Listing multiple Domain Controllers in ipmap_conf.txt
2 years ago
Originally Published: 2011-12-12
Article Number
000054448
Applies To
ip_mapper.exe
Issue
Listing multiple Domain Controllers in ipmap_conf.txt
Missing some or all user identities in events detected by the DLP Sensor

Cause
The ipmap_conf.txt must list all domain controllers that may have handled user logon to a workstation

Resolution
Perform the following where the IP Mapper program is installed:

Run Start/Programs/RSA/RSA DLP IP Mapper/Configure IP Mapper
or Edit C:\Program Files\RSA\IPMapper\ipmap_conf.txt

Configure multiple Domain Controller sections as in the following example where DC1 and DC2 are both Domain Controllers entries:

###### General section header:

[GENERAL]

###### Output directory for IPMapper to save the ipmap files

OUT_DIR = c:/temp/

###### This variable determines how often you want to

###### run the IPMapper

SCHEDULED_INTERVAL = 10 minutes

###### The RSA DLP Suite Network Controller section header

[CA_CONTROLLER]

###### Put the domain name or IP address of the

###### Content Alarm NW Controller here

CONTROLLER = x.x.x.x

###### The Windows Domain Controller section header

[DOMAIN_CONTROLLER]

###### The domain of the domain controller server

DOMAIN = mydomain.com

###### The retention time for retire the old login information

RETENTION = 30 days

###### The name of the domain controller

SERVER = DC1

[DOMAIN_CONTROLLER]

###### The domain of the domain controller server

DOMAIN = mydomain.com

###### The retention time for retire the old login information

RETENTION = 30 days

###### The name of the domain controller

SERVER = DC2



Notes
This configuration will work if the Domain Controllers are all in the same domain. If there are multiple domains, install IPMapper once for each domain and configure each of the domain controllers for that domain in the respective IPMapper installation.