Authentication Error

[NinjaAx]

Hi All,

Hope you can help with this one, At the vCenter Level when i go to tasks and events i can see an account that failing to authenticate see screenshot every 4-6 seconds, I've raised this with vmware support but they were unable to identify the source so just wondered if anyone else had any ideas on how i could find where this is coming from... Also the account that is being used is an admin account that's had its password changed recently hence the error but I'm not sure of the impact on the database or performance if its trying to run every few seconds.

Thanks :smileyconfused:

Alex

[Anjani_Kumar]

Hi Freind,

You will get what you want here. VMware KB: vCenter Server Events reports the error: Cannot login DOMAIN\USERNAME@127.0.0.1

[a_nut_in · Accepted solution]

Questions:

1. What is the 10.102.66.224 machine? Is that the VC? If not, can you check on that IP address and see what machine that is and what services are installed?
2. Enable Trivia logging on the VC VMware KB: Enabling trivia logging in vCenter Server
3. Check the vpxd.log VMware KB: Location of vCenter Server log files In trivia, it will give you the IP address of the machine the loggin attempts are coming from. If the log in attempts are coming from a different IP address to your VC, check the services on that machine. If the log in attempts show localhost, disable all VMware services and enable services one at a time and check.

[athurston]

Hi Ajani thanks for your reply, we don't currently use view so i am unable to check from the view administration portal.

[athurston]

thanks a_nut_in ill give that a go, the ip address listed is the vcenter server so ill go through the next steps thanks.

[athurston]

Ok, i think i may have found the culprit,

2014-01-06T11:34:55.525Z [05648 info '[SSO]' opID=73a9ca5a] [UserDirectorySso] Authenticate(netservice\powerm, "not shown")

2014-01-06T11:34:55.713Z [05648 error '[SSO]' opID=73a9ca5a] [UserDirectorySso] AcquireToken InvalidCredentialsException: Authentication failed: Authentication failed

2014-01-06T11:34:55.713Z [05648 error 'authvpxdUser' opID=73a9ca5a] Failed to authenticate user <netservice\powerm>

am i right in thinking this is the single sign on service and would we need to re-install this to prevent these authentication errors?

[athurston]

Sorted now thanks all for your help, turned out to be NetApp storage console that was installed with the account above, Thanks again. Alex

[raffic_ncc]

Thanks for sharing the info...