Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Web server warning event 40968

Posted on 2007-03-27
2
Medium Priority
?
1,166 Views
Last Modified: 2011-10-03
I am getting the following system event warning at approximately the same time every day.
  Source LsaSrv
  Category:  SPNEGO (negotiator)
  Event:  40968

I am also getting the following entries in my website log file which correspond to the event warning message times:
2007-03-24 15:11:20 W3SVC1 ... GET /iisadmpwd/aexp2b.htr - 80 -  ...  - 403 4 64
2007-03-24 15:11:20 W3SVC1 ... GET / - 80 - 155.147.252.207 - 403 4 5
2007-03-24 15:11:20 W3SVC1  ... GET / - 80 - 155.147.252.207 - 403 4 5
2007-03-24 15:11:20 W3SVC1  ... GET /includes/pnAPI.php oops=id 80 -  ...  - 403 4 5
2007-03-24 15:11:20 W3SVC1  ...  GET /pls/simpledad/admin_/gateway.htm schema=sample 80 -  ...  - 403 4 5
2007-03-24 15:11:20 W3SVC1  ...  GET /cgi-bin/rwcgi60/showenv - 80 -  ...  - 403 4 5

I am running Widows Server 2003 Svc Pk 2 and IIS 6.0.  

This started about 3 weeks ago.  Does anyone know what it is?

Thanks!
0
Comment
Question by:barnesgj
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 22

Accepted Solution

by:
cj_1969 earned 2000 total points
ID: 18800628
GET /pls/simpledad/admin_/gateway.htm schema=sample
appears to be something related to Oracle ...
See if there is a scheduled task or something that is running on the machine that is supposed to be updating or in some way connecting to an Oracle database ... if this just started up and has continued ... check the password for the account that it is using to connect to the database ... I've seen similar sorts of issues with other apps when the password expires or gets locked and an app cannot connect on the backend.
0
 

Author Comment

by:barnesgj
ID: 18801535
Good answer!  It seems that our network people are doing some scans that appear to be triggering this.
Thanks!!!
0

Featured Post

Moving data to the cloud? Find out if you’re ready

Before moving to the cloud, it is important to carefully define your db needs, plan for the migration & understand prod. environment. This wp explains how to define what you need from a cloud provider, plan for the migration & what putting a cloud solution into practice entails.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you don't have the right permissions set for your WordPress location in IIS, you won't be able to perform automatic updates. Here's how to fix the problem.
Lync server 2013 or Skype for business Backup Service Error ID 4049 – After File Share Migration
Do you want to know how to make a graph with Microsoft Access? First, create a query with the data for the chart. Then make a blank form and add a chart control. This video also shows how to change what data is displayed on the graph as well as form…
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…
Suggested Courses

705 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question