Help needed with Error Code 3001 - SSH Credentials

[chorton]

Hello all,

I have been having significant issues with scanners not being able to connect to certain end clients running Windows Operating Systems.  I use Active Directory credentials when connecting to windows machines with the proper permissions.  For a surprisingly high number of machines, I receive Error Code 3001 Logon Failed; deselcting credentialed checks for this host.  I am not using certificate authentication - just AD username/password and the password is configured to expire.  This user/pass credential set works for the rest of the machines in my environment, just not these hosts.  Has anyone encountered this issue and have had any luck in fixing it?

Here is a sample output from the CSV report:

IP Address

DNS Name

NetBios Name

Asset Label

Asset Criticality

Operating System

Asset Owner

SSHv2 Certificate

SSHv2 Credential

SSHv1

Telnet

WMI Accessible

Remote Registry

Remote File System Access

Null Session

Administrator Authentication

Error Code

Error Description

-removed-

-removed-

10035818

0

Windows 7  (Service Pack 1, [++])

No

No

No

No

No

3001

Logon failed; deselecting credentialed  checks for this host.

Thanks!

Message was edited by: chorton on 3/7/14 2:31:15 PM CST

Message was edited by: chorton on 3/7/14 2:36:49 PM CST

Message was edited by: chorton on 3/7/14 2:37:22 PM CST

[hendersonmc]

Good question; I have seen this issue also.

My experience is a bit different, though. I see in the authenticated_hosts.csv that MVM attempts both SSHv2 Certificate and access via the five Windows methods that you show.

Here is an example. (host id edited)

IP Address

DNS  Name

NetBios Name

Asset  Label

Asset  Criticality

Operating System

Asset  Owner

SSHv2  Certificate

SSHv2  Credential

SSHv1

Telnet

WMI Accessible

Remote Registry

Remote File System Access

Null Session

Administrator Authentication

Error  Code

Error  Description

1.2.3.4

anyhost.com

anyhost

10016058

3

Windows Server 2008 (Service Pack 2, Server, SQL Server, [++])

user

noAccess

3001

Connection failed: ERROR (0x8007274d) : No connection could be made  because the target machine actively refused it.

1.2.3.4

anyhost.com

anyhost

10016058

3

Windows Server 2008 (Service Pack 2, Server, SQL Server, [++])

user

No

Yes

Yes

No

Yes

0

Message was edited by: hendersonmc on 4/28/14 9:43:42 AM CDT

Message was edited by: hendersonmc on 4/28/14 11:31:10 AM CDT