NinjaAx
Contributor
Contributor

Authentication Error

Jump to solution

Hi All,

Hope you can help with this one, At the vCenter Level when i go to tasks and events i can see an account that failing to authenticate see screenshot every 4-6 seconds, I've raised this with vmware support but they were unable to identify the source so just wondered if anyone else had any ideas on how i could find where this is coming from... Also the account that is being used is an admin account that's had its password changed recently hence the error but I'm not sure of the impact on the database or performance if its trying to run every few seconds.

Thanks :smileyconfused:

Alex

Capture.PNG

0 Kudos
1 Solution

Accepted Solutions
a_nut_in
Expert
Expert

Questions:

  1. What is the 10.102.66.224 machine? Is that the VC? If not, can you check on that IP address and see what machine that is and what services are installed?
  2. Enable Trivia logging on the VC VMware KB: Enabling trivia logging in vCenter Server
  3. Check the vpxd.log VMware KB: Location of vCenter Server log files In trivia, it will give you the IP address of the machine the loggin attempts are coming from. If the log in attempts are coming from a different IP address to your VC, check the services on that machine. If the log in attempts show localhost, disable all VMware services and enable services one at a time and check.
Do remember to mark my post as "helpful" or "correct" if I've helped resolve or answer your query!

View solution in original post

0 Kudos
7 Replies
Anjani_Kumar
Commander
Commander

Hi Freind,

You will get what you want here. VMware KB: vCenter Server Events reports the error: Cannot login DOMAIN\USERNAME@127.0.0.1

Please consider marking this answer "correct" or "helpful" if you found it useful. Anjani Kumar | VMware vExpert 2014-2015-2016 | Infrastructure Specialist Twitter : @anjaniyadav85 Website : http://www.Vmwareminds.com
0 Kudos
a_nut_in
Expert
Expert

Questions:

  1. What is the 10.102.66.224 machine? Is that the VC? If not, can you check on that IP address and see what machine that is and what services are installed?
  2. Enable Trivia logging on the VC VMware KB: Enabling trivia logging in vCenter Server
  3. Check the vpxd.log VMware KB: Location of vCenter Server log files In trivia, it will give you the IP address of the machine the loggin attempts are coming from. If the log in attempts are coming from a different IP address to your VC, check the services on that machine. If the log in attempts show localhost, disable all VMware services and enable services one at a time and check.
Do remember to mark my post as "helpful" or "correct" if I've helped resolve or answer your query!

View solution in original post

0 Kudos
athurston
Enthusiast
Enthusiast

Hi Ajani thanks for your reply, we don't currently use view so i am unable to check from the view administration portal.

0 Kudos
athurston
Enthusiast
Enthusiast

thanks a_nut_in ill give that a go, the ip address listed is the vcenter server so ill go through the next steps thanks.

0 Kudos
athurston
Enthusiast
Enthusiast

Ok, i think i may have found the culprit,

2014-01-06T11:34:55.525Z [05648 info '[SSO]' opID=73a9ca5a] [UserDirectorySso] Authenticate(netservice\powerm, "not shown")

2014-01-06T11:34:55.713Z [05648 error '[SSO]' opID=73a9ca5a] [UserDirectorySso] AcquireToken InvalidCredentialsException: Authentication failed: Authentication failed

2014-01-06T11:34:55.713Z [05648 error 'authvpxdUser' opID=73a9ca5a] Failed to authenticate user <netservice\powerm>

am i right in thinking this is the single sign on service and would we need to re-install this to prevent these authentication errors?

athurston
Enthusiast
Enthusiast

Sorted now thanks all for your help, turned out to be NetApp storage console that was installed with the account above, Thanks again. Alex

raffic_ncc
Enthusiast
Enthusiast

Thanks for sharing the info...

Mohammed Raffic VCP4,VCP5,VCAP4-DCA,VCAP5-DCA,VCP-Cloud, MCSA.MCTS,CCA http://www.vmwarearena.com
0 Kudos