Saturday, April 16, 2011

awesome Citrix Datastore lockout SQL

Early in the day I must of entered in the wrong password for the SQL the account that is used for the datastore. Which I didn't know at the time, later than night it eventually locked out the account

Notice on the datastore the application eventlogs went nuts, servers being unable to authenticate to the database.

Then jumped on servers after a reboot and the server security log stated the citrix server account was locked out.

Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 531
Date: 15/04/2011
Time: 10:22:39 PM
User: NT AUTHORITY\SYSTEM
Computer: xxCPS01
Description:
Logon Failure:
Reason: Account currently disabled
User Name:
Domain:
Logon Type: 3
Logon Process: Authz
Authentication Package: Kerberos
Workstation Name: xxCPS01

jumped on the pdc... nope not locked out.
started checking other server computer accounts
then service accounts and found the datastore account was locked out.

just for fun used dsmaint config to confirm all was working okay.

Got lots of red cross on the Admin console... so it was exciting

No comments: