Re: Integrated User Firewall Issues

Here you go.

Mar 14 12:20:11 userid_auth_update_age_time :change state from 1 to 1

Mar 14 12:20:11 userid_add_record_to_dc_timestamp_tbl: dc 10.10.10.3 bdb timestamp updated, 20160314041820.955631-000

Mar 14 12:20:22 opflag:1 src_ip:10.10.10.1 domain_name SECLAB user_name:Administrator dc_name:10.10.10.3
Mar 14 12:20:22 userid_auth_state_processing:current_state 1 evt 1

Mar 14 12:20:22 userid_auth_update_age_time :change state from 1 to 1

Mar 14 12:20:33 opflag:1 src_ip:10.10.10.1 domain_name SECLAB user_name:Administrator dc_name:10.10.10.3
Mar 14 12:20:33 userid_auth_state_processing:current_state 1 evt 1

Mar 14 12:20:33 userid_auth_update_age_time :change state from 1 to 1

Mar 14 12:20:43 opflag:1 src_ip:10.10.10.1 domain_name SECLAB user_name:Administrator dc_name:10.10.10.3
Mar 14 12:20:43 userid_auth_state_processing:current_state 1 evt 1

Mar 14 12:20:43 userid_auth_update_age_time :change state from 1 to 1

Mar 14 12:20:54 opflag:1 src_ip:10.10.10.1 domain_name SECLAB user_name:Administrator dc_name:10.10.10.3
Mar 14 12:20:54 userid_auth_state_processing:current_state 1 evt 1

Mar 14 12:20:54 userid_auth_update_age_time :change state from 1 to 1

Mar 14 12:21:01 uid_ldap_conn_bind_and_auth: bind failed Can't contact LDAP server[-1], server 10.10.10.3(389)
Mar 14 12:21:01 LDAP authentication failed while trying to connect server 10.10.10.3, port 389, user Administrator@seclab.com, err_string Success
Mar 14 12:21:01 uid_ldap_get_ug_mapping_from_ad, domain[seclab.com] pname[test], bind failed 0x64e800
Mar 14 12:21:01 uid_update_ldap_statistics_by_id: domain seclab.com use ldap 0, server_idx[1],query_num[18], failed_num[18], query_time[1457957984], status[2]
Mar 14 12:21:05 opflag:1 src_ip:10.10.10.1 domain_name SECLAB user_name:Administrator dc_name:10.10.10.3
Mar 14 12:21:05 userid_auth_state_processing:current_state 1 evt 1

Mar 14 12:21:05 userid_auth_update_age_time :change state from 1 to 1

Mar 14 12:21:16 opflag:1 src_ip:10.10.10.1 domain_name SECLAB user_name:Administrator dc_name:10.10.10.3
Mar 14 12:21:16 userid_auth_state_processing:current_state 1 evt 1

Mar 14 12:21:16 userid_auth_update_age_time :change state from 1 to 1

Mar 14 12:21:16 userid_add_record_to_dc_timestamp_tbl: dc 10.10.10.3 bdb timestamp updated, 20160314043852.193731-000

Mar 14 12:21:27 opflag:1 src_ip:10.10.10.1 domain_name SECLAB user_name:Administrator dc_name:10.10.10.3
Mar 14 12:21:27 userid_auth_state_processing:current_state 1 evt 1

Mar 14 12:21:27 userid_auth_update_age_time :change state from 1 to 1

Mar 14 12:21:37 opflag:1 src_ip:10.10.10.1 domain_name SECLAB user_name:Administrator dc_name:10.10.10.3
Mar 14 12:21:37 userid_auth_state_processing:current_state 1 evt 1

Mar 14 12:21:37 userid_auth_update_age_time :change state from 1 to 1

Mar 14 12:21:48 opflag:1 src_ip:10.10.10.1 domain_name SECLAB user_name:Administrator dc_name:10.10.10.3
Mar 14 12:21:48 userid_auth_state_processing:current_state 1 evt 1

