# Multiple log entries about LOGIN_NOTIFIER_SERVER on Security Gateways with R81.20 Jumbo Hotfix Accumulator Take 96 or higher

**Product**: ClusterXL  
**Version**: R81.20  
**OS**: Gaia  
**Last Modified**: 2026-07-23

## Symptoms

- Syslog Servers and `/var/log/messages` on multiple Security Gateways are experiencing excessive log entries from the LOGIN_NOTIFIER_SERVER process.

These repetitive entries appear as:

```
login_notifier_server: before force_2fa_generation, params: 2fa-check

login_notifier_server: after force_2fa_generation, params: 2fa-check
```

## Cause

The log has many repeated entries caused by the LOGIN_NOTIFIER_SERVER process repeatedly generating Two-Factor Authentication (2FA) check and regeneration messages, even though 2FA is not enabled or enforced for any users or globally on the affected Security Gateways with installed R81.20 Jumbo Hotfix Accumulator Take 96 or higher.

This behavior results from changes in the code integrated with the 2FA feature in R81.20 Take 96. The system erroneously performs and logs 2FA operations regardless of the actual 2FA configuration status. The issue is not related to any custom configuration or user action.

## Solution

We're here for you  
Please log in / sign in to view solution

#### NOTE

This solution has been verified for the specific scenario, described by the combination of Product, Version and Symptoms. It may not work in other scenarios.

## Article Properties

**Access Level**: Advanced  
**Status**: Approved by TAC  
**Date Created**: 2025-07-22  
**Last Modified**: 2026-07-23