Network Management
Unable to login or authenticate in the Web Console using AD account in the SolarWinds Platform
This article provides information on the issue where users cannot log in using domain credentials to the SolarWinds Platform Web Console.
First published date
Last published date
Overview
This article explains when a local SolarWinds Platform account can log in successfully while a Windows credential cannot and then throws the error below in the SolarWinds Platform Web Console when attempting to login.
Login Failure. User name and/or password incorrect.
You will see the following error in the OrionWeb.log:
(Default location: C:\ProgramData\SolarWinds\Logs\Orion):
ERROR SolarWinds.Orion.Web.LdapAuthentication - (null) Could not connect Ldap server! ERROR SolarWinds.Orion.Web.OrionMixedModeAuth - (null) Failed to retrieve LdapIdentity for user domain\username. ERROR SolarWinds.Orion.Web.LdapAuthentication - (null) LdapException: The LDAP server is unavailable.
Product section
Cause
- Only have to configure advanced LDAP authentication if the SolarWinds Platform server is not a member of the domain of the individual/group users who can access the SolarWinds Platform Web Console
- If the SolarWinds Platform server is a member of the same domain as the users, there's no need to turn on LDAP
Resolution
Solution# 1
- Log in to the SolarWinds Platform Web Console using a local SolarWinds Platform account (non-domain account).
- Click Settings > All Settings > under the User Accounts section click Advanced AD Settings.
- Switch Authenticate Active Directory Users via LDAP to OFF then click SAVE.
- Click Settings > All Settings > under the User Accounts section click Advanced AD Settings.
- Switch Authenticate Active Directory Users via LDAP to ON then click SAVE.
Solution #2
- From the Database Manager right click on the database and open a new query and execute the SQL statement.
-- Scripts are not supported under any SolarWinds support program or service.
-- Scripts are provided AS IS without warranty of any kind. SolarWinds further
-- disclaims all warranties including, without limitation, any implied warranties
-- of merchantability or of fitness for a particular purpose. The risk arising
-- out of the use or performance of the scripts and documentation stays with you.
-- In no event shall SolarWinds or anyone else involved in the creation,
-- production, or delivery of the scripts be liable for any damages whatsoever
-- (including, without limitation, damages for loss of business profits, business
-- interruption, loss of business information, or other pecuniary loss) arising
-- out of the use of or inability to use the scripts or documentation.
IF NOT EXISTS (SELECT * FROM [dbo].[WebSettings] WHERE [SettingName] = 'LogonUserType')
BEGIN
INSERT INTO [dbo].[WebSettings] ([SettingName] ,[SettingValue]) VALUES ('LogonUserType', 'NetworkCleartext')
END
ELSE
BEGIN
UPDATE [dbo].[WebSettings] SET [SettingValue] = 'NetworkCleartext' WHERE [SettingName] = 'LogonUserType'
END
Solution #3
- Try another LDAP Auth Type on the Advanced Active Directory Settings page.
Solution# 4
- Log in to the SolarWinds Platform Web Console using a local SolarWinds Platform account (non-domain account).
- Click Settings > All Settings > under the User Accounts section click Advanced AD Settings.
- Switch Authenticate Active Directory Users via LDAP to OFF then click SAVE.
- Delete and recreate the Windows Group from the Manage Accounts..