Solved

Web server warning event 40968

Posted on 2007-03-27
2
1,105 Views
Last Modified: 2011-10-03
I am getting the following system event warning at approximately the same time every day.
  Source LsaSrv
  Category:  SPNEGO (negotiator)
  Event:  40968

I am also getting the following entries in my website log file which correspond to the event warning message times:
2007-03-24 15:11:20 W3SVC1 ... GET /iisadmpwd/aexp2b.htr - 80 -  ...  - 403 4 64
2007-03-24 15:11:20 W3SVC1 ... GET / - 80 - 155.147.252.207 - 403 4 5
2007-03-24 15:11:20 W3SVC1  ... GET / - 80 - 155.147.252.207 - 403 4 5
2007-03-24 15:11:20 W3SVC1  ... GET /includes/pnAPI.php oops=id 80 -  ...  - 403 4 5
2007-03-24 15:11:20 W3SVC1  ...  GET /pls/simpledad/admin_/gateway.htm schema=sample 80 -  ...  - 403 4 5
2007-03-24 15:11:20 W3SVC1  ...  GET /cgi-bin/rwcgi60/showenv - 80 -  ...  - 403 4 5

I am running Widows Server 2003 Svc Pk 2 and IIS 6.0.  

This started about 3 weeks ago.  Does anyone know what it is?

Thanks!
0
Comment
Question by:barnesgj
2 Comments
 
LVL 22

Accepted Solution

by:
cj_1969 earned 500 total points
ID: 18800628
GET /pls/simpledad/admin_/gateway.htm schema=sample
appears to be something related to Oracle ...
See if there is a scheduled task or something that is running on the machine that is supposed to be updating or in some way connecting to an Oracle database ... if this just started up and has continued ... check the password for the account that it is using to connect to the database ... I've seen similar sorts of issues with other apps when the password expires or gets locked and an app cannot connect on the backend.
0
 

Author Comment

by:barnesgj
ID: 18801535
Good answer!  It seems that our network people are doing some scans that appear to be triggering this.
Thanks!!!
0

Featured Post

What Should I Do With This Threat Intelligence?

Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

Join & Write a Comment

What is an ISAPI filter?   •      It's an assembly (.dll file) that can add or change the way IIS works.   •      They can be enabled globally for your web server or on a site-by-site basis.   When the IIS server receives a request, enabling the ISAPI fi…
Running classic asp applications under Windows Server 2008 R2 (x64) and IIS 7 is not as easy as one may think. It took me a while to figure it out while getting error 8002801d a few times. After you install the OS you will need to install the fol…
Access reports are powerful and flexible. Learn how to create a query and then a grouped report using the wizard. Modify the report design after the wizard is done to make it look better. There will be another video to explain how to put the final p…
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …

708 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now