asked
login failed errors in log file
Hello, I am finding these errors repeatedly in my error logs. Anyone have any suggestions on how to troubleshoot/fix? I have not seen them before they just started appearing in my logs this week. Thank you! The login packet used to open the connection is structurally invalid; the connection has been closed. Please contact the vendor of the client library. Length specified in network packet payload did not match number of bytes read; the connection has been closed. Please contact the vendor of the client library. Login failed. The login is from an untrusted domain and cannot be used with Windows authentication SSPI handshake failed with error code 0x8009030c while establishing a connection with integrated security; the connection has been closed.
If somebody on your network is [running intrusion detection software][1], that may be the cause. Previously, I've seen the "Login failed. The login is from an untrusted domain..." error pop up after a person changes his Windows password while logged into a server. After logging off and logging back on, that issue cleared up. In the SSPI handshake message, you should get a client IP address--I did in my case, at least. If that is internal, you could translate it back to a machine and see what's going on there, perhaps. [1]:
http://social.msdn.microsoft.com/forums/en-US/sqldatabaseengine/thread/2c8f45e2-486f-43da-a209-aaf78d69a190
