DLP Content Root Enumeration Scan fails with unknown error in the Enforce Console
search cancel

DLP Content Root Enumeration Scan fails with unknown error in the Enforce Console

book

Article ID: 175184

calendar_today

Updated On:

Products

Data Loss Prevention Data Loss Prevention Plus Suite Data Loss Prevention Network Discover Data Loss Prevention Enterprise Suite Data Loss Prevention Enforce Data Loss Prevention Endpoint Discover Data Loss Prevention Discover Suite Data Loss Prevention Core Package

Issue/Introduction

When attempting to run a Content Root Enumeration scan from within the Enforce Console, the scan will fail with an unknown error in the UI.

The ContentRootEnumerationScanDetail log contains the following:

"WARNING",": Plain text passwords are disabled",""

 

The localhost log contains the following:

06 Jun 2019 10:22:11,336- Thread: 1762 SEVERE [com.vontu.manager.contentrootdiscovery.provider.ScanEventHandler] An unexpected error occurred while finding or processing a content root.
Cause:
java.lang.RuntimeException: Plain text passwords are disabled
java.lang.RuntimeException: Plain text passwords are disabled
at jcifs.smb.SmbComTreeConnectAndX.writeParameterWordsWireFormat(SmbComTreeConnectAndX.java:129)
at jcifs.smb.AndXServerMessageBlock.writeAndXWireFormat(AndXServerMessageBlock.java:94)
at jcifs.smb.AndXServerMessageBlock.writeAndXWireFormat(AndXServerMessageBlock.java:166)
at jcifs.smb.AndXServerMessageBlock.encode(AndXServerMessageBlock.java:65)
at jcifs.smb.SmbTransport.doSend(SmbTransport.java:439)
at jcifs.util.transport.Transport.sendrecv(Transport.java:67)
at jcifs.smb.SmbTransport.send(SmbTransport.java:655)
at jcifs.smb.SmbSession.sessionSetup(SmbSession.java:316)
at jcifs.smb.SmbSession.send(SmbSession.java:218)
at jcifs.smb.SmbTree.treeConnect(SmbTree.java:176)
at jcifs.smb.SmbFile.doConnect(SmbFile.java:914)
at jcifs.smb.SmbFile.doShareEnum(SmbFile.java:1852)
at jcifs.smb.SmbFile.doEnum(SmbFile.java:1800)
at jcifs.smb.SmbFile.listFiles(SmbFile.java:1779)
at jcifs.smb.SmbFile.listFiles(SmbFile.java:1768)
at com.vontu.manager.contentrootdiscovery.provider.iterator.CIFSShareIterator.createShareIterator(CIFSShareIterator.java:205)
at com.vontu.manager.contentrootdiscovery.provider.iterator.CIFSShareIterator.checkForNextServer(CIFSShareIterator.java:168)
at com.vontu.manager.contentrootdiscovery.provider.iterator.CIFSShareIterator.hasNextItem(CIFSShareIterator.java:117)
at com.vontu.manager.contentrootdiscovery.provider.iterator.ExceptionThrowingIterator.hasNext(ExceptionThrowingIterator.java:47)
at com.vontu.manager.contentrootdiscovery.provider.iterator.ContentRootIterator.hasNext(ContentRootIterator.java:30)
at com.vontu.manager.contentrootdiscovery.provider.ContentRootDiscoveryTask.searchForContentRoots(ContentRootDiscoveryTask.java:190)
at com.vontu.manager.contentrootdiscovery.provider.ContentRootDiscoveryTask.run(ContentRootDiscoveryTask.java:134)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
at java.lang.Thread.run(Thread.java:748)

 

Environment

Any DLP version

Cause

The error is being thrown in the jcifs library. The issue is caused by the fact that some servers the DLP Content Root Eumeration Scan tries to scan require plain text passwords.

Resolution

Enable plain text passwords within the Jcifs.properties file on the Enforce server.

  1. On Windows navigate to ...\Program Files\Symantec\DataLossPrevention\EnforceServer\16.1.00000\Protect\config\Jcifs.properties.
  2. On Linux navigate to /opt/Symantec/DataLossPrevention/EnforceServer/16.1.00000/Protect/config/Jcifs.properties
  3. Change the jcifs.smb.client.disablePlainTextPasswords property from true to false and save the file.
  4. Restart the Manager service on the Enforce Server.
  5. Try to run the same Content Root Enumeration Scan again to ensure the issue goes away.
Powered by Wolken Software