Submit a ticketCall us

WebinarUpcoming Webinar: How Help Desk and Remote Support Pays for Itself

Learn how help desk software can simplify ticketing management, allow you to track hardware and software assets, and accelerate the speed of IT support and service delivery. Gain insights on how remote support tools allow your IT team to maximize their efficiency and ticket resolution by expediting desktop troubleshooting, ultimately helping keep end-users happy and productive.

Register here.

Home > Success Center > Orion Platform > Orion - Knowledgebase Articles > Active Directory user: Login failure. User name and/or password incorrect.

Active Directory user: Login failure. User name and/or password incorrect.

 

Overview

When attempting to log into the Orion Web Console, an Active Directory (AD) user enters the correct username and password but gets the following message:

Login failure. User name and/or password incorrect. 

An entry similar to the following is in the OrionWeb.log, located at C:\ProgramData\Solarwinds\Logs\Orion\OrionWeb.log on your Orion server:

2017-07-17 14:41:19,628 [64] (348) WARN  SolarWinds.Orion.Web.OrionMixedModeAuth - (null)  System.Security.Authentication.AuthenticationException: Cannot logon 'username@domain' via Interactive/Default ---> System.Runtime.InteropServices.COMException: Logon failure: the user has not been granted the requested logon type at this computer. (Exception from HRESULT: 0x80070569)

Environment 

  • SolarWinds products running on the Orion Platform
  • All Orion Platform versions before 2017.3

 

Cause 

This is caused by a permissions issue.

 

With default setting users are not able to log-in using AD until they have rights to physical (interactive) log-in to device where IIS is hosted. 
If web.config value in EnableFallback is changed to "True" it lowers necessary rights for login to NetworkClearText (used in most of scenarios).
EnableFallback = True => means users are able to log-in without local log-in rights

 

Resolution

There are three ways to fix this error:

 

  • Enable Lightweight Directory Access Protocol (LDAP).

    1. Log in to the Web Console using a local Orion account (non-domain account).
    2. Click Settings > All Settings > User Accounts > Advanced AD Settings.
    3. Switch Authenticate Active Directory Users via LDAP to ON.
    4. Fill in the appropriate LDAP server information and Save.

 

  • If you cannot implement or prefer not to implement either of the above solutions, perform the following steps to enable the logon fallback in the Orion database, depending on which version of the Orion Platform you have:

+ If you have Orion Platform version 2014.2.1 or earlier

These steps are for version 2014.2.1 or earlier.

  1. Create a backup of your databases:

    • Orion: SolarwindsOrionDatabase

    • NCM: ConfigMgmt

  2. Log in to your Orion server as an administrator.

  3. Go to Start > Solarwinds Orion > Advanced Features > Database Manager.

  4. Click Add Server and provide the required details.

  5. Log in using your SQL Orion account.

  6. Right-click the SolarWinds Orion database.

  7. Click New Query.

  8. Copy and paste the following:

IF NOT EXISTS (SELECT [SettingName] FROM [dbo].[WebSettings] WHERE [SettingName]='LogonFallback')
BEGIN INSERT INTO [dbo].[WebSettings] ([SettingName],[SettingValue]) VALUES ('LogonFallback','True') END 
ELSE BEGIN UPDATE [dbo].[WebSettings] SET [SettingValue]='True' WHERE [SettingName] = 'LogonFallback' END
  1. Click Execute Query.

  2. Restart your SolarWinds website in Internet Information Services (IIS) Manager.

  3. Log in to the Web Console using your AD account.

The DB manager may indicate that 0 rows are affected. This can be ignored.

 

+ If you have Orion Platform version 2015.1 to 2017.1

These steps are for version 2015.1 to 2017.1.

  1. Create a backup of your databases:

    • Orion: SolarwindsOrionDatabase

    • NCM: ConfigMgmt

  2. Log in to your Orion server as an administrator.

  3. Go to Start > Solarwinds Orion > Advanced Features > Database Manager.

  4. Click Add Server and provide the required details.

  5. Log in using your SQL Orion account.

  6. Right-click the SolarWinds Orion database.

  7. Click New Query.

  8. Copy and paste the following:

IF NOT EXISTS (SELECT [SettingName] FROM [dbo].[WebSettings] WHERE [SettingName]='LogonFallback')
BEGIN INSERT INTO [dbo].[WebSettings] ([SettingName],[SettingValue]) VALUES ('LogonFallback','False') END 
ELSE BEGIN UPDATE [dbo].[WebSettings] SET [SettingValue]='False' WHERE [SettingName] = 'LogonFallback' END
  1. Click Execute Query.

  2. Restart your SolarWinds website in Internet Information Services (IIS) Manager.

  3. Log in to the Web Console using your AD account.

The DB manager may indicate that 0 rows are affected. This can be ignored.

+ If you have Orion Platform version 2017.3 or greater

As of version 2017.3, the logon fallback is already enabled by default. If you're still seeing a user name or password incorrect error, double check the user name and password.

 

For the same issue found in NPM 10.7 where evaluation methods during login are broken, install NPM 10.7 Hotfix 8.

 

Not sure which version of the Orion Platform you have? 

To find your version of the Orion Platform, scroll to the bottom of any page in the Orion Web Console:

Orion Platform version.png

 

 

 

Last modified

Tags

Classifications

Public