Login intermittently slow with ZCM agent AND Novell client

We continue to struggle with intermittently slow logins in our environment. In testing, we noticed that logins are very fast (10-20 seconds) when only the Novell Client is installed, and very fast (~10 seconds) when only the ZCM agent is installed. However, when they are both installed, logins slow down, sometimes to 1.5 minutes or longer.
We have checked DNS and rDNS, and they are both configured properly. SLP is working properly as demonstrated by the fast logins when only the client is installed. We use LDAP for user lookup, and it also works very fast to resolve user names (~ 1 second).
We are using ZCM 10.3.1, and the client is fully patched as well (both Novell Client 2 and 4.91)
Are there any specific settings (for the ZCM agent or the client itself) that might address this issue?

My apologies, I told you to remove the wrong thing.
I should have said NMAS instead of CASA.
I am just so used to saying CASA when talking about ZCM.
In regards to NMAS, you could simply rename "NWSSO.DLL" as a test.
If NMAS is installed which is tested by the existence of this DLL, then
a certain NMAS call is always made, which in some cases can take a long
time.
On 11/9/2010 12:06 PM, dshofkom33 wrote:
>
> craig_wilson;2042688 Wrote:
>> Try removing CASA from the device and see if that makes a difference.
>> A TID will be out on the issue soon.
>>
>> On 10/5/2010 4:36 PM, kjhurni wrote:
>>>
>>> Hmm, I will have to try that. I've only observed that with ZCM
>>> installed (with Novell Client 4.91 SP5 on XP) that the login time
>> goes
>>> from about 12-15 seconds to about 50-70 seconds.
>>>
>>> But I've not tried "just" the ZCM agent.
>>>
>>>
>>
>>
>> --
>> Craig Wilson - MCNE, MCSE, CCNA
>> Novell Knowledge Partner
>>
>> Novell does not officially monitor these forums.
>>
>> Suggestions/Opinions/Statements made by me are solely my own.
>> These thoughts may not be shared by either Novell or any rational
>> human.
>
> I removed CASA and now I cannot sign into ZCM. I get the "unable to
> login to network because the login credentials are incorrect" Windows
> Security Message. Any ideas?
>
>
Craig Wilson - MCNE, MCSE, CCNA
Novell Knowledge Partner
Novell does not officially monitor these forums.
Suggestions/Opinions/Statements made by me are solely my own.
These thoughts may not be shared by either Novell or any rational human.

Similar Messages

DHCP Conflict between ZfD 4 Agent and Novell Client

I am having problems with the use of Novell Client versions that support
DHCP settings tab (Tree, Context, Server).
This is in this board because my problem is only reproduced when ZENworks
for Destkops 4 (IR5 and IR7) Workstation Management component is installed.
THe problem is this:
Every now and then, logging in with the novell client displays 886f errors
in the login results window, and other strange communication errors.
If I release and renew the IP, it works fine after that.
If I reboot, there is a chance I get the same problem.
This absolutely does not happen when I have the two options for DHCP
settings in the Novell Client unchecked (Server->Binary Data).
Now, is ZfD Workstation Manager getting the Preferred Server IP from DHCP
as well during system startup? Is this clear? Happens on both Windows
2000 and Windows XP.
I have no access to the router serving DHCP so I don't know the details on
that end.

There was (is?) a conflict that is supposed to be solved,
but I'm not 100% convinced that is true. Since I always
use Client32 I remove novdhcp.dll in my ZfDAgent transform,
even now with ZDM7 because I've seen the "semaphore" error
there too if I don't.
See:
http://support.novell.com/cgi-bin/se...?/10090994.htm
http://support.novell.com/cgi-bin/se...?/10093676.htm
http://support.novell.com:80/cgi-bin...?/10091089.htm
Regards
Rolf Lidvall
Swedish Radio (Ltd)

Windows 7 Imaging with ZCM Agent installed

Has anyone successfully made a Windows 7 image with the ZCM agent already installed on the base image?
I am trying to get the unattended setup to login once to but the workstation prompts for the ZCM login information?
Any suggestions?

