Client Management Suite

I am seeing several errors in my Altiris log files indicating a failed NT AUTHORITY\ANONYMOUS LOGON.  Unfortunately this is also creating errors and alerts on the off box SQL server and my DBA team is inquiring about it.  I can reproduce the error by rebooting the server and logging into the console for the first time.  When I do so I am presented with a box asking for my credentials.  When I click cancel and reload the page I do not have to enter my credentials but that is when the error is logged on both the Altiris application server and on the database server.  I have replaced the items in bold with placeholders but you get the idea.

Log File Name: C:\ProgramData\Symantec\SMP\Logs\a.log
Priority: 1
Help and Support:
Date: 4/25/2011 2:33:15 PM
Tick Count: 1120968
Host Name: <servername>
Process: w3wp (3584)
Thread ID: 7
Module: w3wp.exe
Source: Altiris.Console.WebControls.HelpProvider.GetUrl
Description: Unable to obtain context help url. ProductGuid:Activity Center (51300b87-ee86-46c9-9991-037e4407732a) PageId:Computers (51475a8d-bbb0-4979-815c-294755a07970) Context: Exception:Altiris.NS.Exceptions.DatabaseNotReadyException: Failed to construct DatabaseContext object. Connection to database failed. ---> Altiris.NS.Exceptions.AeXException: Failed to open database connection. Current user is DOMAIN\<username>. Error: Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'. ---> System.Data.SqlClient.SqlException: Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'.
   at System.Data.ProviderBase.DbConnectionPool.GetConnection(DbConnection owningObject)
   at System.Data.ProviderBase.DbConnectionFactory.GetConnection(DbConnection owningConnection)
   at System.Data.ProviderBase.DbConnectionClosed.OpenConnection(DbConnection outerConnection, DbConnectionFactory connectionFactory)
   at System.Data.SqlClient.SqlConnection.Open()
   at Altiris.NS.Utilities.DbUtils.OpenConnection(SqlConnection dbConn)
   --- End of inner exception stack trace ---
   at Altiris.NS.Utilities.DbUtils.OpenConnection(SqlConnection dbConn)
   at Altiris.NS.Utilities.DbUtils.CreateConnection(String server, String catalog, String user, String password)
   at Altiris.NS.ContextManagement.AdminDatabaseContext.OpenDbConnection()
   at Altiris.Database.DatabaseContext`1.Initialize(Boolean beginTransaction, IsolationLevel isolationLevel)
   --- End of inner exception stack trace ---
   at Altiris.NS.ContextManagement.AdminDatabaseContext.ThrowDatabaseNotReadyException(String exceptionDetails, Exception innerException)
   at Altiris.Database.DatabaseContext`1.Initialize(Boolean beginTransaction, IsolationLevel isolationLevel)
   at Altiris.Database.DatabaseContext`1.GetContext(Boolean createNewTransaction, IsolationLevel isolationLevel, Boolean independentContext)
   at Altiris.Database.DatabaseContext`1.GetContext(Boolean createNewTransaction, IsolationLevel isolationLevel)
   at Altiris.Database.DatabaseContext`1.GetContext(Boolean createNewTransaction)
   at Altiris.Database.DatabaseContext`1.GetContext()
   at Altiris.NS.ContextManagement.DatabaseContext.GetContext()
   at Altiris.NS.DataAccessLayer.Implementation.Altiris_CustomConsole_DALConsoleHelpDAL.spContextHelpGetUrl(Guid productGuid, String pageId, String context)
   at Altiris.CustomConsole.ConsoleHelp.GetContextHelpUrl(Guid productGuid, String pageId, String context, CultureInfo culture, IContextHelpLocationResolver resolver)
   at Altiris.CustomConsole.ConsoleHelp.GetContextHelpUrl(Guid productGuid, String pageId, String context)
   at Altiris.Console.WebControls.HelpProvider.GetUrl(String productId, String pageId, String context)
 

Hi,

Could you please explain which account you are using to login to Console.

Is it a service account or a Domain Admin account.

If its a domain admin account please try to login with service account or else try adding Service account to Domain Admin group

I am simply launching the console by typing the console URL in the browser on my local PC.  My username is setup as a Symantec Administrator under the Account Management.  My account is neither a service account nor a domain admin account.

The service account IS a domain admin account but I don't use it to access the console preferring to use the console on my local PC.

I am using IE8 on a Windows 7 machine if that makes a difference and we are on AD 2008.

It's still a problem.