This section contains explanation on some of the user authentication related problems. To troubleshoot other problems you might encounter during authentication, see TID 3273870 in the Novell Support Knowledgebase.
Large number of concurrent client logins might result in login failures
How do I enable debug logs on Windows 2003, Windows XP, and Windows Vista devices?
Unable to log into the ZENworks Server when logging in to a Windows Vista device
Unable to seamlessly log in to Novell SecureLogin on a device that has Novell ZENworks installed
Incorrect username displayed in the ZENworks Login screen
Click the desktop
menu > .In the Run window, specify
, then click .Double-click the username and edit both the
and of the user.Click
.Unable to log in to the ZENworks Server
Large number of concurrent client logins might result in login failures
On a Windows server:
Log in as an administrator.
Open the ZENworks_Install_path\share\ats\catalinabase\conf\server.xml file.
In the Define a SSL Coyote HTTP/1.1 Connector on port 2645 section, change the value of the Connector acceptCount to the desired value. A value of 300 is optimal.
Restart the Authentication Token Service:
On the desktop, click
> .In the Run window, specify
, then click .Restart
.On a Linux server:
Log in as root.
Open the /srv/www/casaats/conf/server.xml file.
In the Define a SSL Coyote HTTP/1.1 Connector on port 2645 section, change the value of the Connector acceptCount to the desired value. A value of 300 is optimal.
Restart the Authentication Token Service:
At the server prompt, go to /etc/init.d/.
Run the casa_atsd restart command.
How do I enable debug logs on Windows 2003, Windows XP, and Windows Vista devices?
How do I enable the CASA debug logs?
Logging in to the user source on a ZENworks Server is slow
Open the Registry Editor.
Go to HKEY_LOCAL_MACHINE\Software\Novell\ZCM.
Create a String called ZENLoginUserRefreshAsync and set the value to TRUE.
Log in to the device again.
IMPORTANT:If you change the login process to execute the device refresh asynchronously, the latest policies might not be immediately available. With this change, you make the login performance more important than the accuracy of the policies.
Unable to log into the ZENworks Server when logging in to a Windows Vista device
Open the Registry Editor.
Go to HKLM\Software\Protocom\SecureLogin\.
Create a DWORD called ForceHKLMandNoDPAPI, and set the value to 1.
Restart the device.
The settings assigned to an eDirectory user are not applied on the device where the user has logged in
For example: Assume that user1 and user2 have the same username and password:
User1: CN = bob, OU = org1, O = Company1 (bob.org1.company1)
User2: CN = bob, OU = org2, O = Company1 (bob.org2.company1)
When user2 specifies the username and password to log in to a device, user1 is logged in to the device instead of user2 because user1 appears first in the search performed by Novell CASA. The settings assigned to user1 are applied on the device.
The ZENworks login screen is not displayed on a device if Novell Client has been uninstalled from the device
Using a Smart Card to authenticate in to a device prompts the user to specify the eDirectory password
Logging in to the user source on a ZENworks Server from a managed device might be slow if Trend Micro AntiVirus Plus AntiSpyware is installed on the device
NalView.exe runs on the device during user login, resulting in a delay in the overall login time.
Disable NalView.exe at login time:
NOTE:If you choose to disable Nalview.exe at login time, then the bundle icons is not placed on the device Start menu, desktop, notification area, and the Quick Launch area of the Windows taskbar. However, the bundle icon is placed in the application window of the device.
Open the Registry Editor.
Go to HKLM\SOFTWARE\Netware\Nal\1.0\NalView\.
Create a DWORD called Disabled and set its value to 1.
Log in to the device again.
Launch NalView.exe after a delay of x seconds from the login time:
Open the Registry Editor.
Go to HKLM\SOFTWARE\Netware\Nal\1.0\NalView\.
Create a DWORD called Delay and set its value to the time (in seconds) by which you want to delay the launch of NalView.exe.
Log in to the device again.
Unable to seamlessly log in to Novell SecureLogin on a device that has Novell ZENworks installed
On a device that has ZENworks installed, if Novell SecureLogin does not start seamlessly after the device desktop opens, the authentication registry keys might not be properly set on the device.
Open the Registry Editor.
Go to HKLM\SOFTWARE\Novell\NWGINA\.
Create a DWORD called PassiveMode and set its value to 1.
Ensure that HKLM\Software\Novell\Login\LDAP\GinaLoginDone is set to 0.
Log in to the device again.