[DEBUG] [06/30/2011 11:07:35.140] [1724] [ZenworksWindowsService] [39] [] [RemotingService] [] [Old session authentication state is "FailedAuthentication"] [] []
[DEBUG] [06/30/2011 11:07:35.140] [1724] [ZenworksWindowsService] [39] [] [RemotingService] [] [ZENSwapSessionID calling SessionManager.SwapID with sessions: 12880051 13169416] [] []
[DEBUG] [06/30/2011 11:07:35.140] [1724] [ZenworksWindowsService] [39] [] [SessionManager] [] [SwapID called with old ID: 12880051 and new ID: 13169416] [] []
[DEBUG] [06/30/2011 11:07:35.140] [1724] [ZenworksWindowsService] [39] [] [RemotingService] [] [ZENSwapSessionID back from calling SessionManager.SwapID] []...


Searching the forums for days now, I think a lot of the issues people describe related to DLU, secondary logins, and user policies that only affect one user on a system are somehow related to the same issue. I'm crossing my fingers deploying the image as is, hoping that the problem will be resolved in SP1 or maybe the "bad" policies or whatever is wrong will eventually expire and the account will just start working again. Any ideas?