Mar 14 12:21:48 userid_auth_update_age_time :change state from 1 to 1

Mar 14 12:21:48 userid_process_pfe_messages: userid received ipc data from PFEon sock 12 ;msg_data.id 61

Mar 14 12:21:48 userid_processing_sess_info_from_pfe:ip 10.10.10.4 has_sess 0 pfe_no 0

Mar 14 12:21:48 userid_processing_sess_info_from_pfe pentry found ip 10.10.10.4 in agerring

Mar 14 12:21:48 userid_processing_sess_info_from_pfe:ip 10.10.10.1 has_sess 0 pfe_no 0

Mar 14 12:21:48 userid_processing_sess_info_from_pfe pentry found ip 10.10.10.1 in agerring

Mar 14 12:22:00 opflag:1 src_ip:10.10.10.1 domain_name SECLAB user_name:Administrator dc_name:10.10.10.3
Mar 14 12:22:00 userid_auth_state_processing:current_state 1 evt 1

Mar 14 12:22:00 userid_auth_update_age_time :change state from 1 to 1

Mar 14 12:22:10 opflag:1 src_ip:10.10.10.1 domain_name SECLAB user_name:Administrator dc_name:10.10.10.3
Mar 14 12:22:10 userid_auth_state_processing:current_state 1 evt 1

Mar 14 12:22:10 userid_auth_update_age_time :change state from 1 to 1

Mar 14 12:22:18 uid_ldap_conn_bind_and_auth: bind failed Can't contact LDAP server[-1], server 10.10.10.3(389)
Mar 14 12:22:18 LDAP authentication failed while trying to connect server 10.10.10.3, port 389, user Administrator@seclab.com, err_string Success
Mar 14 12:22:18 uid_ldap_get_ug_mapping_from_ad, domain[seclab.com] pname[test], bind failed 0x64e800
Mar 14 12:22:18 uid_update_ldap_statistics_by_id: domain seclab.com use ldap 0, server_idx[1],query_num[19], failed_num[19], query_time[1457958061], status[2]
Mar 14 12:22:21 opflag:1 src_ip:10.10.10.1 domain_name SECLAB user_name:Administrator dc_name:10.10.10.3
Mar 14 12:22:21 userid_auth_state_processing:current_state 1 evt 1

Mar 14 12:22:21 userid_auth_update_age_time :change state from 1 to 1

Mar 14 12:22:21 userid_add_record_to_dc_timestamp_tbl: dc 10.10.10.3 bdb timestamp updated, 20160314043952.550237-000

Mar 14 12:22:32 opflag:1 src_ip:10.10.10.1 domain_name SECLAB user_name:Administrator dc_name:10.10.10.3
Mar 14 12:22:32 userid_auth_state_processing:current_state 1 evt 1

Mar 14 12:22:32 userid_auth_update_age_time :change state from 1 to 1

Mar 14 12:22:42 opflag:1 src_ip:10.10.10.1 domain_name SECLAB user_name:Administrator dc_name:10.10.10.3
Mar 14 12:22:42 userid_auth_state_processing:current_state 1 evt 1

Mar 14 12:22:42 userid_auth_update_age_time :change state from 1 to 1

Mar 14 12:22:53 opflag:1 src_ip:10.10.10.1 domain_name SECLAB user_name:Administrator dc_name:10.10.10.3
Mar 14 12:22:53 userid_auth_state_processing:current_state 1 evt 1

Mar 14 12:22:53 userid_auth_update_age_time :change state from 1 to 1

Mar 14 12:23:04 opflag:1 src_ip:10.10.10.1 domain_name SECLAB user_name:Administrator dc_name:10.10.10.3
Mar 14 12:23:04 userid_auth_state_processing:current_state 1 evt 1

Mar 14 12:23:04 userid_auth_update_age_time :change state from 1 to 1

Seems like authentication failure. But as you can see in above post. Domain controller is connected. what am I doing wrong here ?