10 Replies Latest reply on Apr 27, 2011 9:13 AM by TSBear

    Windows external authentication stopped working

    Karnel

      Title

      Windows external authentication stopped working

      Your post

      We have FMS 11.0.1.95 running on a Windows Server 2008 VM.  The client authentication is turned on for active directory authentication.  It works for a while, but then  for some unknown reason it stops working and recently it has become a daily occurance.   Local fm accounts are able to login, but not external account.  The  only thing that seems to fix it is to restart the server (restarting the  fm server will not work).  At least it fixes it until the next day.  It  appears to break again overnight and we have the same problem the next  morning.

      This problem has happened to us before in the past, even  when we had FMS installed on a Mac box, but it has been happening so  reguarly it is a big concern.  We have also noticed a lot of 661  warnings in the log viewer stating:  Client "XXX" authentication failed  on database "abc" using "Admin [fmapp]".  This error occurs when we  successfully log into a db too.  It's like it keeps trying and then will  finally get in.  Any suggestions?

        • 1. Re: Windows external authentication stopped working

          Karnel:

          Thanks for posting.

          To clarify, to get everything running again are you restarting the Active Directory server or the server with FileMaker on it?

          Is it possible that the AD server's ip is changing and triggering this?

          As a test, try creating a new group and user with a corresponding external authentication account setup on the FileMaker end. Then, when the server stops responding to external authentication requests, try to log in with that new user. 

          TSBear

          FileMaker, Inc.

          • 2. Re: Windows external authentication stopped working
            Karnel

            We are restarting the server with FileMaker Server installed on it.  The AD server has a static ip and does not change, however we have more than one AD server.  Would that cause a problem for the FileMaker server?

            As far as your test...when you say "log in with that new user" are you talking about logging into the FileMaker server or the FileMaker database?

            Thanks for quick response and your help!!

            • 3. Re: Windows external authentication stopped working

              Karnel:

              Sorry, I meant that you should attempt to log into the FileMaker database via external authentication with that user.

              TSBear

              FileMaker, Inc.

              • 4. Re: Windows external authentication stopped working
                Karnel

                TSBear,

                Sorry for not getting back sooner.  We have still been trying to figure things out.  We have been running fine all week until this morning we had another server stop working.  This week was much better than last week when we had 4 out of 5 days one of our servers stopped authenticating external accounts.  I did try your test....the new user I setup did not work until I restarted the server box.

                Here are some facts and things we are tracking:

                • We have 4 FM      production servers and 1 FM test server
                • In just the past      couple of months we have had external authentication fail quite frequently      and alarmingly frequently in the past couple weeks. Server 2&3 are having this issue—the other 3 have not      failed
                • Our servers are as      follows (all windows boxes are vms)

                Server1 (test server)

                Server2

                Server3

                Server4

                Server5

                Windows   Server 2008 R2 Standard

                FM   Server 11 Advanced v11.0.1.95

                Windows   Server 2008 R2 Standard

                FM   Server 11 v11.0.1.95

                Windows   Server 2008 R2 Standard

                FM   Server 11 Advanced v11.0.1.95

                Mac   OS X Server v 10.5.8

                FM   Server 9 v 9.0.3.325

                Windows   Server 2008 R2 Standard

                FM   Server 11 Advanced v11.0.1.95

                • We have six AD servers with static IPs.
                • We have now been tracking which AD server the FM servers hits each day and it doesn’t appear to be just one AD server that it’s failing on.
                • It seems to stop working sometime overnight.
                • We are unable to get the FileMaker admin console to stop the FileMaker database server.  It ignores the command and then the console hangs up.
                • We attempted to stop FileMaker Server services on the Windows server and got an error 1053 and it then hung up, so we still had to restart the Windows server to get things running again.

                You had asked in your earlier post “Is it possible that the AD server's ip is changing and triggering this?”.  Do you know how FM server handles multiple AD servers?

                • 5. Re: Windows external authentication stopped working
                  Karnel

                  TSBear,

                  Anymore ideas on this.  We are still having intermittent problems.

                  Thanks!

                  Karnel

                  • 6. Re: Windows external authentication stopped working
                    philmodjunk

                    Just to rule out a possible contributing factor, can you confirm that all the server schedules such as automated backups are completing successfully?

                    • 7. Re: Windows external authentication stopped working
                      Karnel

                      Yes, all automated backups are completing successfully.

                      • 8. Re: Windows external authentication stopped working

                        Karnel:

                        Sorry for the late response.

                        Are all of the production servers hosting different databases? Would it be possible to move copies of the databases currently on server 2 or 3 to the test server you've setup and attempt to reproduce the issue there?

                        Is there anything else running on the two servers experiencing the issue beside FileMaker Server?

                        TSBear

                        FileMaker, Inc.

                        • 9. Re: Windows external authentication stopped working
                          Karnel

                          TSBear,

                          Question #1 – Yes, our productions servers are hosting different dbs.

                          Question #2 – It would be very difficult to move dbs.  We would have to redirect the dns server name and notify a lot of our users.  We are currently hosting 73 dbs on server2 and 113 dbs on server3.  They are all installed  identically on VMs and we haven’t had any problem with server5 that is hosting 22 dbs.

                          Question #3 – Nothing else is running on either server.  All of our FileMaker servers are only running FileMaker.

                          • 10. Re: Windows external authentication stopped working

                            Karnel:

                            We've released an update to FileMaker Server 11 that addresses, among other things, an issue with external authentication. Please download and install this update at your earliest convenience and let us know if the issue persists. You can find the v3 update in knowledge base answer #9283:

                            http://help.filemaker.com/app/answers/detail/a_id/9283

                            TSBear

                            FileMaker, Inc.