"Authentication Failure, Please Try Again.." in the Server Activity Logs and SCM Server Logs

Products

• Endpoint Protection

Issue/Introduction

Getting message "Authentication Failure, please try again" in the server activity logs.

Symptoms: 
Getting message "Authentication Failure, please try again" in the server activity logs.

This only occurs on one Manager in a replication environment.

The following is seen in the scm-server-0 logs:

Event type: An unexpected exception has occurred
Event description: Authentication Failure. Please try again.
Error message: 
Error code: 
Stack trace: com.sygate.scm.server.util.ServerException: Authentication Failure. Please try again. at com.sygate.scm.server.task.ScheduledReportingHelper.doReportingLogin(ScheduledReportingHelper.java:459) at com.sygate.scm.server.task.SecurityAlertNotifyTask.processNotifications(SecurityAlertNotifyTask.java:415) at com.sygate.scm.server.task.SecurityAlertNotifyTask.run(SecurityAlertNotifyTask.java:283) at java.util.TimerThread.mainLoop(Timer.java:512) at java.util.TimerThread.run(Timer.java:462) 
Site: mgc
Server: svr-egc-mde-01
Date: 01/05/2011 09:16:26
Severity: Severe

Resolution

Authenication Errors in the Server logs could point to the following:

 

• User Accounts which are no longer valid or locked
• Reports or Notifications created by Users which are no longer active or accounts delete
• Accounts switched from AD to Symantec Management Account
• SEPM to SQL Connectivity (run the Server Reconfiguration Wizard and reference Symantec Article TECH95721)
• Confirm the the Active Directory Server in Windows Command Prompt (SET | more and look for LOGONSERVER=\\[domain controller in the output)
• Out of Sync System Clock or the SEPM may need to be joined back up to the Domain

 

Another area to check is the Directory Server under Admin\Servers and make it sure it references the same server for the synchronized Administrator Accounts. Both sections to be the same for SEPM to properly access the Directory Server for using synchronized Administrator Accounts.

1. Login to the SEPM
2. Go to Admin ->Servers and click on the SEPM server.
3. Click on Edit Server Properties.
4. In Server Properties click on the Directory Servers tab.
5. Edit the old Directory Server to point to the new Directory Server.
6. Click OK.
7. Now browse to Admin-->Administrators.
8. Select the Administrator you wish to edit.
9. Click on Edit Administrator Properties.
10. Go to the Authentication tab.
11. Specify the correct Directory Server for this account to reference.