Yes
You have to disable the zcm logon prompt, then run a reghack to enable zcm logon as your last step after the first auto logon.

Big problem with ARD agent and versions.

This is going to be a bit lengthy so please bear with me. At my company I'm in charge of our 6 production G5 computers. My boss has permitted me to install ARD on them so that I can run the specialty programs we have on one without having to walk all the way across the department time and time again. The computers are from varying times in terms of processor speed and RAM but they are all running the same OS with all the same updates. All were running the ARD 3.0 Agent as it was in an update from apple not too long ago. I have uninstalled the agent and used a custom client install pack from ARD 2.2.
My computer is a dual 2GHz G5 and is the oldest of the 6. (here on referred to as Mac2) The other computer with problems is a dual 2.5GHz G5 and is called Mac7.
Mac2 is supposed to have the admin program on it, and I can install it but the program fails to start because it was either installed wrong or the computer needs a restart. I had this same error on my laptop at home but that is a MBP which is Intel. To solve the problem on intel computers i've been told to remove the remote-management folder from core-services and let ARD reinstall it on launch. This has not worked for the G5 at work. Furthermore at one point i could get control of Mac2 remotely from another computer, but after trying to reinstall the admin program again I cannot do that anymore. Even if i reset all ARD software and use the custom client install .pkg again.
As for Mac7, that computer was being run with the 3.0 agent on it and i could connect fine but couldn't lock the screen because of the mismatch. I did the exact same uninstall and reinstall of the ARD Agent that I did on the other computers and now I can't access that one either.
At the very least I need to be able to control these two computers, and I would like to have the Admin software work on Mac2 if possible. I see no reason why these problems should be occurring.
All systems are running 10.4.10 and have no third party remote software installed on them. On both Mac2 and 7 the ARD menu drop-down is showing as not active. All sharing preferences have been set right and there is no firewall. All accounts on both computers have been given all the rights possible for control.
If anyone has any advice please reply to this.

OK, I am still a bit confused - Mac2 is your computer, the one on which you want run the admin app to control other computers, correct? If ARD 2.2 will not start on that one, does it give an error message? I really suspect there are traces of 3.x agent causing the trouble, as I have had this problem myself. In essence, if you have version 2.2 admin, there is no reason to have 3.x agent for any reason whatsoever, it will just cause problems both on the admin and client side since Apple completely rewrote the way it works.
And, based on the first paragraph of your initial inquiry, I wonder if ARD is worth the trouble anyway, since it seems you could accomplish what you need with a simple VNC viewer (my up and coming favorite is JollysFastVNC). If you can't connect with a simple VNC viewer, you also won't be able to use ARD, as it's an extension of the VNC protocol.
However, if you want to make this work, let's work on Mac2 - follow the instructions at this page, down at the bottom: http://docs.info.apple.com/article.html?artnum=108021
It says: "Mac OS X 10.2 clients" but it's also the correct procedure for a complete and clean removal in 10.3 and 10.4
Then reinstall ARD 2.2 admin (you may have an earlier version installer, then install the admin updater). Don't mess with your custom client installer stuff. Just install the 2.2 admin app, and it will install the client it needs. I think this will make Mac2 work for you.

Problem with SQL Agent and Maintenance Job

Heloo All!
We planned to create maintenance job for daily backup database. But we got a error when we trying to create maintenance job, error -
An OLE DB error 0x80004005 ( Client unable to establish connection) occured while enumerating packages. A SQL statement was issued and failed).
Did anybody solve this problem?
Also we founded that SQL Server Agent status - stopped.
I trying to start Agent, and got error:
TITLE: Microsoft SQL Server Management Studio
Unable to start service SQLAGENT$server_name on server server_name. (mscorlib)
ADDITIONAL INFORMATION:
The SQLAGENT$server_name service on server_name started and then stopped. (ObjectExplorer)
If anybody solve this problems, please request me!
Thanks, in advance!
Best regards,
Ravil!

