need help tracking down azure sql error Message: Login failed for user 'manager'.

tony 1 Reputation point
2021-08-25T19:08:55.953+00:00

We recently changed our azure sql server manager password.
We confirmed (multiple times) that all connection string configurations have the correct password.
I've exhausted my list of theories of what the root issue is, and don't even know where to look next.

This problem is intermittent and doesn't appear to be an issue with our app service UI, and appears to happen "mostly" in our .net our azure functions and in our IHostedService implementations.

It "feels" like a connection string my be stuck in a cache that survives between deployments.

If anyone could give me some things to try or look into it would be greatly appreciated.

Azure SQL Database
Azure Functions
Azure Functions
An Azure service that provides an event-driven serverless compute platform.
4,325 questions

7 answers

Sort by: Newest
Most helpful Newest Oldest
  1. Alberto Morillo 32,896 Reputation points MVP
    2021-08-30T17:33:32.88+00:00

    Due to this high number of login failures from the same client IP, the DoS guard kicks in and block all connections from that IP to the database for a few minutes (error 18456, state 113) and thus you start getting the stated error. For more information about DoS Guard, please check this documentation.

  2. tony 1 Reputation point
    2021-08-30T15:45:09.147+00:00

    so I was finally able to run this query.
    A majority of the additional information contents were <login_information><error_code>18456</error_code><error_state>113</error_state></login_information>
    And the IP address on those rows is for our one of our azure function apps which we already knew was one of the sources of the problem.
    Does this error code provide a clue that I am failing to see?

    0 comments
  3. Alberto Morillo 32,896 Reputation points MVP
    2021-08-27T21:31:53.853+00:00

    Tony,

    Let's forget about the portal. Save the Audit to BLOB storage account and read it like this:

     SELECT event_time, action_id, class_type, additional_information,database_name, statement,*

 FROM sys.fn_get_audit_file('https://myblobstorage.blob.core.windows.net/sqldbauditlogs/my_svr/MyAuditDBTest/', default, default)
  4. tony 1 Reputation point
    2021-08-26T03:32:53.507+00:00

    I'll have to wait until I see the issue happen in the logs then I will use your suggestion to see if there are any clues contained in that audit data.
    I feel like it is an issue in the azure function apps/service apps, maybe with connection pooling??? maybe there is a connection stuck in a pool somewhere? :-) I'm not sure if that is a sql server or azure app responsibility. Is there a way to like clear a connection pool?

    0 comments
  5. tony 1 Reputation point
    2021-08-25T23:53:01.773+00:00

    Like I said, I know where these calls are coming from.