Logins to account not used anymore from Veeam One Monitor

Monitoring and reporting for Veeam Backup & Replication, VMware vSphere and Microsoft Hyper-V

Logins to account not used anymore from Veeam One Monitor

Veeam Logoby bartuus » Fri Jul 25, 2014 2:43 pm

We have Veeam One 7 deployed.
After installation and deployment we changed password for account we used as service account and SQL connectivity.
And since then on AD we see login attempts which are rejected. We imagine that the old password is still remembered somewhere.

Whats more - we created new account - and used it for as "Log On account" for Veeam services and configured in Database (as we use Windows Athentication) and Web Identity tabs.
But still see AD logs attempts from the old account - each 10 seconds.

We spotted that Veeam One Monitor service is the evil one, since when it is down, log attempts do not occur.

Are there any other places where acoounts are configured?
Where else these old settings can be remembered?
bartuus
Novice
 
Posts: 5
Liked: never
Joined: Fri Jul 01, 2011 4:06 pm

Re: Logins to account not used anymore from Veeam One Monito

Veeam Logoby Vitaliy S. » Fri Jul 25, 2014 9:13 pm

Can you please tell me how did you change the service account? Were you using our support tool for that? See the location of this utility:
Code: Select all
C:\Program Files\Common Files\Veeam\Veeam ONE Settings\VeeamOneSettings.exe
Vitaliy S.
Veeam Software
 
Posts: 19558
Liked: 1102 times
Joined: Mon Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov

Re: Logins to account not used anymore from Veeam One Monito

Veeam Logoby bartuus » Sun Jul 27, 2014 9:19 pm

Yes, I used this tool.
But as it goes for "Veeam One Monitor", I'd expect it would use credentials set in windows service "Log on as" since "Windows authentocation" is choosen on Database tab.
"Test Connection" ends with success, at least.

Vitaliy S. wrote:Can you please tell me how did you change the service account? Were you using our support tool for that? See the location of this utility:
Code: Select all
C:\Program Files\Common Files\Veeam\Veeam ONE Settings\VeeamOneSettings.exe
bartuus
Novice
 
Posts: 5
Liked: never
Joined: Fri Jul 01, 2011 4:06 pm

Re: Logins to account not used anymore from Veeam One Monito

Veeam Logoby Vitaliy S. » Mon Jul 28, 2014 8:09 am

Yes, you're correct, but the proper way to change service account is to use this tool for Veeam ONE monitor service and Web Identity. What about Veeam ONE machine itself? Do you see any bad logon attempts in the Windows Event Log -> Security tab?
Vitaliy S.
Veeam Software
 
Posts: 19558
Liked: 1102 times
Joined: Mon Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov

Re: Logins to account not used anymore from Veeam One Monito

Veeam Logoby bartuus » Mon Jul 28, 2014 9:40 am

No, nothing suspicious on Veeam One machine logs itself.
As for the Veeam One Settings console - when I select "Windows Authentication" at Database tab, User Name and Password fields are greyed out.
So the only way credentials can be set there is to select "SQL Server Authentication", fill the credentials fields and then select "Windows Authentication".
Is it proper way?
bartuus
Novice
 
Posts: 5
Liked: never
Joined: Fri Jul 01, 2011 4:06 pm

Re: Logins to account not used anymore from Veeam One Monito

Veeam Logoby Vitaliy S. » Mon Jul 28, 2014 10:55 am

Can you go to Services snap-in and check what account is currently used for Veeam Monitor Service? Can you retype your new account there?

bartuus wrote:As for the Veeam One Settings console - when I select "Windows Authentication" at Database tab, User Name and Password fields are greyed out.
So the only way credentials can be set there is to select "SQL Server Authentication", fill the credentials fields and then select "Windows Authentication".

Not exactly, windows authentication is performed under the account you start this utility.
Vitaliy S.
Veeam Software
 
Posts: 19558
Liked: 1102 times
Joined: Mon Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov

Re: Logins to account not used anymore from Veeam One Monito

Veeam Logoby bartuus » Mon Jul 28, 2014 11:24 am

This is the mistery - for both services (Monitor and Reporter) - there is new account is configured as "Log on as" (services restarted and so on). And they are running with this account.
Still - seems like Veeam One Monitor still remembers old account and tries to authenticate with Domain Controler with this old account.
bartuus
Novice
 
Posts: 5
Liked: never
Joined: Fri Jul 01, 2011 4:06 pm

Re: Logins to account not used anymore from Veeam One Monito

Veeam Logoby Vitaliy S. » Mon Jul 28, 2014 11:45 am

Ok, in this case if service restart does not help either, please contact our technical team, so they could take a look a this behavior on the remote WebEx session.
Vitaliy S.
Veeam Software
 
Posts: 19558
Liked: 1102 times
Joined: Mon Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov

Re: Logins to account not used anymore from Veeam One Monito

Veeam Logoby bartuus » Mon Jul 28, 2014 12:52 pm

I've case opened with this problem.
bartuus
Novice
 
Posts: 5
Liked: never
Joined: Fri Jul 01, 2011 4:06 pm


Return to Veeam ONE



Who is online

Users browsing this forum: Google [Bot] and 5 guests