[jcifs] Re: Problems Upgrading From 0.7.15 to 1.1.9

[Pattison, David]

-----Original Message-----
From: Michael B Allen [mailto:mba2000 at ioplex.com] 
Sent: 15 March 2005 18:23
To: David Pattison
Cc: jcifs at lists.samba.org
Subject: Re: [jcifs] Re: Problems Upgrading From 0.7.15 to 1.1.9

On Tue, 15 Mar 2005 09:57:33 +0000 (UTC)
David Pattison <david.pattison at siemens.com> wrote:

> XP. However, the workstations and DC are on different domains and subnets,
> which may explain the NT_STATUS_TRUSTED_DOMAIN_FAILURE error. Why would
> the domains be trusted in 0.7.15 and not 1.1.9?

For NTLM HTTP Authentication to work the client workstation must be joined
to a domain that is or has a trust relationship with the authoritative
domain. Otherwise what credentials would the client submit if the DC
it's ultimately communicating with knows nothing about that user?

You must set jcifs.smb.client.domain or jcifs.http.domainController to
a machine that is an authority for or has a trust relationship with the
domain in which the user accounts reside.

Also if the client workstations are not joined to a domain at all then
the authentication will not be transparent at all.

Mike



Thanks Mike. Alas, there is no way our IT support will ever set up a trust
between the network all the workstations are on, and our home-made lab
network. 

What I'm really curious about is why doesn't the password dialog ever
appear? Surely if you try to authenticate and the credentials are not valid
a password dialog should/used to appear.

Regards,
David