All replies
Thanks for links
I started Agent by your first link. But after starting Agent service, service stops immediately.
And after restarting service i got this error:
The SQL Server Agent service on Local Computer started and then stopped. Some Services stop automatically if they
are not in use by other services or programs.
Olaf Helper
We are using MSSQL 2008 R2 Standart Edition x64
OS - Windows Server 2008 R2 x64

GW 2014 and Novell Client

Hi,
since we upgraded to GroupWise 2014 SP1 HP1 some (but not all) of our users
(still GW 2012 Clients) complain that they have to authenticate twice,
Novell Client and GroupWise.. is there a change because of the decoupling of
GW and eDirectory? Something to be aware of? I did not find anything in the
docu...
Thanks,
Mirko

Massimo Rosen wrote:
> Mirko,
>
> Am 09.04.2015 um 13:44 schrieb Mirko Guldner:
>>
>> I verified this...
>>
>> We have "Use eDirectory Authentication instead of password" set and
>> locked on the domain level.
>
> Well, that explains then why the option isn't there in the client.
Ah, ok, I see that now. Then possibly it was the other options that my
collegues sometimes saw - I think I didn't ask precisely...
> Which basically leaves the idea that somehow the association between GW
> and eDir user got lost/broken.
What is the best way to check this? If "Sychronize" in Admin Console updates
"Contact information" correctly the association should be all right,
shouldn't it? Additionaly I check LDAP DN in "Diagnostics". I did not see
any problems there.
I seems that only users with clients before 12.0.3 HP1 are affected; as soon
as users upgrade to 12.0.3 HP1 or 14.0.1 HP1 login works as before.
Thanks,
Mirko

Wireless Security and Novell Client

To all,
I am currently looking to upgrade our existing Network Infrastructure toa secure 802.11b network and we have purchase Cisco Secure ACS. We plan to use LEAD with our system and require a radius sign-on using our Novell Client. The problem I have is planning this and how I can setup the workstations. We use ZEN Works for our management of workstations and this means that the Novell client must be the primary sign-on. How can I get the Novell client to be the primary sign-on and still use LEAP? The Novell client requires a network connection before it can bring up a login screen. Any thoughts or tips would be greatly appreciated. Have a great day!
Adam Osterholt
Network Manager
The Children's Medical Center
Dayton, OH

We have the same configuration here at my place of work (Novell, ACS, ZEN,etc). In my testing it depended on the OS that the client was using. On the win95/98 clients I had to set the primary login to the Novell client but save the LEAP user name and password in the wireless profile within the ACU on the client. During the client boot up, the LEAP username logs in automatically and the Novell login screen appears for login. I could not get it to work properly with prompting the user to enter their LEAP username/password. This process only work as login as my ACS server database was local to the ACS server. If the ACS server is set to use an NT domain as its user DB the LEAP auto-login did not work....
I did not have this problem with win2000 or winXP clients.
Hope this helps.
Rob

Strange problem with AIX server and windows clients

I am having a real bizzare problem with WLS 7.0.1 running on AIX 5.1 and
clients on windows. We have J2SE Swing application as a client.
If the client is w2k or XP, the first client gets good response. If I start
another client the second client is horribly slow (2 sec vs 16 sec). Even if
I kill the first client the second client continues to be slow. If I have 2
clients open together, the first one continues giving 2 sec response while
the second one continues with 16 sec. For that matter if I start another
client after shutting down first one I get slow (16 sec) response.
If the client is NT client I always get good and consistent response from
the server. Irrespective of how many client I have on the NT machine, I keep
getting good response. NT and W2K laptops are seating right next to each
other on the same n/w and infact the NT is a much slower and lessor memory
machine than W2K.
We did similar tests keeping server on Solaris or NT server or W2K server,
and the clients "behave" normally i.e I get consistent repsponse time (it
may be slow or fast, but it is consistent and is consistent b/w NT and W2K).
We even tried putting my laptop on the same network as the AIX server, but
it did not help. Unfortunately some of our clients will be using AIX and
W2K.
HELP!!!!

