Fixing Credential Failures
On this page
In this lesson, you will learn:
- What credential failures look like
- Full vs partial failures
- How SNWR fixed the sudo gap
🔁 Quick look back: Last time: Fixing Access and Port Failures. You learned how the WMI access failures were found and fixed.
1 The Problem: A Server Is Half Explored
One RHEL 9 server logged in fine. But the result was missing its serial number and some software. The log showed:
- ‘Permission denied’ on two commands.
👉 The fix: Tell full credential failures apart from partial ones, and fix the right thing.
2 Common causes
| Symptom | Likely cause |
|---|---|
| Authentication failed | Wrong or expired password or key |
| Account locked | Too many failed tries |
| Permission denied | sudo rule missing or wrong path |
| Worked yesterday, fails today | Password rotated, ServiceNow not updated |
3 Fixing
- Full failure: test the credential, fix the password or key.
- Partial failure: check the commands in the privilege matrix.
- After a fix: rerun Quick Discovery on the device.
💡 Good to know: A partial failure still says ‘Completed’. Check fields, not just status.
4 Project Clear View: How We Implemented It
📍 Situation: One RHEL 9 pilot server was missing fields.
🧭 Decision: Find the failing commands and fix the sudo rule.
🛠️ Steps we took:
- Read the log: two commands got ‘permission denied’.
- Compared with the sudo list: one had a different path on RHEL 9.
- Priya added the correct path.
- Reran Quick Discovery: the serial number and software appeared.
✅ What we verified:
- The server is fully explored.
- Priya updated her standard sudo file.
📁 Evidence: The troubleshooting log entry, closed with evidence.
5 Quick recap
- Full failure: can’t log in.
- Partial failure: logs in, but some commands fail.
- A partial failure can still show ‘Completed’.
- Rerun Quick Discovery after any fix.
6 Check yourself
Think of your answer first. Then tap to check.
1 What does ‘permission denied’ usually mean? Show answer
A partial failure: the login worked but a command lacked rights, often a sudo rule.
2 Why check fields and not just status? Show answer
A partial failure can still show ‘Completed’.
3 What caused SNWR’s sudo gap? Show answer
A command path that was different on RHEL 9.
Nice work! SNWR’s credential gaps are fixed. 🎉
Next up: Fixing Classification Failures
Was this lesson helpful?
Please log in to share lesson feedback.
Have a question or doubt?
Ask here and get help from instructors and fellow learners.
Only logged-in learners can post.
