"Error accessing API" Unable to access the DLP Enforce incident service using API via ICA

Products

• Data Loss Prevention
• Information Centric Analytics

Issue/Introduction

Using API via ICA you are unable to access the DLP enforce Incident service

Error accessing API

The HTTP service located at https://datalossprevention.int.xxxx.xxx/ProtectManager/services/v2011/incidents is unavailable. This could be because the service is too busy or because no endpoint was found listening at the specified address. Please ensure that the address is correct and try accessing the service again later

You are trying to access the following Enforce URLs

https://datalossprevention.int.xxxx.xxx/ProtectManager/IncidentDetail.do?value(variable_1)=incident.id%26value(operator_1)=in%26value(operand_1)=#VALUE#

https://datalossprevention.int.xxxx.xxx/ProtectManager/services/v2011/incidents

https://datalossprevention.int.xxxx.xxx/ProtectManager/DownloadAttachment.do?crackedmessageID=#MESSAGECOMPONENTID#&incidentID=#INCIDENTID#

The localhost log contains these entries:

Level: SEVERE
Source: com.symantec.dlp.login.spring.EnforceAuthenticationServiceBase
Message: Account for user xxxICAxxx is locked

Level: WARNING
Source: com.symantec.dlp.login.spring.SymantecFormAuthenticationProvider
Message: Form based authentication failed: username=xxxICAxxx

Level: WARNING
Source: com.symantec.dlp.login.spring.SymantecKerberosAuthenticationProvider
Message: Kerberos authentication failed: user=xxxICAxxx

Environment

Release: 15.8 MP3

Resolution

The user "xxxICAxxx" is the ICA account being used for the API.

The problem was on the ICA user account ID, it was not entered properly.