Security Compliance

User login fails and SEM is the source of the failed events

This article provides information when login fails and the SEM machine is the source of the issue.

First published date

10/17/2018 5:46 PM

Last published date

10/17/2018 5:46 PM

Overview

This article provides information when login fails and the Security Event Manager (formerly Log & Event Manager) machine is the source of the issue. 

Product section

Security Event Manager

Cause

The issue is caused when passwords are updated and old passwords are retained in the system.

Resolution

  1. Check the Web Console for cached passwords.
    1. Click Manage > Appliances.
    2. Click the gear icon on the left of the window, and then select Connectors. 
    3. Select Configured to sort by Configured Connectors. 
    4. Review the Directory Services and Email Active Response Connectors. If the account exists, stop the Connector, and then edit settings.
    5. Save the new settings.
    6. Restart the connector.
  2. Check the CMC for cached passwords.
    1. Enter manager.
    2. Enter backupconfig and confirm your saved settings.
    3. If the account exists, re-enter the configuration. If the account does not exist, enter 6 to exit the menu.
    4. Repeat Steps 2a to 2c for archiveconfig and logbackupconfig.
  3. For versions 6.3.1 and later, check the LDAP settings via the MVC page.