Data Center Security

 View Only

 intermittent AD user login failure to UMC

Sankarasubramanian Hariharaputhiran's profile image
Sankarasubramanian Hariharaputhiran posted Nov 25, 2020 02:12 AM
Hello Team,

This issue occurring at irregular intervals not continuous.

We have Symantec DCS UMC integrated with LDAP and AD users added with required roles. When we try to login to UMC using AD user account getting failed. 

UMC log shows the below error

2020-11-25 09:12:02 ERROR AdAuthenticationServices:69 - .....USER LOGIN FAILURE : Domainalias\userXYZ Exception=error="access_denied", error_description="Access token denied."
2020-11-25 09:12:02 INFO WebSocketController:43 - Websocket token received: MGIyNzVlOWItZmM4NS00M2E2LTk2YjktYzQxYjcyNDY5ODE1
2020-11-25 09:12:02 INFO WebSocketController:106 - Websocket token decode: 0b275e9b-fc85-43a6-96b9-c41b72469815
2020-11-25 09:12:03 INFO WebSocketController:115 - Either token not valid or session expired for userXYZ@intra.domain.com

Checked with AD admin and he says he there is no hit from this particular user at the time of login failure.

After few minutes tried to login with the same user and logged in successfully. Verified the UMC log and this time it received different token and says token is valid.

2020-11-25 09:21:40 INFO AdAuthenticationServices:66 - .....USER LOGGED IN : userXYZ@intra.domain.com
2020-11-25 09:21:40 INFO WebSocketController:43 - Websocket token received: ZDMzMDg0NzktYTJiYy00ZTJiLWIzZjItZWNjZDAzZTJmZGU0
2020-11-25 09:21:40 INFO WebSocketController:106 - Websocket token decode: d3308479-a2bc-4e2b-b3f2-eccd03e2fde4
2020-11-25 09:21:48 INFO WebSocketController:111 - Token received is valid: d3308479-a2bc-4e2b-b3f2-eccd03e2fde4

Can some explain how does this token based authentication works in DCS UMC and what could be the reason for this intermittent login failure


Many thanks