DLP AD Login Fails

Products

• Data Loss Prevention Enforce
• Data Loss Prevention

Issue/Introduction

DLP AD login stops working even though nothing has been changed.

Invalid user or password supplied

Cause

Issue with time drift with Kerberos.  Kerberos authenticators use timestamps, for protection against replay attacks.  When timestamps are off by over 5 minutes, it can cause Kerberos errors. 

Resolution

Implement NTP services for time synchronization. NTP fixed the issue.