Thanks Axton, That led me to look in the cache directory at *.index and *.data files, where I did find one of the account names in a .data file. But I didn’t see some of the other “problem” deleted accounts in that file, so that file may not be the basic source.
David D. From: Action Request System discussion list(ARSList) [mailto:[email protected]] On Behalf Of Axton Sent: Monday, May 05, 2014 10:03 PM To: [email protected] Subject: Re: Deleted user accounts continue to show up in logs ** It could be a cache building operation. I think with newer versions of the midtier it records user/form access and builds the cache based on past activity. There are a series of files (I think *.index) that store this usage information. On Mon, May 5, 2014 at 8:18 AM, David Durling <[email protected]<mailto:[email protected]>> wrote: ** We have “LOGIN FAILED” attempts logged for user accounts that have been long deleted from our ARS 7.5 server. In some cases, the accounts have been removed for over a year. Over that time the midtier would have been restarted & flushed multiple times, so it would seem that should get rid of anything in cache unless there’s some bug. As a matter of fact, a flush or restart of midtier is exactly when I see them appear in the logs. _______________________________________________________________________________ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org "Where the Answers Are, and have been for 20 years"

