Hi Team
I need to complete a DLP Quarantine Sharepoint Flexresponse configuration but I’m trying to get fresh ideas about a situation that I have:
Situation:
- Sharepoint 2010
- DLP Enforce and Network Discover v 14.5 MP1
- DLP Solution was deployed successfully
- Target scan is showing incidents .
- The Sharepoint credential is a farm admin
Here is the issue… the FlexResponse fail with the following error: Server was unable to process request. ---> Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))
The closest document from Symantec it was for Data Insight and recommended to Enable Windows Authentication on Sharepoint , https://www.veritas.com/support/en_US/article.TECH...
At Sharepoint Central Administration> Security> General Security>Specify Authentication Providers> .. The Claims Authentication Types shows that Windows Authentication is enabled and using NTLM as Integrated Windows Authentication...
---------------------------------------------------------------------------------------------------------------------
Logs from Enforce/Tomcat localhost show the following situation:
12 March 2017 10:00:59,791- Thread: 147 INFO [com.symantec.dlp.sharepoint.connector.soap.SharePointSOAPWSInvoker] Profile - WebServiceCall|moveItem|http://sharepoint:7200/site1/folderV::http://sharepoint:7200/site1/folderV/G1/document.pdf->http://sharepoint:7200/site1/folderV/dlpsp-quarantine|614
12 March 2017 10:00:59,791- Thread: 147 SEVERE [com.symantec.dlpx.flexresponse.sharepointQuarantine.SharepointQuarantineAction] could.not.quarantine.file
Cause:
com.symantec.dlp.sharepoint.connector.exception.SharePointBaseException: ::faultcode => soap:Server::faultstring => Server was unable to process request. ---> Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))::detail =>
javax.xml.ws.soap.SOAPFaultException: Server was unable to process request. ---> Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))
org.apache.cxf.binding.soap.SoapFault: Server was unable to process request. ---> Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))
com.symantec.dlp.sharepoint.connector.exception.SharePointBaseException: ::faultcode => soap:Server::faultstring => Server was unable to process request. ---> Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))::detail =>
at com.symantec.dlp.sharepoint.connector.exception.SharePointExceptionHandler.throwException(SharePointExceptionHandler.java:47)
at com.symantec.dlp.sharepoint.connector.exception.SharePointExceptionHandler.throwException(SharePointExceptionHandler.java:83)
at com.symantec.dlp.sharepoint.connector.soap.SharePointSOAPWSInvoker.moveItem(SharePointSOAPWSInvoker.java:451)
at com.symantec.dlp.sharepoint.connector.flexresponse.SharepointFlexOperations.moveItem(SharepointFlexOperations.java:100)
at com.symantec.dlpx.flexresponse.sharepoint.shared.SharepointConnector.move(SharepointConnector.java:110)
at com.symantec.dlpx.flexresponse.sharepoint.shared.SharepointRemediator.moveItem(SharepointRemediator.java:174)
at com.symantec.dlpx.flexresponse.sharepointQuarantine.SharepointQuarantineRemediator.moveDocumentToQuarantineLocation(SharepointQuarantineRemediator.java:222)
at com.symantec.dlpx.flexresponse.sharepointQuarantine.SharepointQuarantineAction.quarantine(SharepointQuarantineAction.java:216)
at com.symantec.dlpx.flexresponse.sharepointQuarantine.SharepointQuarantineAction.executeSharepointQuarantine(SharepointQuarantineAction.java:185)
at com.symantec.dlpx.flexresponse.sharepointQuarantine.SharepointQuarantineAction.execute(SharepointQuarantineAction.java:115)
at com.vontu.incidentresponse.action.invoker.ActionInvoker.invokeActionAndPersistResults(ActionInvoker.java:313)
at com.vontu.incidentresponse.action.invoker.ActionInvoker.invokeActionAndPersistResults(ActionInvoker.java:297)
at com.vontu.incidentresponse.action.invoker.ActionInvoker.run(ActionInvoker.java:171)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
at java.lang.Thread.run(Thread.java:745)
Caused by: javax.xml.ws.soap.SOAPFaultException: Server was unable to process request. ---> Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))
at org.apache.cxf.jaxws.JaxWsClientProxy.invoke(JaxWsClientProxy.java:156)
at com.sun.proxy.$Proxy487.moveItem(Unknown Source)
at com.symantec.dlp.sharepoint.connector.soap.SharePointSOAPWSInvoker.moveItem(SharePointSOAPWSInvoker.java:446)
