Create a missing dc_config.txt file

Topic 51028 | DC Agent Troubleshooting | 12-Oct-2015


Applies To:	TRITON AP-WEB and Web Filter & Security, v8.0.x, v8.1.x

If DC Agent does not create a dc_config.txt file, this indicates that it is either unable to see any domain controllers, or the service does not have read and write privileges to the Websense bin directory.

If the DC Agent Service has read and write permissions to the bin directory, the most typical reasons it cannot create the file are:

DC Agent does not have the domain or enterprise admin permissions required to perform automatic domain discovery.

User Service is running on Linux, and your network does not include a WINS server. To resolve this, use DC Agent, rather than User Service, for domain discovery. See Use DC Agent for domain discovery.

The Computer Browser service is not running on the machine hosting DC Agent, User Service, or Windows Active Directory. See Manually enable the Computer Browser service.

If you are unable to resolve the issue preventing DC Agent from creating the file, it is possible to create the file manually (see Create the dc_config.txt file manually). When you do this, however, if the underlying problem is not resolved, DC Agent cannot detect changes to your network structure. You must maintain the list of domains and domain controllers in the dc_config.txt file manually.

Use DC Agent for domain discovery

Log on to the TRITON console and go to the Web > Settings > General > User Identification page.

Click the DC Agent instance hostname or IP address in the Transparent Identification Agents list.

Under Domain Discovery, make sure Enable automatic domain discovery is selected, then select DC Agent as the service to use for domain discovery.

The Websense DC Agent service must run with domain or enterprise admin permissions to perform automatic domain discovery.

Click OK to cache the change, then click Save and Deploy.

After about 2 minutes, the dc_config.txt file should be created automatically.

Create the dc_config.txt file manually

Open a text editor on the DC Agent machine.

Use the following format to list each domain that DC Agent should poll, followed by its domain controllers, as shown below. The square brackets ([]) around the domain name are required.

[WEST_DOMAIN]
dcWEST1=on
dcWEST2=on
[EAST_DOMAIN]
dcEAST1=on
dcEAST2=on

Enter a carriage return after the last line in the new file.

If this hard return is not included (creating a blank line at the end of the file), the last entry in the file gets improperly truncated, and an error message like the following appears in the websense.log file:

WSDCagent : Error reading Config File: dc_config.txt Erroneous Entry: dcEAST2=o

Save the file in the Websense bin directory (C:\Program Files\Websense\Web Security\bin, by default) with the name dc_config.txt.

Use the Windows Services tool to restart the Websense DC Agent service.