IBM Support

Multiple Event Viewer Application Log entries 'Login failed for user 'sa'. [CLIENT IP] on SQL Server

Troubleshooting


Problem

I.T. administrator opens up Event Viewer on the SQL Server, and opens the 'Application log'. There are multiple entries referring to login failures.

Symptom

Event Log title - SQL 2005:

Failure Audit <date> <time> MSSQLSERVER (4) 18456 N/A <SERVERNAME>

Event Log details - SQL 2005:

Event Type: Failure Audit
Event Source: MSSQL$SQL2005
Event Category: (4)
Event ID: 18456
Date: 27/11/2007
Time: 09:28:32
User: N/A
Computer: SERVERNAME
Description:
Login failed for user 'sa'. [CLIENT: 142.88.130.93]

Cause

Something is attempting to connect to the SQL server with the wrong password for the 'sa' user account, *and* the SQL server's security audit settings are configured to log failure events.

  • Example #1:
Administrator has created database connections inside Cognos Controller Configuration that use the 'sa' user account, but the wrong password.
  • Example #2:
Administrator has modified database connections inside Cognos Controller Configuration, but has forgotten to restart the Cognos Controller Batch Service to inform the system of these changes.

Resolving The Problem

Check both of the following, to ensure that the correct username/password are being used:

  • The 'application repository' database connection(s)
  • and the 'Data Mart' database connection(s)

Then get a short period of downtime, and restart the Controller Batch Server service.

Steps:
1. Logon to the Controller Application server
2. Launch Controller Configuration from the start menu
3. Check the settings inside the 'Database Connections' section
4. Check the settings inside the 'Database connections for publish to data mart' section
5. Obtain a short period of downtime
6. Restart the 'Cognos Controller Batch Server' Windows service.

[{"Product":{"code":"SS9S6B","label":"IBM Cognos Controller"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"Controller","Platform":[{"code":"PF033","label":"Windows"}],"Version":"8.3","Edition":"","Line of Business":{"code":"LOB10","label":"Data and AI"}}]

Historical Number

1037381

Document Information

Modified date:
15 June 2018

UID

swg21347518

Page Feedback