Hi,
I have a report for senior management that details all access attempts - they have asked if the below can be explained.
Why is the first entry a success, but then followed by many failures, then another success?
Many thanks.
01/08/2016 22:28 | ddh | Success | Authentication method success |
|
|
|
|
01/08/2016 22:28 | ddh | Failure | Authentication method failed | Alias: "" | AUTHN_METHOD_FAILED | Authentication attempted | ERROR |
01/08/2016 22:28 | ddh | Failure | Authentication method failed | ERROR |
|
|
|
01/08/2016 22:28 | ddh | Failure | Authentication method failed |
|
|
|
|
01/08/2016 22:28 | ddh | Failure | Authentication method failed | Alias: "" | AUTHN_METHOD_FAILED | Authentication attempted | ERROR |
01/08/2016 22:28 | ddh | Failure | Authentication method failed | ERROR |
|
|
|
01/08/2016 22:28 | ddh | Failure | Authentication method failed |
|
|
|
|
01/08/2016 22:28 | ddh | Failure | Authentication method failed | Alias: "" | AUTHN_METHOD_FAILED | Authentication attempted | ERROR |
01/08/2016 22:28 | ddh | Success | Attempt successful |
|
|
|
|
01/08/2016 22:28 | ddh | Failure | Authentication method failed | ERROR |
|
|
|
01/08/2016 22:28 | ddh | Failure | Authentication method failed |
|
|
|
|
01/08/2016 22:28 | ddh | Failure | Authentication method failed | Alias: "" | AUTHN_METHOD_FAILED | Authentication attempted | ERROR |
01/08/2016 22:28 | ddh | Failure | Authentication method failed | ERROR |
|
|
|
01/08/2016 22:28 | ddh | Failure | Authentication method failed |
|
|
|
|
01/08/2016 22:28 | ddh | Failure | Authentication method failed | Alias: "" | AUTHN_METHOD_FAILED | Authentication attempted | ERROR |
01/08/2016 22:28 | ddh | Failure | Authentication method failed | ERROR |
|
|
|
01/08/2016 22:28 | ddh | Failure | Authentication method failed |
|
|
|
|
01/08/2016 22:28 | ddh | Failure | Authentication method failed | Alias: "" | AUTHN_METHOD_FAILED | Authentication attempted | ERROR |
01/08/2016 22:28 | ddh | Failure | Authentication method failed | ERROR |
|
|
|
01/08/2016 22:28 | ddh | Failure | Authentication method failed |
|
|
|
|
01/08/2016 22:28 | ddh | Failure | Authentication method failed | Alias: "" | AUTHN_METHOD_FAILED | Authentication attempted | ERROR |
01/08/2016 22:28 | ddh | Failure | Authentication method failed | ERROR |
|
|
|
01/08/2016 22:28 | ddh | Failure | Authentication method failed |
|
|
|
|
01/08/2016 22:28 | ddh | Success | Attempt successful |
|
|
|
|
01/08/2016 22:28 | ddh | Failure | Principal locked out |
|
|
|
|
01/08/2016 22:28 | ddh | Failure | Principal locked out |
|
|
|
|
01/08/2016 22:28 | ddh | Failure | Principal locked out |
|
|
|
|
01/08/2016 22:29 | ddh | Failure | Principal locked out |
|
|
|
|
01/08/2016 22:30 | ddh | Failure | Principal locked out |
|
|
|
|
01/08/2016 22:31 | ddh | Failure | Principal locked out |
|
|
|
|
01/08/2016 22:55 | ddh | Failure | Authentication method failed | Alias: "" | AUTHN_METHOD_FAILED | Authentication attempted | ERROR |
01/08/2016 22:55 | ddh | Failure | Authentication method failed | ERROR |
|
|
|
01/08/2016 22:55 | ddh | Failure | Authentication method failed |
|
|
|
|
01/08/2016 22:57 | ddh | Success | Authentication succeeded in next tokencode mode |
|
|
|
|
Hello Paul,
We need to check further that matter before knowing the exact problem that you are facing. It might be a lot of things that causing that problem.
1) The agent is sending duplicate replies to the server
2) The server is sending duplicate replies
3) Network problem that cause the packets to be duplicated
4) The user is typing the passcode more than once on the agent
To confirm which of the above is the problem we to take a packet capture on the agent and on the authentication manager server to confirm where is the problem coming from exactly.
And also we need to get a full detailed authentication activity monitor to see the exact error or failure that the server is sending to the agent, to confirm whether the behavior from the server is correct or not.
So kindly check and advise us back if there is any assistance needed from our side.
Best Regards,