Directory service connectivity and configuration

Web Security Help | Web Security Solutions | Version 7.8.x

Make sure that the Websense User Service machine and your directory server are running, and able to communicate over the network. The default ports used for directory service communication are:


139	NetBIOS communication: Active Directory
389	LDAP communication: Active Directory, Novell eDirectory, Oracle (formerly Sun Java) Directory Server
636	SSL port: Novell eDirectory, Oracle (formerly Sun Java) Directory Server
3268	Active Directory
3269	SSL port: Active Directory

In addition, consider the following:

If you are using Windows Active Directory in mixed mode, and User Service runs on a Windows Server machine, the account used to run User Service may require administrative privileges on the directory.

To check or change the User Service account, see Changing DC Agent, Logon Agent, and User Service permissions.

If you are running Active Directory in native mode, set the User Service to run as the Local System account. No account should be assigned to the actual service.

User Service connects to the directory with the administrator user name and password configured on the Settings > General > Directory Services > Add Global Catalog Server page in the Web Security manager.

If you are running User Service on a Linux machine and communicating with a Windows-based directory service, make sure that you have set up a WINS server and performed all necessary configuration steps (see User Service on a Websense appliance or Linux server).

Determine whether a firewall is blocking communication between the Web Security manager and User Service on port 55815. If so, open the blocked port.