Unsuccessful login attempts since last login message in audit log during SSH access
Applies to
ONTAP 9.12.1
Issue
- Login Attempt :: Error: Unsuccessful attempts since last login :1 message was repeatedly logged in the ONTAP audit log
- The issue was observed when the admin user accessed the system via SSH, with failures logged even though the login ultimately succeeded
Example:[kern_audit:info:2766] 0000000000000000 :: cluster:ssh :: internal:audit :: cluster:admin :: Login Attempt :: Error: Unsuccessful attempts since last login :1.[kern_audit:info:2766] 8003e80000419a91:8003e80000419a92 :: cluster:ssh :: 10.112.0.23:58386 :: cluster:admin :: set d :: Pending[kern_audit:info:2766] 8003e80000419a91:8003e80000419a92 :: cluster:ssh :: 10.112.0.23:58386 :: cluster:admin :: set d :: Success[kern_audit:info:2766] 8003e80000419a91:8003e80000419a96 :: cluster:ssh :: 10.112.0.23:58386 :: cluster:admin :: Logging out :: Success
