Account Warning: SSO finishlogin failed in http logs

Sun Java(tm) System Messaging Server 6.2-7.05 (built Sep 5 2006)

libimta.so 6.2-7.05 (built 12:18:44, Sep 5 2006)

The above version is on our frontend MEM's and the backend store (2 frontends, 1 backend store).

We're starting to see errors in our http logs for valid Messaging users that look like this on the frontends:

[04/Jul/2007:19:34:30 -0400] mem httpd[27713]: Account Warning: SSO finishlogin failed for [141.157.XXX.XXX:64983] uid@domain.com Login incorrect

These errors do not show up in the backend logs.

We do not use UWC here, so I'm not sure where the "SSO" is coming from - unless it the frontend talking to the backend? It looks to me possibly a problem with our DS, however I can't find any errors that point to this in the access logs - there's all searches and binds that look successful.

Has anyone else seen these still using Messenger Express? My next thing is to look at all http logs to see if they're occurring around the same time and see if there's a link there.

[1045 byte] By [JHU_JESa] at [2007-11-27 9:46:25]
# 1
I would certainly look at the http logs to see if there're any errors, there.I'd also be looking for any kind of network issues.Is there any kind of consistancy for the ip addresses where the login failed? Perhaps you're under some kind of DOS attack.
jay_plesseta at 2007-7-12 23:56:55 > top of Java-index,E-Mail, Calendar, & Collaboration,Sun Java System Messaging Server...
# 2

hi Jay,

There's no errors on the backed http logs - it just shows either when messages are composed or when they've logged out. These errors only show up on our frontends MEMs.

There's no consistency to IP's addresses or what accounts it happens on (some are outside IP"s while others are from within our network) - they are all valid messaging users, and it will happen to some people on one day, once or twice, and then not happen again.

What kind of errors would show if the DS is doing a search on a user, but it's taking too long to come back - does Messaging have a set time of how long it will wait for the DS to respond?

JHU_JESa at 2007-7-12 23:56:55 > top of Java-index,E-Mail, Calendar, & Collaboration,Sun Java System Messaging Server...
# 3
I would expect to see errors in the default log, as well as in the http log on your MEM's. Another thought. . Do you use a load balancer between your MEM and your LDAP infractructure? If so, that's the first place to look.....
jay_plesseta at 2007-7-12 23:56:55 > top of Java-index,E-Mail, Calendar, & Collaboration,Sun Java System Messaging Server...