Thanks.  We are looking at that for some additional info.

I really hoping that some one can tell me the difference between (user) and 
(password) being tagged on the line in the user log.

Dave

-----Original Message-----
From: Action Request System discussion list(ARSList) 
[mailto:arsl...@arslist.org] On Behalf Of Nichols, Wesley D CTR USAF AFMC 72 
CS/SCBAF
Sent: Wednesday, July 15, 2009 10:31 AM
To: arslist@ARSLIST.ORG
Subject: Re: Active Directory Integration

You might try looking at the plug-in logs... You can set the
granularity, I believe you have to add Plugin-Log-Level: 100 to you
config file.  This should give a ton of information about the
interaction between AD and the AREA plugin...

-----Original Message-----
From: Action Request System discussion list(ARSList)
[mailto:arsl...@arslist.org] On Behalf Of Shellman, David
Sent: Wednesday, July 15, 2009 9:14 AM
To: arslist@ARSLIST.ORG
Subject: Active Directory Integration

** 
We configured our 7.0.1 server (Windows server Oracle instance) to
validate passwords against Active Directory over the weekend.  Monday
morning was a little rough with locking out network accounts.  We also
had a configuration issue where were not able to check one of the OU's.
We changed the configuration but we still had a few users where we are
having login issues.
 
While looking at the user log file I noticed a changed with what is
written out to the log for a login failure.  What I'm seeing is that
sometimes (password) is at the end of the line and sometimes (user) is
at the end of the line. For certain users it's consistently one or the
other.  In some cases it changes from one to another.  In one case it's
about 2 minutes between the change.  In another it's 4 seconds.
 
<USER: xxxxxxxx > /* Mon Jul 13 2009 09:38:22.0820 */         LOGIN
FAILED   xxxxxxxx   (user)
<USER: xxxxxxxx > /* Mon Jul 13 2009 09:40:50.7970 */         LOGIN
FAILED   xxxxxxxx   (password)
 
<USER: yyyyyyyy > /* Mon Jul 13 2009 15:12:12.9630 */         LOGIN
FAILED   yyyyyyyy   (user)
<USER: yyyyyyyy > /* Mon Jul 13 2009 15:12:16.9450 */         LOGIN
FAILED   yyyyyyyy   (password)
 
Any one have an understanding of what the logs are trying to tell me?
 
Thanks,
Dave
 
Dave Shellman
 
Phone:  (717) 810-3687
Fax:    (717) 810-2124
email:  dave.shell...@tycoelectronics.com
 
Tyco Electronics
MS 161-043
PO Box 3608
Harrisburg, PA 17105-3607
 
 
 
_Platinum Sponsor: rmisoluti...@verizon.net ARSlist: "Where the Answers
Are"_ 

_______________________________________________________________________________
UNSUBSCRIBE or access ARSlist Archives at www.arslist.org
Platinum Sponsor:rmisoluti...@verizon.net ARSlist: "Where the Answers Are"

_______________________________________________________________________________
UNSUBSCRIBE or access ARSlist Archives at www.arslist.org
Platinum Sponsor:rmisoluti...@verizon.net ARSlist: "Where the Answers Are"

Reply via email to