IV56762: REMOTE LOGIN FAILURES WITH AGENTLESS MONITORING FOR WINDOWS OS

IBM Tivoli Monitoring 6.3.0 Fix Pack 4 (6.3.0-TIV-ITM-FP0004)

APAR status

• Closed as program error.

Error description

• Severity:  3
  Approver:  MK
  Reported Release: 622 FP5
  Compid:  5724C04RW  Agentless Monitoring for Windows OS
  
  
  Problem Description:
  Event Logon/Logoff Failed (Event ID: 529) Windows events are
  generated on remote Windows systems being monitored by
  Agentless Monitoring for Windows.   This does not occur on all
  systems but was reported on Windows 2003 and 2008.
  
  Sometimes the events are generated at agent start-up and
  sometimes randomly over time.
  
    Example of the event:
    Type:  Failure Audit
    Source:  Security
    Category:  Logon/Logoff
    Event ID:  529
    User:  NT AUTHORITY\SYSTEM
    Logon Failure:
  
    Reason:
    Unknown user name or bad password
  
    User Name:
    ***\*****
  
    Domain:
  
    Logon Type:
    3
  
    Logon Process:
    NtLmSsp
  
    Authentication Package:
    NTLM
  
  
  Related Files and Output:  None.
  

Local fix

Problem summary

• Remote login failures with Agentless Monitoring for Windows OS.
  
  
  Windows events Event Logon/Logoff Failed (Event ID: 529) are
  generated on remote Windows systems being monitored by Agentless
  Monitoring for Windows.  This does not occur on all systems but
  was reported on Windows 2003 and 2008.  Sometimes the events are
  generated at agent start-up and sometimes randomly over time.
  

Problem conclusion

• Code was updated to call the Microsoft Windows LogonUserW with
  the userid and domain name specified in different fields.
  
  The fix for this APAR is contained in the following maintenance
  packages:
  
    | fix pack | 6.3.0-TIV-ITM-FP0004
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  ITM REMOTE WIND

• Fixed component ID

  5724C04RW

Applicable component levels

• R630 PSY

     UP