Randomly "A password is required for this realm" agent broke

Hello,

We are working with ZCM11 on WXPSP3 for about 2 months.
Now we see that users are randomly call to our servicedesk that their machine give a second screen after the novell client.
The screen is a ZCM screen with "a password is required for this realm". Normally we don't get that ofcourse. Users are trying to put in their password and they will then get a message like "logon credentials or certificate not valid problem".

This is with about 3 machines in a week (total 250 machines). So i'm not happy with this.

I have checked the log file of a failed machine and this is what i see in case of errors. (after that i have reimaged the machine)

[DEBUG] [03/31/2011 08:39:53.441] [1904] [ZenworksWindowsService] [17] [] [LocMgr] [] [GetZoneKMK() returned non-Null value ] [] []
[DEBUG] [03/31/2011 08:39:53.876] [1904] [ZenworksWindowsService] [17] [] [LocMgr] [] [zoneConfigService.getLocations Exception: System.Net.WebException: De aanvraag is mislukt. Een leeg antwoord werd ontvangen.
bij System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapClientMessage message, WebResponse response, Stream responseStream, Boolean asyncCall)
bij System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object() parameters)
bij Novell.Zenworks.Zmd.Locations.wsdl.LocationServiceService.getLocations(GetLocationsRequest GetLocationsRequest)
bij Novell.Zenworks.Zmd.LocationManager.Service.ZoneConfigWebService.GetLocationInfo(DateTime lastModifiedUtc)] [] []
[DEBUG] [03/31/2011 08:39:55.213] [1904] [ZenworksWindowsService] [16] [] [Settings Module] [] [Settings could not be refreshed on the device. Service Manager returned null on a call to enumerate services.] [] []
[DEBUG] [03/31/2011 08:38:48.187] [1904] [ZenworksWindowsService] [4] [] [Sqlite] [] [(objInfo.db) ReadpVm.sqlite3_step call failed: ERROR. Throwing exception] [] []
[DEBUG] [03/31/2011 08:38:48.234] [1904] [ZenworksWindowsService] [4] [] [Sqlite] [] [(objInfo.db) SqliteCommand.ExecuteReader.finalize returned error: CORRUPT] [] []
[DEBUG] [03/31/2011 08:38:48.468] [1904] [ZenworksWindowsService] [4] [] [Sqlite] [] [(objInfo.db) SqliteCommand.ExecuteReader exceptionType: Novell.Zenworks.Cache.Sqlite.SqliteExceptionMessage: (err=1): sqlite step call failedStack Trace: bij Novell.Zenworks.Cache.Sqlite.SqliteDataReader.ReadpVm(IntPtr pVm, Int32 version) bij Novell.Zenworks.Cache.Sqlite.SqliteDataReader..ctor(SqliteCommand cmd, IntPtr pVm, Int32 version) bij Novell.Zenworks.Cache.Sqlite.SqliteCommand.ExecuteReader(CommandBehavior behavior, Boolean want_results, Int32
  • Hoi Floor,

    We had the same issue here after the update from 10.3. to 11.
    Reinstalling the casa.msi (version 11) solved all our problems.

    Maybe you can try this en see what will happened.

