The most recent content from our members.
Anyone else seeing SolarWinds trying to authenticate with Kerberos even though the polling engine is set to default? Polling works fine using NTLM and Wmi Probe. Not sure why Kerberos is trying also authenticate.
We’re excited to announce general availability for version 2023.1 of the SolarWinds® Platform, SolarWinds Hybrid Cloud Observability, and the Network and Infrastructure modules. Version 2023.1 is now available for all customers under maintenance, so log in to your customer portal to download it. Want to see everything new?…
Hi all, I have a report from our Security team (probably Splunk logs) of failed kerberos authentication events to multiple Servers (Service indicates RPCSS/Host/Cifs) using the service account we used to poll and manage nodes (which templates would import from the node too). The Source IP shows our main polling server, the…
If anyone has patched their domain controllers with KB 5019964, you may notice RDP authentication issues. MORE importantly, I have noticed issues with SWQL Studio and Network Atlas authenticating with my orion servers. Orion 2020.2.6 HF5 and SWQL Studio 3.1.343 are affected. There is a fix coming from Microsoft. Please…
So here is the $10,000 question for the day. I have discovered that all of the authentication traffic coming from my polling engines to my monitored nodes (domain controllers) is using NTLM. My first question is: Why is NTLM being used vs. Kerberos. My polling engines are in the same domain? Question #2 is: How would one…
We recently applied a new security policy to some of our servers that blocks the ability for SAM to query them. The domain controllers lit up with failed password attempts. After many late nights and much investigation we found that this new policy is blocking NTLMv1 authentication attempts. Is there a way to force SAM to…
Hi Everyone, Just thought I'd share some information. Our current SolarWinds infrastructure is: (1) NCM Server (virtual) (1) SolarWinds Database server (physical) (3) Pollers (They were physical but we migrated them to VM because at the time we believed that this was good solution We experienced tons of alerts after…
It looks like you're new here. Sign in or register to get started.