Errors: "username or password is incorrect" during the successful ODMAD Dirsync Reads. Those errors are only show up if password sync options are enabled. Service account is not getting locked up. Modern password sync is configured
When it reports a bad password, it’s a reported as Kerberos pre-auth failure on the DC:
Account_Name: <service_account_name>
Client_Address: <IPv4 or IPv6 address>
Client_Port: 60853
ComputerName: <computer_name>
EventCode: 4771
EventType: 0
Failure_Code: 0x18
Keywords: Audit Failure
LogName: Security
Message: Kerberos pre-authentication failed.
OpCode: Info
Pre-Authentication_Type: 2
Multiple dirsync agent machines are bombarding DC with LSASS RPC calls, DC sees that these calls are coming from different machines and it's triggering Kerberos.
Possible caused by credentials caching on the dirsync agent machine.
To resolve the issue, please make sure that all dirsync agents are installed as instances on the same physical or virtual machine.
Alternatively, install the dirsync agent on the different machine and remove the original agent from the environment, Agents list. If that agent was used as a Monitoring Agent for the password sync, then make sure to switch it to the new agent.
