User login fails and SEM is the source of the failed events
This article provides information on when a login fails and the SEM machine is the source of the issue
OVERVIEW
This article provides information about when the login fails and the Security Event Manager (formerly Log & Event Manager) machine is the source of the issue.
ENVIRONMENT
LEM 6.2 - EOL;LEM 6.3 - EOL;LEM 6.4 - EOL;LEM 6.5 - EOL;LEM 6.6 - EOL;SEM 6.7;SEM 2019.4
CAUSE
The issue is caused when passwords are updated and old passwords are retained in the system.
RESOLUTION
Check the Web Console for cached passwords.Click Manage > Appliances.
Click the gear icon on the left of the window, and then select Connectors.
Select Configured to sort by Configured Connectors.
Review the Directory Services and Email Active Response Connectors. If the account exists, stop the Connector, and then edit settings.
Save the new settings.
Restart the connector.
Check the CMC for cached passwords.Enter manager.
Enter backupconfig and confirm your saved settings.
If the account exists, re-enter the configuration. If the account does not exist, enter 6 to exit the menu.
Repeat Steps 2a to 2c for archiveconfig and logbackupconfig.
For versions 6.3.1 and later, check the LDAP settings via the MVC page
