search cancel

Sharepoint Discover Scan fails with incorrect credentials

book

Article ID: 164112

calendar_today

Updated On:

Products

Data Loss Prevention Network Discover Data Loss Prevention Endpoint Discover Data Loss Prevention

Issue/Introduction

Proper credentials are used, and it outputs an error with invalid credentials in Discover Scan "Invalid credentials provided".

 

In ScanDetail-Sharepoint120.log

 

"2 груд. 2016 14:33:59","INFO","","STARTED_SCAN"," ","0","","","",""

"2 груд. 2016 14:34:01","WARNING","Sharepoint12 12/02/16 - 2:33 PM","FAILED_ITEM","xxxxxxxxxx.xxx/","0","Invalid credentials provided for http://xxxxxxxxxx.xxx/.","","",""

"2 груд. 2016 14:34:01","INFO","Sharepoint12 12/02/16 - 2:33 PM","FAILED_SEGMENT","xxxxxxxxxx.xxx/","0","Invalid credentials provided for http://xxxxxxxxxx.xxx/.","","",""

 

 

In FileReader0.log

 

WARNING: NTLM authentication error: Credentials cannot be used for NTLM authentication: org.apache.http.auth.UsernamePasswordCredentials

Environment

Sharepoint 2013

Resolution

NTLMv2 authentication is not enabled by default in DLP jCIFS configuration.

To enable NTLMv2 in jCIFS - edit /Vontu/Protect/config/Jcifs.properties, and replace:

jcifs.smb.lmCompatibility=1

replace with

jcifs.smb.lmCompatibility=3

(refer http://davenport.sourceforge.net/ntlm.html#ntlmVersion2 for different LM, LMv2, NTLM, NTLMv2 authentication mechanisms)

Step 2: Recycle Network Discover/Endpoint to read the new property values.