Ever since we applied ESAP 2.1.8, many users have to attempt sign on two times before getting authenticated to the IVE. They enter the correct password and the system comes back with a failed login. They enter the exact same credentials a second time and authentication is successful.
We backed out 2.1.8 but the condition remains. We even updated to 2.1.9 and that too has done nothing. Completely removing the Juniper apps from the host does nothing to solve the issue. We are currently on 7.1R6 but plan to go to 7.1R10 very soon.
Has anyone else seen this behavior?
It happens with all hostchecker policies across all defined roles.
We are upgrading to a new version of the OS in about a week. I will see if the issue remains after that.
No, it does not log the first login failure which leads me to believe that hostchecker is causing the problem. It's a known buggy app and it is our top suspect here.