    Groet,

    Frank



    Op 31-3-2011 9:36, floort schreef:
    >
    > Hello,
    >
    > We are working with ZCM11 on WXPSP3 for about 2 months.
    > Now we see that users are randomly call to our servicedesk that their
    > machine give a second screen after the novell client.
    > The screen is a ZCM screen with "a password is required for this
    > realm". Normally we don't get that ofcourse. Users are trying to put in
    > their password and they will then get a message like "logon credentials
    > or certificate not valid problem".
    >
    > This is with about 3 machines in a week (total 250 machines). So i'm
    > not happy with this.
    >
    > I have checked the log file of a failed machine and this is what i see
    > in case of errors. (after that i have reimaged the machine)
    >
    > [DEBUG] [03/31/2011 08:39:53.441] [1904] [ZenworksWindowsService] [17]
    > [] [LocMgr] [] [GetZoneKMK() returned non-Null value ] [] []
    > [DEBUG] [03/31/2011 08:39:53.876] [1904] [ZenworksWindowsService] [17]
    > [] [LocMgr] [] [zoneConfigService.getLocations Exception:
    > System.Net.WebException: De aanvraag is mislukt. Een leeg antwoord werd
    > ontvangen.
    > bij
    > System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapClientMessage
    > message, WebResponse response, Stream responseStream, Boolean
    > asyncCall)
    > bij
    > System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String
    > methodName, Object() parameters)
    > bij
    > Novell.Zenworks.Zmd.Locations.wsdl.LocationServiceService.getLocations(GetLocationsRequest
    > GetLocationsRequest)
    > bij
    > Novell.Zenworks.Zmd.LocationManager.Service.ZoneConfigWebService.GetLocationInfo(DateTime
    > lastModifiedUtc)] [] []
    > [DEBUG] [03/31/2011 08:39:55.213] [1904] [ZenworksWindowsService] [16]
    > [] [Settings Module] [] [Settings could not be refreshed on the device.
    > Service Manager returned null on a call to enumerate services.] [] []
    > [DEBUG] [03/31/2011 08:38:48.187] [1904] [ZenworksWindowsService] [4]
    > [] [Sqlite] [] [(objInfo.db) ReadpVm.sqlite3_step call failed: ERROR.
    > Throwing exception] [] []
    > [DEBUG] [03/31/2011 08:38:48.234] [1904] [ZenworksWindowsService] [4]
    > [] [Sqlite] [] [(objInfo.db) SqliteCommand.ExecuteReader.finalize
    > returned error: CORRUPT] [] []
    > [DEBUG] [03/31/2011 08:38:48.468] [1904] [ZenworksWindowsService] [4]
    > [] [Sqlite] [] [(objInfo.db) SqliteCommand.ExecuteReader exceptionType:
    > Novell.Zenworks.Cache.Sqlite.SqliteExceptionMessage: (err=1): sqlite
    > step call failedStack Trace: bij
    > Novell.Zenworks.Cache.Sqlite.SqliteDataReader.ReadpVm(IntPtr pVm, Int32
    > version) bij
    > Novell.Zenworks.Cache.Sqlite.SqliteDataReader..ctor(SqliteCommand cmd,
    > IntPtr pVm, Int32 version) bij
    > Novell.Zenworks.Cache.Sqlite.SqliteCommand.ExecuteReader(CommandBehavior
    > behavior, Boolean want_results, Int32
  • Frank,

    I saw this issue also before while upgrading from 10.3.0 ( 10 machines of our 250 machines) has the same problem.
    But what if it was 190 of 250 machines that failed. That's a big problem.
    Now i will also see machines that are failing suddenly, reinstalling the casa to all machines is not a nice workaround.
    I want to know why i get this so suddenly.
    What is the differents between the broken agent and a working agent.

    Thanks.

    Tristan



    Frank;2091659 wrote:
    Hoi Floor,

    We had the same issue here after the update from 10.3. to 11.
    Reinstalling the casa.msi (version 11) solved all our problems.

    Maybe you can try this en see what will happened.

    Groet,

    Frank



    Op 31-3-2011 9:36, floort schreef:
    >
    > Hello,
    >
    > We are working with ZCM11 on WXPSP3 for about 2 months.
    > Now we see that users are randomly call to our servicedesk that their
    > machine give a second screen after the novell client.
    > The screen is a ZCM screen with "a password is required for this
    > realm". Normally we don't get that ofcourse. Users are trying to put in
    > their password and they will then get a message like "logon credentials
    > or certificate not valid problem".
    >
    > This is with about 3 machines in a week (total 250 machines). So i'm
    > not happy with this.
    >
    > I have checked the log file of a failed machine and this is what i see
    > in case of errors. (after that i have reimaged the machine)
    >
    > [DEBUG] [03/31/2011 08:39:53.441] [1904] [ZenworksWindowsService] [17]
    > [] [LocMgr] [] [GetZoneKMK() returned non-Null value ] [] []
    > [DEBUG] [03/31/2011 08:39:53.876] [1904] [ZenworksWindowsService] [17]
    > [] [LocMgr] [] [zoneConfigService.getLocations Exception:
    > System.Net.WebException: De aanvraag is mislukt. Een leeg antwoord werd
    > ontvangen.
    > bij
    > System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapClientMessage
    > message, WebResponse response, Stream responseStream, Boolean
    > asyncCall)
    > bij
    > System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String
    > methodName, Object() parameters)
    > bij
    > Novell.Zenworks.Zmd.Locations.wsdl.LocationServiceService.getLocations(GetLocationsRequest
    > GetLocationsRequest)
    > bij
    > Novell.Zenworks.Zmd.LocationManager.Service.ZoneConfigWebService.GetLocationInfo(DateTime
    > lastModifiedUtc)] [] []
    > [DEBUG] [03/31/2011 08:39:55.213] [1904] [ZenworksWindowsService] [16]
    > [] [Settings Module] [] [Settings could not be refreshed on the device.
    > Service Manager returned null on a call to enumerate services.] [] []
    > [DEBUG] [03/31/2011 08:38:48.187] [1904] [ZenworksWindowsService] [4]
    > [] [Sqlite] [] [(objInfo.db) ReadpVm.sqlite3_step call failed: ERROR.
    > Throwing exception] [] []
    > [DEBUG] [03/31/2011 08:38:48.234] [1904] [ZenworksWindowsService] [4]
    > [] [Sqlite] [] [(objInfo.db) SqliteCommand.ExecuteReader.finalize
    > returned error: CORRUPT] [] []
    > [DEBUG] [03/31/2011 08:38:48.468] [1904] [ZenworksWindowsService] [4]
    > [] [Sqlite] [] [(objInfo.db) SqliteCommand.ExecuteReader exceptionType:
    > Novell.Zenworks.Cache.Sqlite.SqliteExceptionMessage: (err=1): sqlite
    > step call failedStack Trace: bij
    > Novell.Zenworks.Cache.Sqlite.SqliteDataReader.ReadpVm(IntPtr pVm, Int32
    > version) bij
    > Novell.Zenworks.Cache.Sqlite.SqliteDataReader..ctor(SqliteCommand cmd,
    > IntPtr pVm, Int32 version) bij
    > Novell.Zenworks.Cache.Sqlite.SqliteCommand.ExecuteReader(CommandBehavior
    > behavior, Boolean want_results, Int32
  • I've had this issue too, when ZCM is unable to authenticate for various reasons.

