Network Management

Login failed for user 'Domain\servername' seen in SQL Server logs for Orion

The article addresses the issue regarding SQL Server logs containing login errors

First published date

10/18/2018 9:29 PM

Last published date

12/15/2022 10:44 PM

Overview

The SQL Server log contains the following error:  
 

Login failed for user '<Domain\ServerName>' Reason: Could not find a login matching the name provided. 


The article addresses the issue regarding SQL Server logs containing login errors

 

Product section

Orion Platform

Cause

The issue is in each poller's SWNetPerfmon.db file:

The user name in the message is not a user. It's the server name. It means the server itself is trying to login to SQL Server and can occur on the main polling engine and additional polling engines.
 

# Encrypted Connection String for SQL Server added by Orion Core Services

# 13/12/2017 11:27:22

ConnectionString=provider=SQLOLEDB.1;persist security info=False;initial catalog=SolarWindsOrion;data source=orion-prd-db01,13870;use procedure for 
prepare=1;auto translate=True;packet size=4096;workstation id=ORION-Server;tag with column collation when possible=False;integrated security=SSPI;Max 
Pool Size=1000


The file is missing the following line:
 

user id=xxxxx;Encrypted.password=xxxxxx


Because the SWNetPerfmon.db file contains no user name and password, which causes errors in the SQL server log.

Resolution

Solution

To resolve this issue:

  1. Move the existing database file to the desktop or another location outside the SolarWinds installation location.
  • \\InstallationDrive:\Program Files (x86)\SolarWinds\Orion\SWNetPerfmon.db
 
  1. Rerun the Configuration Wizard with the correct database account to log in for all databases.

This creates a new SWNetPerfmon.db file with the user name and password in it.

 

Note: In some cases, you may see a Warning in the OrionWeb.log similar to the error below:

WARN  SolarWinds.Orion.Web.Platform.ApiRequest - (null)  An untrusted server certificate was received from endpoint 
'https://xxx.xxx.xxx.xxx/api2/content/viewgroups'. RemoteCertificateNameMismatch


Additional Error in the logs (NPM 12.4):

SWISv3.log

Invalid Username for User 'NT Authority\System'

 

OrionWeb.log

WARN  SolarWinds.VIM.Web.DAL.NetObjectDAL - (null)  PollingSource for viewType=NotVIMObject and id=269 was not found.
WARN  SolarWinds.Orion.Web.ViewManager - (null)  Condition '167' for view 'CloudInstanceSubViewHandler' cannot be loaded