Endpoint Protection

 View Only
  • 1.  RHEL 6.x autoprotect/quarantine for LDAP users

    Posted Mar 17, 2014 12:12 PM

    Hello,

    I currently have SAVFL 1.0.14.13 installed on several RHEL 6 systems of various versions and kernels. Everything functions correctly for local users, but when I log on as an LDAP authenticated user the savtray icon disappears, notification popups won't appear, and most importantly, files copied from a USB drive are not automatically scanned and quarantined. When I log on as a local user to the same system and try to drag and drop the EICAR test file from a USB drive to my desktop, it is automatically quarantined and I get a popup notification.

    With the same version of SAVFL installed on various versions and kernels of RHEL 5,  everything works as is should, even with LDAP authenticated users. So there appears to be an issue with SAVFL 1.0.14.13 working with LDAP authentication and RHEL 6.x. Are there any settings I can apply, or a newer version of SAVFL that will address this problem? Any information is appreciated.

    Thanks,

    Mark



  • 2.  RE: RHEL 6.x autoprotect/quarantine for LDAP users

    Posted Mar 17, 2014 01:27 PM

    Not seen such issues before, good to place a call with support :) 



  • 3.  RE: RHEL 6.x autoprotect/quarantine for LDAP users

    Posted Mar 17, 2014 06:08 PM

    These are the listed supported kernels for RHEL 6.  Check to see if you are compatible.

    2.6.32-220.13.1.el6.i686 NEW in MR14 RHEL6U2
    2.6.32-279.el6.i686 NEW in MR14 RHEL6U3
    2.6.32-220.13.1.el6.x86_64 NEW in MR14 RHEL6U2 (EM64T/AMD64)
    2.6.32-279.el6.x86_64 NEW in MR14 RHEL6U3 (EM64T/AMD64)

     



  • 4.  RE: RHEL 6.x autoprotect/quarantine for LDAP users

    Posted Mar 19, 2014 10:51 AM

    I don't believe it to be a kernel issue, as it occurs on a RHEL 6.3 system running the 2.6.32-279.el6.x86-64 kernel, which SAVFL 1.0.14.13 supports. And everything works as it should when logged in as a local user, just not as an LDAP authenticated user with an NFS mounted home directory.