RTMT reports several failed login attempts to the CUCM Publisher from both IM&P servers.
LoginFrom : [IM&P IPs]
Interface : Apache-Axis2
UserID : admin
AppID : Cisco Tomcat
NodeID : [Publisher IP]
Password for admin is the same on Publisher and IM&P (web & CLI).
Failed Jabber and Web logins are logged with the client IPs.
Any idea which service might cause this login attempts?
Maybe, but wouldn't have axl it's own account? Setup on the publisher with credentials set on the Publisher?
What would use the admin account to contact Apache-Axis2 interface on the Publisher infrequently but several times a day, locking the admin account sometimes?