[jcifs] FW: Inconsistent Authentication Results: Access Denied & Windows Enter password popping up

[Augustus Macaulay]

Mike,
I have tried out the jcifs 1.2.8, and the behaviour is the same.

When it works I get the following smb response;
SmbComSessionSetupAndXResponse[command=SMB_COM_SESSION_SETUP_ANDX,receiv
ed=false,errorCode=0,flags=0x0098,flags2=0xC007,signSeq=1,tid=6150,pid=4
8752,uid=12289,mid=2,wordCount=3,byteCount=138,andxCommand=0x75,andxOffs
et=179,isLoggedInAsGuest=false,nativeOs=Windows Server 2003 3790 Service
Pack 1,nativeLanMan=Windows Server 2003 5.2,primaryDomain=####]
NtlmHttpFilter: Domain = ####, User = #######, Password = null
successfully authenticated against 0.0.0.0<00>/###.##.###.##

Otherwise I get this smb response;
SmbComSessionSetupAndXResponse[command=SMB_COM_SESSION_SETUP_ANDX,receiv
ed=false,errorCode=Access is
denied.,flags=0x0098,flags2=0xC007,signSeq=15,tid=0,pid=48752,uid=0,mid=
18,wordCount=0,byteCount=0,andxCommand=0xFF,andxOffset=0,isLoggedInAsGue
st=false,nativeOs=,nativeLanMan=,primaryDomain=]
NtlmHttpFilter: Domain = ####, User = #######, Password = null:
0xC0000022, against 0.0.0.0<00>/###.##.###.##
jcifs.smb.SmbAuthException: Access is denied.
	at jcifs.smb.SmbTransport.checkStatus(SmbTransport.java:499)
	at jcifs.smb.SmbTransport.send(SmbTransport.java:611)
	at jcifs.smb.SmbSession.sessionSetup(SmbSession.java:271)
	at jcifs.smb.SmbSession.send(SmbSession.java:227)
	at jcifs.smb.SmbTree.treeConnect(SmbTree.java:147)
	at jcifs.smb.SmbSession.logon(SmbSession.java:162)
	at jcifs.smb.SmbSession.logon(SmbSession.java:154)
	at jcifs.http.NtlmHttpFilter.negotiate(NtlmHttpFilter.java:193)
	at jcifs.http.NtlmHttpFilter.doFilter(NtlmHttpFilter.java:112)

Use # char to hide some information, and added extra logs to get more
info.
We can't seem to find any failure info on the Domain Controller server.
Does this make any sense to you?

Gus

-----Original Message-----
From: Michael B Allen [mailto:mba2000 at ioplex.com] 
Sent: 29 March 2006 17:47
To: Augustus Macaulay
Cc: jcifs at lists.samba.org
Subject: Re: [jcifs] FW: Inconsistent Authentication Results: Access
Denied & Windows Enter password popping up

1.2.7 has a bug that looks like this. I believe it is fixed in 1.2.8.
Pls try 1.2.8 and let us know either way what happends. Also, you might
want to post your filter section from your web.xml just so that I can
verify it's sane.

Mike

On Wed, 29 Mar 2006 16:39:50 +0100
"Augustus Macaulay" <Augustus.macaulay at detica.com> wrote:

> 
> > I am using NtlmHttpFilter on jcifs 1.2.7, the application is running

> > in a Tomcat Web server on a Windows 2000 Advanced Server, and the 
> > Domain Controller is on Windows 2003 Server.
> > 
> > With Tomcat running on the STAGING Windows 2000 advanced server, 
> > everything runs fine and we can authenticate against the Domain 
> > Controller.
> > 
> > With Tomcat running on the LIVE windows 2000 advanced server, with 
> > the same jcifs configuration and using the same Domain Controller, 
> > we get inconsistent results.
> > Sometimes a user gets authenticated successfully, and at other times

> > we get;
> >  
> > NtlmHttpFilter: [DOMAIN]\\[USERNAME]: 0xC0000022:
> > jcifs.smb.SmbAuthException: Access is denied.
> > 
> > At the same time the Window's "Enter Network Password" box pops up.
> > 
> > Any suggestions from anyone out there will be much appreciated.
> > 
> > Gus
> 
> 
> 
> This message should be regarded as confidential. If you have received
this email in error please notify the sender and destroy it immediately.
> Statements of intent shall only become binding when confirmed in hard
copy by an authorised signatory.  The contents of this email may relate
to dealings with other companies within the Detica Group plc group of
companies.
> 
> Detica Limited is registered in England under No: 1337451.
> 
> Registered offices: Surrey Research Park, Guildford, Surrey, GU2 7YP,
England.
> 
> 
>