... 13 more
Caused by: org.apache.cxf.binding.soap.SoapFault: Server was unable to process request. ---> Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))
at org.apache.cxf.binding.soap.interceptor.Soap11FaultInInterceptor.unmarshalFault(Soap11FaultInInterceptor.java:75)
at org.apache.cxf.binding.soap.interceptor.Soap11FaultInInterceptor.handleMessage(Soap11FaultInInterceptor.java:46)
at org.apache.cxf.binding.soap.interceptor.Soap11FaultInInterceptor.handleMessage(Soap11FaultInInterceptor.java:35)
at org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:263)
at org.apache.cxf.interceptor.AbstractFaultChainInitiatorObserver.onMessage(AbstractFaultChainInitiatorObserver.java:113)
at org.apache.cxf.binding.soap.interceptor.CheckFaultInterceptor.handleMessage(CheckFaultInterceptor.java:69)
at org.apache.cxf.binding.soap.interceptor.CheckFaultInterceptor.handleMessage(CheckFaultInterceptor.java:34)
at org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:263)
at org.apache.cxf.endpoint.ClientImpl.onMessage(ClientImpl.java:799)
at org.apache.cxf.transport.http.SPAuthHttpConduit$WrappedOutputStream.handleResponseInternal(SPAuthHttpConduit.java:1037)
at org.apache.cxf.transport.http.SPAuthHttpConduit$WrappedOutputStream.handleResponse(SPAuthHttpConduit.java:869)
at org.apache.cxf.transport.http.SPAuthHttpConduit$WrappedOutputStream.close(SPAuthHttpConduit.java:721)
at org.apache.cxf.transport.AbstractConduit.close(AbstractConduit.java:56)
at org.apache.cxf.transport.http.SPAuthHttpConduit.close(SPAuthHttpConduit.java:539)
at org.apache.cxf.interceptor.MessageSenderInterceptor$MessageSenderEndingInterceptor.handleMessage(MessageSenderInterceptor.java:62)
at org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:263)
at org.apache.cxf.endpoint.ClientImpl.doInvoke(ClientImpl.java:533)
at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:463)
at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:366)
at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:319)
at org.apache.cxf.frontend.ClientProxy.invokeSync(ClientProxy.java:88)
at org.apache.cxf.jaxws.JaxWsClientProxy.invoke(JaxWsClientProxy.java:134)
... 15 more
--------------------------------------------------------------------------------------------------------------------------------
Logs from Sharepoint IIS show the following info:
03/12/2017 10:00:31.95 w3wp.exe (0x4E14) 0x4E68 SharePoint Foundation General 8e2s Medium Unknown SPRequest error occurred. More information: 0x800700050x80070005 302949bd-3030-4e16-98d8-e1576289a9f6
03/12/2017 10:00:31.95 w3wp.exe (0x4E14) 0x4E68 SharePoint Foundation General avfx High SOAP exception: System.Threading.ThreadAbortException: Thread was being aborted. at System.Threading.Thread.AbortInternal() at System.Threading.Thread.Abort(Object stateInfo) at System.Web.HttpResponse.End() at Microsoft.SharePoint.Utilities.SPUtilityInternal.SendResponse(HttpContext context, Int32 code, String strBody) at Microsoft.SharePoint.Utilities.SPUtility.HandleAccessDenied(HttpContext context) at Microsoft.SharePoint.Utilities.SPUtility.HandleAccessDenied(Exception ex) at Microsoft.SharePoint.Library.SPRequest.GetListsWithCallback(String bstrUrl, Guid foreignWebId, String bstrListInternalName, Int32 dwBaseType, Int32 dwBaseTypeAlt, Int32 dwServerTemplate, UInt32 dwGetListFlags, UInt32 dwListFilterFlags, Boolean bPrefetchMetaData, Boolean bSecurityTrimme... 302949bd-3030-4e16-98d8-e1576289a9f6
03/12/2017 10:00:31.95* w3wp.exe (0x4E14) 0x4E68 SharePoint Foundation General avfx High ...d, Boolean bGetSecurityData, Boolean bPrefetchRelatedFields, ISP2DSafeArrayWriter p2DWriter, Int32& plRecycleBinCount) at Microsoft.SharePoint.SPListCollection.EnsureListsData(Guid webId, String strListName) at Microsoft.SharePoint.SPListCollection.GetListByName(String strListName, Boolean bThrowException) at Microsoft.SharePoint.SoapServer.SPBaseImpl.GetSPListByTitle(SPWeb spWeb, String strListName) at Microsoft.SharePoint.SoapServer.SPBaseImpl.GetSPList(SPWeb spWeb, String strListName, Boolean bGetMetaData, Boolean bGetSecurityData) at Microsoft.SharePoint.SoapServer.SPBaseImpl.GetSPList(String strListName, Boolean bGetMetaData, Boolean bGetSecurityData) at Microsoft.SharePoint.SoapServer.ItemsCache.get_List() at Microsoft.SharePoint.SoapServer.ListDataImpl.Ex... 302949bd-3030-4e16-98d8-e1576289a9f6
