Additional logins

[Chad Paulson]

Hi All,

I have followed teh steps laid out in the guide as to how to add additional domain accounts to IM7 SP2 and assign them the different IM permission levels. It all looks correct. But when I try to log in with any of the other accounts it always states "Login failed Authentication" I know the accounts work correctly they are the other admini accounts for the domain and login to a workstation fine. However I can not get IM to accept the authentication.

Any help would be greatly appreiciated.

Thanx

[Rob Buxton]

Have you entered the domain?
The domain name needs to be in the bottom Login field and this should match the domain chosen when the account was created in IM.

There should be a Major Event generated in IM when an incorrect login appears. This may also give an indication of what's wrong.

[Chad Paulson]

Hi Rob,

I am using the same domain name as I used to select the accounts when tring to login to the main page.

I do get a major eror listing. But all it states is "Login Failed Authentication" I know the password is correct. I tested teh account and passwrd by loging into the domain.

Any further help would be greatly accepted.

Thanx,
Chad

[Jadrice Toussaint]

Log in with the admin account, go to Devices -> Event -> Systems Functions -> All Failed login Events.

attach a screenshot of one of the failed login events.

[Chad Paulson]

Hi Jadrice,

As requested here is a copy of one of the failure errors.

Thanx,
Chad

[Jeff Mathews]

Chad, are you able to log in to IM from the IM server itself using one of these accounts?

Jeff

[Chad Paulson]

No.

I can login to IM locally or from a remote station with the orignal admin account that I gave it during the installation. However it does not matter if I try locally or remotely with any of the other accounts I setup in IM. I get the same error.

Thanx,
Chad

[Jadrice Toussaint]

Does your insight Manager 7 server has an underscore _ or a hyphen - in its name?

[Chad Paulson]

No, Just numbers and letters.

Chad

[Rob Buxton]

Chad,

The file you attached indicated that it was failing the password authentication.

If you have an invalid Username or don't have the domain name specified the error returned is "Login Attempt By Invalid User"

So, for some reason the password mechanism between IM and AD isn't working. I can only suggest the usual culprits, caps lock etc.

Weird why it's working on the Admin account that was set up and not on others.

Check from the Accounts screen that no restrictions have been set up.

[Chad Paulson]

Rob,

Tell me about it. It's driving me nuts. For some reason Im is having an issue with the NT 4 domain users EXCEPT the account I installed it with. I have verified that there are no restrictions listed in the admin section.

The odd thing about it is that the system does recognise and read the domain. It proves that when I browse to add teh users. But for some reason it doesn't halde the password correctly.

If you come up with any other idea's please let me know.

Thanx for the time,

Chad

[Jeff Mathews]

Chad, why don't you try creating a couple of local accounts on your IM Server and adding them to the account list in IM. Then see if you can log in using those accounts. It will rule out a problem with the IM setup, and point to more of a networking issue from the IM server if you are able to log in successfully. Then you could look into the DNS/WINS setup of the IM server, or things like that. What do you think?

Jeff

[Doug Koenig]

You didn't say what types of account you added. The problem that you might be having is IM7 does not work with domain groups. Individual ids work but not groups.

[Chad Paulson]

Hey Jeff,

Great call. I created a local account on the system and then created an account in IM using the local account instead of the domain account and it was able to connect fine.

Now why IM will only authenticate the 1 domain account and not any of the others could prove interesting.

Atleast I have a better idea of what's going on ...... kinda :)

Thanx,
Chad

[Jeff Mathews]

Well, at least you ruled out your install of Insight Manager as the culprit. Now we need to look into your os, and domain setup. Are you getting any errors in the event logs (security for instance) when you try to log into Insight Manager with one of the domain accounts that doesn't work? Is there any difference with the local machine rights of the account your originally setup IM with, and the accounts that don't work? For instance is the one that is working a local admin of the box?

Jeff

[Chad Paulson]

That's the odd thing,

The account I used for the setup was a domain admin account. The other accounts I am adding are also domain admin acounts with the exact same memberships.

I wonder if it would make a difference if I changed the install to a BDC server instead? This would stop it from even knowing about a local user / group.

Any thoughts on moving the install to a BDC?

Thanx,
Chad

[Jeff Mathews]

Well, I think I would only do that as a last resort, or if the BDC doesn't have much load. I think that would fix your issue though.