"Cameron Purdy" <[email protected]> wrote in message
news:[email protected]..
Sounds like a reverse DNS lookup or similar network timeout.Thanks for the suggestion, but then why would the first client on w2k or XP
get a better performance and the subsequent clients get worse performance?
>
Peace,
Cameron Purdy
Tangosol, Inc.
http://www.tangosol.com/coherence.jsp
Tangosol Coherence: Clustered Replicated Cache for Weblogic
"vinay moharil" <[email protected]> wrote in message
news:[email protected]..
I am having a real bizzare problem with WLS 7.0.1 running on AIX 5.1 and
clients on windows. We have J2SE Swing application as a client.
If the client is w2k or XP, the first client gets good response. If Istart
another client the second client is horribly slow (2 sec vs 16 sec).
Even
if
I kill the first client the second client continues to be slow. If I
have
2
clients open together, the first one continues giving 2 sec response
while
the second one continues with 16 sec. For that matter if I start another
client after shutting down first one I get slow (16 sec) response.
If the client is NT client I always get good and consistent responsefrom
the server. Irrespective of how many client I have on the NT machine, Ikeep
getting good response. NT and W2K laptops are seating right next to each
other on the same n/w and infact the NT is a much slower and lessor
memory
machine than W2K.
We did similar tests keeping server on Solaris or NT server or W2Kserver,
and the clients "behave" normally i.e I get consistent repsponse time(it
may be slow or fast, but it is consistent and is consistent b/w NT andW2K).
We even tried putting my laptop on the same network as the AIX server,
but
it did not help. Unfortunately some of our clients will be using AIX and
W2K.
HELP!!!!

ZCM Agent and Secret Store access

We are trying to enable NetIQ IAC (Identity Assurance client) Smart Card login into Windows 7 workstation.
I can't mange ZENworks client to login after successful SmartCard authentication to eDirectory.
It seems that Zenworks client during login can not load library to access Secret store:
ZENLGN [35C-3E8] [15:00:02:473] About to call Read Secret Store
ZENLGN [35C-3E8] [15:00:02:473] NWSSLoadDLL called!
ZENLGN [35C-3E8] [15:00:02:473] LoadLibrary for NWSSO.DLL failed: 126
ZENLGN [35C-3E8] [15:00:02:473] Returned from Read Secret Store
ZCM is 10.3.3, Windows 7 32 bit
NDS (password) login works fine.
Any ideas would be appreciated.

Originally Posted by BSajovic
We are trying to enable NetIQ IAC (Identity Assurance client) Smart Card login into Windows 7 workstation.
I can't mange ZENworks client to login after successful SmartCard authentication to eDirectory.
It seems that Zenworks client during login can not load library to access Secret store:
ZENLGN [35C-3E8] [15:00:02:473] About to call Read Secret Store
ZENLGN [35C-3E8] [15:00:02:473] NWSSLoadDLL called!
ZENLGN [35C-3E8] [15:00:02:473] LoadLibrary for NWSSO.DLL failed: 126
ZENLGN [35C-3E8] [15:00:02:473] Returned from Read Secret Store
ZCM is 10.3.3, Windows 7 32 bit
NDS (password) login works fine.
Any ideas would be appreciated.
From the documentation:
Authentication in to ZENworks by using Smart Card is currently supported only on Windows XP and terminal sessions of Windows Server 2003 device
https://www.novell.com/documentation...q.html#bmh2xsk
Thomas

