Multiple log entries about LOGIN_NOTIFIER_SERVER on Security Gateways with R81.20 Jumbo Hotfix Accumulator Take 96 or higher

Product: ClusterXL
Version: R81.20
OS: Gaia
Last Modified: 2026-07-23

Symptoms

• Syslog Servers and /var/log/messages on multiple Security Gateways are experiencing excessive log entries from the LOGIN_NOTIFIER_SERVER process.

These repetitive entries appear as:

login_notifier_server: before force_2fa_generation, params: 2fa-check

login_notifier_server: after force_2fa_generation, params: 2fa-check

Cause

The log has many repeated entries caused by the LOGIN_NOTIFIER_SERVER process repeatedly generating Two-Factor Authentication (2FA) check and regeneration messages, even though 2FA is not enabled or enforced for any users or globally on the affected Security Gateways with installed R81.20 Jumbo Hotfix Accumulator Take 96 or higher.

This behavior results from changes in the code integrated with the 2FA feature in R81.20 Take 96. The system erroneously performs and logs 2FA operations regardless of the actual 2FA configuration status. The issue is not related to any custom configuration or user action.

Solution

We're here for you
Please log in / sign in to view solution

NOTE

This solution has been verified for the specific scenario, described by the combination of Product, Version and Symptoms. It may not work in other scenarios.

Article Properties

Access Level: Advanced
Status: Approved by TAC
Date Created: 2025-07-22
Last Modified: 2026-07-23