[cisco-voip] FW: [RTMT-ALERT-CM1-Cluster] AuthenticationFailed

[Wes Sisk]

IMS (identity management system) traces in RTMT give some insight but 
even those are lacking:

CSCsj66480    Login attempts for CCMAdmin, DRS, and Serv do not display 
interface name

"interface name" basically means if the auth request comes from CTI, 
ccmuser, ccmadmin, etc.

/Wes


On Tuesday, September 29, 2009 4:37:21 PM, Tim Reimers 
<treimers at ashevillenc.gov> wrote:
>  
>  
>  
> Number of AuthenticationFailed events exceeds 1 within 1 minutes. The 
> alert is generated on Tue Sep 29 11:11:27 EDT 2009 on cluster 
> CM1-Cluster.
>  
>  
> Does anyone know where a Cisco document is on how to use traces to 
> find that?
>  
> I've looked in various trace lots in RTMT, but I cannot figure out the 
> right trace (callmanager, system, SDI, etc) to be looking for.
>  
> I can find plenty of references telling me that it's an authentication 
> failure
> ( eg 
> http://www.cisco.com/en/US/docs/voice_ip_comm/cucm/service/7_0_1/rtmt_master/rtalsys.html)
>  
> But that document provides -no- assistance in learning how to track 
> down more details about what's going on.
>  
> This really doesn't tell me what to DO about it.
>
>
>     AuthenticationFailed
>
> Authentication validates the user ID and password that are submitted 
> during log in. An alarm gets raised when an invalid user ID and/or the 
> password gets used.
>
> Default Configuration
>
> Table D-1 Default Configuration for the AuthenticationFailed RTMT Alert 
>
> Value
> 	
> Default Configuration
>
> Enable Alert
>
> 	
>
> Selected
>
> Severity
>
> 	
>
> Critical
>
> Enable/Disable this alert on the following servers
>
> 	
>
> Enabled on listed servers
>
> Threshold
>
> 	
>
> Number of AuthenticationFailed events exceeds:
>
> 1 time in the last 1 minute
>
> Duration
>
> 	
>
> Trigger alert immediately
>
> Frequency
>
> 	
>
> Trigger alert on every poll
>
> Schedule
>
> 	
>
> 24 hours daily
>
> Enable Email
>
> 	
>
> Selected
>
> Trigger Alert Action
>
> 	
>
> Default
>
>  
> Tim Reimers
> Systems Analyst II
> Information Technology Services
> City of Asheville
> 70 Court Plaza
> Asheville, NC 28801
> phone - 828-259-5512
> treimers at ashevillenc.gov <mailto:timreimers at ashevillenc.gov>
>  
> ------------------------------------------------------------------------
>
> _______________________________________________
> cisco-voip mailing list
> cisco-voip at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-voip
>   

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20090929/e6ae2ebd/attachment.html>