We recently restored our pre prod database from production. After restoration, Send rich mail component using the SMTP account keeps failing intermittently with the below error.
error message:
Server supported authentication mechanisms: GSSAPI, NTLM, LOGIN
Component supported authentication mechanisms: XOAUTH2, SCRAM-SHA-256, SCRAM-SHA-1, CRAM-MD5, DIGEST-MD5, PLAIN, LOGIN
[MailKit.Security.AuthenticationException] AuthenticationInvalidCredentials: 5.7.3 Authentication unsuccessful
at StdioProcessor.StdioProcessor._Execute(Job job)
at VI.JobService.JobComponents.MailComponent.Activate(String task)
at VI.JobService.JobComponents.MailComponent._SendRichMail()
at VI.JobService.JobComponents.MailComponent._Send(MimeMessage message, MailSecurity security)
at VI.JobService.JobComponents.MailComponent._GetOrOpenSmtpConnection()
at MailKit.Net.Smtp.SmtpClient.Authenticate(Encoding encoding, ICredentials credentials, CancellationToken cancellationToken)
When checked, we found that SMTP account being locked in AD frequently by our pre prod job servers. Below is the event logs extracted from DC.
Kerberos pre-authentication failed.
Account Information:
Security ID: XXXXX
Account Name: XXXXX
Service Information:
Service Name: krbtgt/
Network Information:
Client Address: ::
Client Port:
Additional Information:
Ticket Options: 0x40810010
Failure Code: 0x12
Pre-Authentication Type: 0
Certificate Information:
Certificate Issuer Name:
Certificate Serial Number:
Certificate Thumbprint:
SMTP password has been updated properly in dialogconfig table, cleared all the cache stored in app data , restarted one identity service etc, Nothing helped me to resolve lockout issue.
Is is possible to retrace which process locks this account?
