Monitoring and reporting for Veeam Backup & Replication, VMware vSphere and Microsoft Hyper-V
Post Reply
bartuus
Novice
Posts: 5
Liked: never
Joined: Jul 01, 2011 4:06 pm
Contact:

Logins to account not used anymore from Veeam One Monitor

Post by bartuus » Jul 25, 2014 2:43 pm

We have Veeam One 7 deployed.
After installation and deployment we changed password for account we used as service account and SQL connectivity.
And since then on AD we see login attempts which are rejected. We imagine that the old password is still remembered somewhere.

Whats more - we created new account - and used it for as "Log On account" for Veeam services and configured in Database (as we use Windows Athentication) and Web Identity tabs.
But still see AD logs attempts from the old account - each 10 seconds.

We spotted that Veeam One Monitor service is the evil one, since when it is down, log attempts do not occur.

Are there any other places where acoounts are configured?
Where else these old settings can be remembered?

Vitaliy S.
Product Manager
Posts: 22868
Liked: 1540 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: Logins to account not used anymore from Veeam One Monito

Post by Vitaliy S. » Jul 25, 2014 9:13 pm

Can you please tell me how did you change the service account? Were you using our support tool for that? See the location of this utility:

Code: Select all

C:\Program Files\Common Files\Veeam\Veeam ONE Settings\VeeamOneSettings.exe

bartuus
Novice
Posts: 5
Liked: never
Joined: Jul 01, 2011 4:06 pm
Contact:

Re: Logins to account not used anymore from Veeam One Monito

Post by bartuus » Jul 27, 2014 9:19 pm

Yes, I used this tool.
But as it goes for "Veeam One Monitor", I'd expect it would use credentials set in windows service "Log on as" since "Windows authentocation" is choosen on Database tab.
"Test Connection" ends with success, at least.
Vitaliy S. wrote:Can you please tell me how did you change the service account? Were you using our support tool for that? See the location of this utility:

Code: Select all

C:\Program Files\Common Files\Veeam\Veeam ONE Settings\VeeamOneSettings.exe

Vitaliy S.
Product Manager
Posts: 22868
Liked: 1540 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: Logins to account not used anymore from Veeam One Monito

Post by Vitaliy S. » Jul 28, 2014 8:09 am

Yes, you're correct, but the proper way to change service account is to use this tool for Veeam ONE monitor service and Web Identity. What about Veeam ONE machine itself? Do you see any bad logon attempts in the Windows Event Log -> Security tab?

bartuus
Novice
Posts: 5
Liked: never
Joined: Jul 01, 2011 4:06 pm
Contact:

Re: Logins to account not used anymore from Veeam One Monito

Post by bartuus » Jul 28, 2014 9:40 am

No, nothing suspicious on Veeam One machine logs itself.
As for the Veeam One Settings console - when I select "Windows Authentication" at Database tab, User Name and Password fields are greyed out.
So the only way credentials can be set there is to select "SQL Server Authentication", fill the credentials fields and then select "Windows Authentication".
Is it proper way?

Vitaliy S.
Product Manager
Posts: 22868
Liked: 1540 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: Logins to account not used anymore from Veeam One Monito

Post by Vitaliy S. » Jul 28, 2014 10:55 am

Can you go to Services snap-in and check what account is currently used for Veeam Monitor Service? Can you retype your new account there?
bartuus wrote:As for the Veeam One Settings console - when I select "Windows Authentication" at Database tab, User Name and Password fields are greyed out.
So the only way credentials can be set there is to select "SQL Server Authentication", fill the credentials fields and then select "Windows Authentication".
Not exactly, windows authentication is performed under the account you start this utility.

bartuus
Novice
Posts: 5
Liked: never
Joined: Jul 01, 2011 4:06 pm
Contact:

Re: Logins to account not used anymore from Veeam One Monito

Post by bartuus » Jul 28, 2014 11:24 am

This is the mistery - for both services (Monitor and Reporter) - there is new account is configured as "Log on as" (services restarted and so on). And they are running with this account.
Still - seems like Veeam One Monitor still remembers old account and tries to authenticate with Domain Controler with this old account.

Vitaliy S.
Product Manager
Posts: 22868
Liked: 1540 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: Logins to account not used anymore from Veeam One Monito

Post by Vitaliy S. » Jul 28, 2014 11:45 am

Ok, in this case if service restart does not help either, please contact our technical team, so they could take a look a this behavior on the remote WebEx session.

bartuus
Novice
Posts: 5
Liked: never
Joined: Jul 01, 2011 4:06 pm
Contact:

Re: Logins to account not used anymore from Veeam One Monito

Post by bartuus » Jul 28, 2014 12:52 pm

I've case opened with this problem.

Post Reply

Who is online

Users browsing this forum: No registered users and 6 guests