Active Directory login soooo slow with 10.4.11 client upgrades

Hi All,
I have a problem and hopefully someone will be able to help me.
We have around 30 Macs in and a golden triangle set up with Mac OS X Server 10.3 on Xserves and a Windows Server 2003 as the PDC and primary DNS server.
Basically, after upgrading the clients to 10.4.11 the log in process takes an extra 90 seconds to connect. The login window will appear but you are not able to log in until after 90 seconds. During the 90 seconds there are "Some Network Accounts Available" but this is just the Open Directory accounts in the background.
I have tested with 10.4.4 up to 10.4.10 and this problem does not appear but once I upgrade to 10.4.11 then the problem comes back so I don't believe it is a server orientated problem.
I also attempted using the old Active Directory plug-in within Directory Access from 10.4.8 and 10.4.10 in place of the one installed with 10.4.11 and this did not help with the matter.
Does anyone know what has changed with 10.4.11 and what I could possibly do to resolve this problem?
I probably haven't covered all the bases so let me know if you need more information.
Dehsinotsa

Answered at http://discussions.apple.com/message.jspa?messageID=13129261

IMac 5k slow with Indesign CC2014 and PDF's?

I have a new iMac 5k, i7 4ghz processor, 24 gigs of ram, AMD Radeon M29FX with 4 gigs of DDR5 ram gpu and 1 TB of flash storage. I upgraded to this from a mid 2012 Retina MacBook pro, i7 2.6 ghz processor, 16 gigs of ram and a NVIDEO GeForce 650M 1024 gpu with a 512 flash storage. I was expecting to see some serious improvements in speed, especially when handling large pdf's. This iMac actually feels slower, like it is lagging trying to process the images. I am running Adobe CC 2014, Indesign, Illustrator, Photoshop and Acrobat all with the latest updates.
Is this something where the Adobe apps are not optimized for the 5K screen? Or is the Graphics card just not good with the Adobe apps? I do not know what to think. It is a brand new computer with some great specs, but the old Retina MacBook Pro seems much faster when it comes to handling pdf's and working with overprint preview on in indesign.

Hey, all of my Adobe products run in the range of extremely slow to unusable; InDesign is by far the worst. Like you, I run a decked out 5K iMac and Adobe CC 2014. Oddly most people have problems with Illustrator, however I find Illustrator to be usable, yet InDesign and Acrobat are nearly unusable. I would do anything to get rid of my iMac and get my much faster 3 year old iMac back.
Adobe has mentioned they are working on a fix for Illustrator however I have not seen any mention of InDesign. I suspect they will apply the same fix across the board if there is a software fix for this. Apple quadrupled the number of pixels on the iMac screen and that is a lot to ask of Adobe CC.

Network logins not working with 10.7 and 10.8 clients

Hi
I have Snow Leopard Server (10.6.8) running on a Mac Mini for the past 3 years. The client Macs were all running Snow Leopard and could happily do network logins. I recently upgraded my client Macs to 10.7 and 10.8.Now they cannot login via Network logins. Only via the Other selection. Network logins produces the Error occured dialog box. Once users do a local login, they have access to all server services (file sharing, calendar, messaging, contacts, etc.)
The server is setup as a OD Master with Kerberos. The changeip check is all good. The DNS is working. I have made no changes to the server. Only the clients were upgraded from Snow Leopard.
I have read a lot about similar problems but still haven't solved this problem.
I hope someone can help.
Kind regards
Michael

Hi all
I solved this annoying issue
It was an Open Directory issue. If you have upgraded clients to 10.7 or 10.8 from 10.6, the OD Master passwords are incompatible with 10.7 or 10.8.
The fix is simple.
1. Stop AFP file shares
2. Export Users, Groups and Computers from Workgroup Manager then quit the the Workgroup Manager
3. Demote the OD Master to Standalone
4. Promote the Standalone OD to a Master OD,
5. Reimport the Users, Groups and Computers back into Workgroup Manager
6. Reset all passwords and home folders
7. Rebind all clients computers
That's it.
I hope this helps someone.
Cheers
Michael

Shift + command + f   very slow with cs4 clone and healing tool?

using cs4-- i use the shift + command + f a lot to fade in or out the clone tool and healing brush.
however in cs4 the preview is very slow-- even though i have 8gb of ram!
the same process on the same file in cs3 is rapid-- even with only 2gb of ram-- so i assume this is a cs4 problem?
any solutions appreciated.

