We are troubleshooting an account lockout issue and came across the error below in the windows DC event logs while investigating. They are appearing in two of our environments, the third is quiet. These are logged several times a minute and are likely unrelated to the lockout issue, but what IPA process could cause this?
Running IPA (ipa-server-4.4.0-14.el7_3.7) on RHEL 7.1
An account failed to log on.
Subject: Security ID: NULL SID Account Name: - Account Domain: - Logon ID: 0x0
Logon Type: 3
Account For Which Logon Failed: Security ID: NULL SID Account Name: Account Domain:
Failure Information: Failure Reason: An Error occured during Logon. Status: 0x80090302 Sub Status: 0x0
Process Information: Caller Process ID: 0x0 Caller Process Name: -
Network Information: Workstation Name: - Source Network Address: <IPA server address> Source Port: 35392
Detailed Authentication Information: Logon Process: Authentication Package: NTLM Transited Services: - Package Name (NTLM only): - Key Length: 0