Data Loss Prevention

 View Only
  • 1.  Symantec Vontu DLP Login Problem after enabling AD authentication

    Posted Apr 03, 2013 02:12 AM

    I set up a new instance of the Vontu Enforce server, and then configured the Enforce server to use AD for authentication.

    Now I cannot login neither using AD account nor the default Administrator account, and I just get a blank page with the address https://localhost/ProtectManager/j_security_check 

    after reading the article http://www.symantec.com/connect/forums/symantec-vontu-dlp-ad-authentication-users-problem-help I think the problem has happened because I did not include the correct path of the KRB5.INI file.

    How can I disable AD authentication, or change its settings now?

    Appreciate any help.

     



  • 2.  RE: Symantec Vontu DLP Login Problem after enabling AD authentication

    Posted Apr 03, 2013 01:03 PM

    COE,

     

    just login as Administrator and you can fix it... do you want to post the krb file sanitized?

    also are you using 1 dc or all of them?



  • 3.  RE: Symantec Vontu DLP Login Problem after enabling AD authentication

    Posted Apr 03, 2013 01:06 PM

    coe,

    also what happens when you run the kinit utility? doe you have windows firewall turned on or any other firewall blocking this? also you need to consider your domina level and the enforce are talking the same kerberos.



  • 4.  RE: Symantec Vontu DLP Login Problem after enabling AD authentication
    Best Answer

    Posted Apr 03, 2013 08:29 PM

     

    If you can't get the Administrator account to look at you can reset the settings from SQL Plus assuming you have access to the protect user in Oracle.

     

     

    1. Open up a command prompt
    2. Launch SQL Plus (sqlplus /nolog)
    3. Connect as protect user (connect protect@protect)
    4. Run the query below
    5. Restart the Vontu Manager Services
    6. PROFIT
    SQL Query Code
    update attribute set value='false' where name='KerberosAuthOn';
    commit;

     At this point Active Directory authentication is cleared and is set back to normal (local) login

     


  • 5.  RE: Symantec Vontu DLP Login Problem after enabling AD authentication

    Posted Apr 04, 2013 12:49 AM

    Thanks jjesse for your time... the steps you mentioned saved my day.. just add a last step to restart the Vontu Manager Service :)

     



  • 6.  RE: Symantec Vontu DLP Login Problem after enabling AD authentication

    Posted Apr 04, 2013 09:37 AM

    Thanks, glad I could help.  I had to open a support ticket w/ Symantec awhile back when it wasn't working correctly for me and they provided it.

     

    I edited the comment to restart the services.

     

    Would you mind marking it as the solution for me?

    Have an awesome day



  • 7.  RE: Symantec Vontu DLP Login Problem after enabling AD authentication

    Posted Apr 04, 2013 11:57 AM

    Plz check connection between oracle and enforce and also try to restart the bothe services to resolve in some order.