This discussion has been locked. The information referenced herein may be inaccurate due to age, software updates, or external references.

You can no longer post new replies to this discussion. If you have a similar question you can start a new discussion in this forum.

SNMPv2-MIB:authenticationFailure - How to find issue and fix????

eptii over 14 years ago

We are getting alot of these errors in the trap viewer on our Solarwinds Server. What is causing them and how do we fix?

2/9/2010 12:55:57 PM private SNMPv2-MIB:authenticationFailure sysUpTime=28 days 11 hours 43 minutes 7.18 seconds

snmpTrapOID=SNMPv2-MIB:authenticationFailure

experimental.1057.1=

snmpTrapEnterprise=MSFT-MIB:server

0 eptii over 14 years ago

I added localhost to two of the servers that were sending these traps under the snmp service and 'accept snmp packets from these hosts' and it so far seems to have fixed the issue. Any thoughts on why?
Cancel
Vote Up 0 Vote Down

Cancel
0 sedmo over 14 years ago in reply to eptii

See if this thread helps.
Cancel
Vote Up 0 Vote Down

Cancel
0 eptii over 14 years ago in reply to sedmo

thanks...I added localhost to a few more servers and so far I am still getting the alerts....any more ideas?
Cancel
Vote Up 0 Vote Down

Cancel
0 ecklerwr1 over 14 years ago in reply to eptii

You might also get some clues to what's happening by looking at the event logs on the server itsself. Also make sure that something like a host firewall isn't causing the issue.
Cancel
Vote Up 0 Vote Down

Cancel
0 eptii over 14 years ago in reply to ecklerwr1

event logs don't show anything about what is happening and no firewall turned on
Cancel
Vote Up 0 Vote Down

Cancel
0 sedmo over 14 years ago in reply to eptii

You might also try adding the servers IP address to the "allowed" list.
Cancel
Vote Up 0 Vote Down

Cancel
0 eptii over 14 years ago

I added the servers ip address and it is still happening. Any other ideas?
Cancel
Vote Up 0 Vote Down

Cancel
0 bshopp over 14 years ago in reply to eptii

Might want to open a ticket with support to look into
Cancel
Vote Up 0 Vote Down

Cancel
0 eptii over 14 years ago in reply to bshopp

Here is the respons I received from support but I don't believe either of these things are happening
Thank you for contacting SolarWinds. These traps are being sent by your Windows servers as someone added a check to Send Authentication Trap in the Windows SNMP Service properties. Usually this is indicative of a device trying to query the system with a bad comm string, or someone failing to log in. To remove these, you can always edit the SNMP service on the machine sending this information and remove the check from Send Authentication Trap. This will keep these from coming in.

The above information should have answered this question. I will close this case out at this time. If you run into any other questions on this issue, you can reply back and I can answer those questions. For other questions or issues, please don't hesitate to open a new case online.
Cancel
Vote Up 0 Vote Down

Cancel
0 holtman over 14 years ago in reply to eptii

I just had this issue last week. Are those physical servers generating the errors? Would they happen to be HP servers?
Cancel
Vote Up 0 Vote Down

Cancel