IBM Support

QRadar: Unable to authenticate when logging in Console

Troubleshooting


Problem

When attempting to log in a user is given this error: "Authentication attempt blocked, user is already authenticated. Ensure you are not logged in on a different host."

Cause

The 'Unique User Account Login' value in System Settings is set to true. Setting this value to true prevents QRadar from authenticating a user more than once. Changing it to false and having an inactivity time out value set allow you to log in to multiple sessions, but will close the session if inactive.

Resolving The Problem

To resolve the issue:

  1. Log in to the QRadar User Interface with administrator privileges.
  2. Click the Admin tab.
  3. Click the System Settings icon.
  4. Click Authentication Settings.
  5. Select Unique User Account Login and change it to False.

  6. Select Inactivity Timeout and configure an interval.

  7. From the Admin tab, click Deploy Changes.


You can now log in to multiple QRadar sessions with your user credentials.



Where do you find more information?

[{"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"General Information","Platform":[{"code":"PF016","label":"Linux"}],"Version":"Version Independent","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Document Information

Modified date:
16 June 2018

UID

swg21997975