    Do you have enabled the DisablePassiveModeLogonPrompt? This is the reason its appearing.

    I'm myself having huge issues with login times, and now after applying 2 different FTF's, its too fast in one stage for the policies to be properly applied before logon, so it fails, yet EVEN slower on other parts.
  • I think not:

    Which regsetting is it? then i will check for sure.



    theflyingcorpse;2091666 wrote:
    I've had this issue too, when ZCM is unable to authenticate for various reasons.

    Do you have enabled the DisablePassiveModeLogonPrompt? This is the reason its appearing.

    I'm myself having huge issues with login times, and now after applying 2 different FTF's, its too fast in one stage for the policies to be properly applied before logon, so it fails, yet EVEN slower on other parts.

  • [HKEY_LOCAL_MACHINE\SOFTWARE\Novell\ZCM\ZenLgn]
    "DisablePassiveModeLoginPrompt"=dword:00000001
  • We don't use that settings!. CLient does not have it:

    only:
    DomainLogin 1
    eDirLogin 1
    HonorClient32WorkstationOnlyCheckbox 1


    theflyingcorpse;2091715 wrote:

    [HKEY_LOCAL_MACHINE\SOFTWARE\Novell\ZCM\ZenLgn]
    "DisablePassiveModeLoginPrompt"=dword:00000001
  • floort;2091746 wrote:
    We don't use that settings!. CLient does not have it:

    only:
    DomainLogin 1
    eDirLogin 1
    HonorClient32WorkstationOnlyCheckbox 1


    its there to disable prompts if you type wrong pass, workstation only logon etc.
  • But this is a prompt that the authentication failed. So because it's a failure i want see it. If i'm going to disable the prompt the user logged in without zcm authentication and still nothing happend.

    theflyingcorpse;2091807 wrote:
    its there to disable prompts if you type wrong pass, workstation only logon etc.
  • Let me try this again, I was unclear: Its there to disable an extra prompt by ZCM if you used the wrong pass. Or if the user is outside the context used in the usersource in ZCM, it can instead offer to login to a different userprofile locally rather than ask for credentials in the realm.

    We had issues not related to ZCM, but to having 180 different containers with users, where we just wanted users from 12 containers, notified those, yet they used users also from other containers... =/
  • I think i found the problem.
    1 ldap connection server (oes2) has an expired Certificate.
    So i have renewed all my OES2 server certificates and updated zcm ldap connection certificate.

    I hope that was the problem. But i have to see how it goes.



    theflyingcorpse;2091852 wrote:
    Let me try this again, I was unclear: Its there to disable an extra prompt by ZCM if you used the wrong pass. Or if the user is outside the context used in the usersource in ZCM, it can instead offer to login to a different userprofile locally rather than ask for credentials in the realm.

    We had issues not related to ZCM, but to having 180 different containers with users, where we just wanted users from 12 containers, notified those, yet they used users also from other containers... =/