Hi,
I installed our vCenter a couple of weeks ago using a special domain admin account. Since then the vCenter is running without (known) issues. Today I had a look in the vCenter event log and found out that every 10 seconds a login attemp happens with the admin user I used during install. The @x.x.x.x IP adresse is the address of the vCenter host itself. I'm connected with the vCenter Client with an non-admin account at the moment and have simply no idea which process is trying to access vCenter with the other user. I've rebooted the server last weeks (before I noticed this problem) which had no effect of the login attemps, they appear in the log files since many weeks.
How can I find out which process is using this user? It must be configures somewhere, because the login errors start right after reboot. Maybe I configured the user and the password, which has changed since the install.
I found a KB article. But it doen't help to find the process/programm which tries to login with the wrong user. I already know that it must be coming from the vCenter hosts IP, but I don't know where the user/password is stored.