Repeating Event on SmarterTrack Host
Problem reported by Support .. - December 13, 2018 at 11:27 AM
Submitted
We host SmarterTrack on Windows Server 2016 running IIS-10.  We're running version 14.1.6885.28379  of the software

For the past few months we've seen repeated errors like below occurring every 5 minutes.  Any indication on what could be triggering this and how to stop it?

Event code: 4005
Event message: Forms authentication failed for the request. Reason: The ticket supplied was invalid.
Event time: 12/13/2018 1:03:46 PM
Event time (UTC): 12/13/2018 6:03:46 PM
Event ID: 9fdebc853f3645f18bf7238f9954a9c1
Event sequence: 4095
Event occurrence: 757
Event detail code: 50201
 
Application information:
    Application domain: /LM/W3SVC/4/ROOT-1-131891312613374198
    Trust level: Full
    Application Virtual Path: /
    Application Path: D:\LIVE\[redacted]\SmarterTrack\
    Machine name: [redacted]
 
Process information:
    Process ID: 752
    Process name: w3wp.exe
    Account name: NT AUTHORITY\NETWORK SERVICE
 
Request information:
    Request URL: [redacted]:443/api/Chat/CheckIsSoundEnabled/39
    Request path: /api/Chat/CheckIsSoundEnabled/39
    User host address: [redacted - public IP of requesting user]
    User:  
    Is authenticated: False
    Authentication Type:  
    Thread account name: NT AUTHORITY\NETWORK SERVICE
 
Name to authenticate:  
 
Custom event details:

3 Replies

Reply to Thread
0
Andrew Barker Replied
Employee Post
It looks like someone is trying to access a Management Interface API. Since this individual is not logged into SmarterTrack as an employee, this error is being generated. This would likely be caused by a system that has been left logged in with an employee account, across one or more SmarterTrack updates, server reboots, or IIS resets.

Andrew Barker
Software Developer
SmarterTools Inc.
(877) 357-6278
www.smartertools.com

0
Support .. Replied
We make API calls from within our web app, hosted on the same machine.  Is this a problem that could occur if either of the app pools on that server restart?
0
Andrew Barker Replied
Employee Post
It is unlikely that your web app is causing this issue. The specific API that is being accessed when the event is logged is only used by the Management Interface within SmarterTrack. It is not intended to be accessed by external systems.

Andrew Barker
Software Developer
SmarterTools Inc.
(877) 357-6278
www.smartertools.com

Reply to Thread