Failed Logins Per Hour Fills Up Daily

[weberap]

I have a problem where I have one server in my tree that shows around 300 failed sign ins in the Failed Login Log in Remote Manager every day. The times are all at 12:00pm and 12:01pm. These all show the server as the object trying to sign in, but there are several different IPs listed, all of which are workstation addresses.

There are no problems with users being able to work or accounts getting locked. My only clue that something is wrong is this log. Has anyone else had this problem?? Any fixes??

It is Netware 6.5SP5 with OES eDirectory 8.7.3.7.

 

[Provogeek]

a couple of things I would try;

Rebuild server addresses, it's in DSREPAIR (forget off hand right now the exact location).

Update to eDir 8.7.3.9

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
Brent Schmidt SPOOOOON!!!!!
Senior Network Engineer
Keep IT Simple

http://www.kiscc.com

 

[weberap]

Finally found out this must somehow be related to Symantec Anti Virus. We run the corporate version on this server. All clients at this office were scheduled to check in to that server for new definitions at noon. Tested this thought by changing the update time to be 10:30 am instead. At 10:30 today, I got over 200 failed log in attempts. Not sure how to fix this though.