Submit a ticketCall us

Systems Monitoring for Dummies
Our new eBook will teach you the fundamentals and help you create monitors and alerts that are effective, meaningful, and actionable. Monitoring is more than a checkbox on your to-do list. This free eBook will give you practical advice to help you succeed in all aspects of monitoring – discovery, alerting, remediation, and troubleshooting. Don’t miss out on this indispensable resource for newbies, experienced IT pros, and everyone in between. Register Now.

Home > Success Center > Orion Platform > Active Directory user: Login failure. User name and/or password incorrect.

Active Directory user: Login failure. User name and/or password incorrect.

 

Overview

When attempting to log into the Orion Web Console, an Active Directory (AD) user enters the correct username and password but gets the following message:

Login failure. User name and/or password incorrect. 

An entry similar to the following is in the OrionWeb.log, located at C:\ProgramData\Solarwinds\Logs\Orion\OrionWeb.log on your Orion server:

2017-07-17 14:41:19,628 [64] (348) WARN  SolarWinds.Orion.Web.OrionMixedModeAuth - (null)  System.Security.Authentication.AuthenticationException: Cannot logon 'username@domain' via Interactive/Default ---> System.Runtime.InteropServices.COMException: Logon failure: the user has not been granted the requested logon type at this computer. (Exception from HRESULT: 0x80070569)

Environment 

  • SolarWinds products running on the Orion Platform
  • All Orion Platform versions before 2017.3

 

Cause 

This is caused by a permissions issue.

 

With default setting users are not able to log-in using AD until they have rights to physical (interactive) log-in to device where IIS is hosted. 
If web.config value in EnableFallback is changed to "True" it lowers necessary rights for login to NetworkClearText (used in most of scenarios).
EnableFallback = True => means users are able to log-in without local log-in rights

 

Resolution

There are three ways to fix this error:

 

  • Enable Lightweight Directory Access Protocol (LDAP).

    1. Log in to the Web Console using a local Orion account (non-domain account).
    2. Click Settings > All Settings > User Accounts > Advanced AD Settings.
    3. Switch Authenticate Active Directory Users via LDAP to ON.
    4. Fill in the appropriate LDAP server information and Save.

 

  • If you cannot implement or prefer not to implement either of the above solutions, perform the following steps to enable the logon fallback in the Orion database, depending on which version of the Orion Platform you have:

+ If you have Orion Platform version 2014.2.1 or earlier

These steps are for version 2014.2.1 or earlier.

  1. Create a backup of your databases:

    • Orion: SolarwindsOrionDatabase

    • NCM: ConfigMgmt

  2. Log in to your Orion server as an administrator.

  3. Go to Start > Solarwinds Orion > Advanced Features > Database Manager.

  4. Click Add Server and provide the required details.

  5. Log in using your SQL Orion account.

  6. Right-click the SolarWinds Orion database.

  7. Click New Query.

  8. Copy and paste the following:

IF NOT EXISTS (SELECT [SettingName] FROM [dbo].[WebSettings] WHERE [SettingName]='LogonFallback')
BEGIN INSERT INTO [dbo].[WebSettings] ([SettingName],[SettingValue]) VALUES ('LogonFallback','True') END 
ELSE BEGIN UPDATE [dbo].[WebSettings] SET [SettingValue]='True' WHERE [SettingName] = 'LogonFallback' END
  1. Click Execute Query.

  2. Restart your SolarWinds website in Internet Information Services (IIS) Manager.

  3. Log in to the Web Console using your AD account.

The DB manager may indicate that 0 rows are affected. This can be ignored.

 

+ If you have Orion Platform version 2015.1 to 2017.1

These steps are for version 2015.1 to 2017.1.

  1. Create a backup of your databases:

    • Orion: SolarwindsOrionDatabase

    • NCM: ConfigMgmt

  2. Log in to your Orion server as an administrator.

  3. Go to Start > Solarwinds Orion > Advanced Features > Database Manager.

  4. Click Add Server and provide the required details.

  5. Log in using your SQL Orion account.

  6. Right-click the SolarWinds Orion database.

  7. Click New Query.

  8. Copy and paste the following:

IF NOT EXISTS (SELECT [SettingName] FROM [dbo].[WebSettings] WHERE [SettingName]='LogonFallback')
BEGIN INSERT INTO [dbo].[WebSettings] ([SettingName],[SettingValue]) VALUES ('LogonFallback','False') END 
ELSE BEGIN UPDATE [dbo].[WebSettings] SET [SettingValue]='False' WHERE [SettingName] = 'LogonFallback' END
  1. Click Execute Query.

  2. Restart your SolarWinds website in Internet Information Services (IIS) Manager.

  3. Log in to the Web Console using your AD account.

The DB manager may indicate that 0 rows are affected. This can be ignored.

+ If you have Orion Platform version 2017.3 or greater

As of version 2017.3, the logon fallback is already enabled by default. If you're still seeing a user name or password incorrect error, double check the user name and password.

 

For the same issue found in NPM 10.7 where evaluation methods during login are broken, install NPM 10.7 Hotfix 8.

 

Not sure which version of the Orion Platform you have? 

To find your version of the Orion Platform, scroll to the bottom of any page in the Orion Web Console:

Orion Platform version.png

 

 

 

Last modified

Tags

Classifications

Public