Passive mode login no longer works on WinXP machines after ZCM 11.2 upgrade

  • 7004819
  • 24-Apr-2012
  • 23-Apr-2015


Novell ZENworks 11 Configuration Management Support Pack 2 - ZCM 11 SP2 Authentication


ZCM 11 SP2, Windows XP and Novell Client 4.91 SP5.
Workstations are part of AD and the following registry key is set
[HKLM\Software\Novell\NWGina]\ PassiveMode is set to 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Novell\Login]  PassiveModeNDSLogin is set to 1

After upgrading to ZCM 11 SP2 the ZCM user login window is now appearing and requires username and password to be entered.


A fix for this issue is intended to be included in a future update to the product: however, in the interim, Novell has made a Patch available for testing, as part of a Monthly patch update: it can be obtained at as "ZCM 11.2 Monthly Update 2 - see TID 7006918". This update should only be applied if the symptoms above are being experienced, and are causing problems.

Please report any problems encountered when using this Patch, by using the feedback link on this TID.

Note for DLU login issues related to the same root cause see KB 7016449 at


ZCM 11 SP2 has a new method of computing the Full DN for the user. It is not checking for the PassiveMode registry key being set for Gina, it is just checking for NWClient being installed and workstation only login is not attempted.
Since Passive mode is set, NWGina is having NULL for context information, this causes NWDSWhoAmI query to return [public].
ZCM login fails to login as [public] , thus bringing up the ZCM login window.