Do you mean photoshop elements 7 and not premiere elements?
The fix posted above only applies to linux os systems, which is
different from mac and windows.
On windows vista Alt+left click is to set the clone source.
Try the following steps one at a time.
1. reset the clone stamp tool by clicking triangle on the far left of the
   tool options bar and select reset tool.
2. Go to Edit>Preset Manager and click Done in the dialog that appears.
3. Reset the elements 7 preferences by holding down the Shift+Alt+Ctrl keys
    at the same time you start elements 7. In the dialog that appears, click yes.
Hope this helps.
MTSTUNER

[SOLVED] a problem with gpg-agent and ssh keys

I'm baffled by a strangle problem:
My setup is as follows: I use gpg-agent with --enable-ssh-support, so that my ssh keys are handled by it. All was fine (when I ssh'ed to another machine, a pinentry window popped up, asked for a password, and if I entered the correct one, gpg-agent would decrypt its copy of my private ssh key and use it for identification). But: I needed to change my ssh key, and so I generated a new one. Next, I ssh-add'ed it to gpg-agent (one password to decrypt the private key, then twice another password for gpg-agent). I uploaded the public key to a server. The setup should be complete.
The problem is that when I ssh to a machine, a pinentry window comes up, but it does not accept my password (the one that I entered twice when ssh-add'ing the key). I tried adding with various different passwords (always deleting ~/.gnupg/private-keys-v1.d/*, since 'ssh-add -d ~/.ssh/id_rsa.pub' would not work for some reason - it would not make gpg-agent forget the key), different pinentry programs ( -qt4, -gtk-2, -curses), and still the same problems. Pinentry itself seems to work fine, since if I enter two different things when it asks for a new passphrase for the key, it detects that there's a problem.
So, can anyone help? What could I try (please don't post just to say that I could/should use ssh-agent, or keychain, or anything else. I have used various things, and I like this setup the most. It worked before, and I would like to find out why it stopped working and how to get it back to speed.)
Thanks.
Last edited by bender02 (2010-02-15 09:52:54)

Thats a known bug with the new gpg version.
http://lists.gnupg.org/pipermail/gnupg- … 38045.html
You could use an older version of gpg or use a development version.

Mail slow with ios 6, and iOS 6 very slow and sticky in general

Ok, since I upgraded to iOS 6, my mail has been totally buggy on my iPad (version 3). It keeps sticking and showing the spinning icon when trying to download mail. I do a hard reset, and it works for a little while most of the time, but then sticks again. For what it is worth, my mail downloads from an exchange server. My iPhones (the 4 that I have from before getting the 5, as wells as the 5) do mail fine.
In general iOS 6 has made my devices as slow as mud even on other matters (one of many minor examples is that it will not unlock promptly - you try to enter the numbers and nothing happens for a few seconds - no numbers, no nothing - until it unsticks). In general, it feels like I have a PC with a virus.
Any solutions?

I feel this is part of the planned obselecence strategy. Sell you a fantastic device and then proceed to break it by incremental and non-reversible upgrades that make your device less and less useful, until it is a pale shadow of the device you purchased. Then stop providing upgrades for the product full stop, leaving it crippled.
The only constructive advice I can think of is to never accept an upgrade, because it seems that we are always slightly worse off afterwards then before.
Seriously; what extra useful functions has iOS6 given us over iOS5? A few gimmicks at the expense of losing the incredibly polished and integrated YouTube and Google Maps. And now, right on cue, scrolling of screen content is starting to judder and lag on brand new products such as iPad3. Iphone5 will have it's turn in a few months when iOS6.1 is out. It will be touted as a bug fix but we all know that it will be designed to simply accelerate hardware decriptude.
Apple are in for a seriously serious wake up call in the next year if they don't get thier act together. They can't keep on treating customers like this. The only other piece of constructive advice I can give is this; if you own any Apple shares, sell now.
Jon.

Login intermittently slow with ZCM agent AND Novell client

Similar Messages

Maybe you are looking for