[jcifs] RE: jcifs digest, Vol 1 #529 - 4 msgs

Sujit Jagdev sujit.jagdev at casero.com
Thu Oct 31 04:27:30 EST 2002


Dear Michael,
I have noticed some odd behavior with the JCIFS 7b library.
It seems to hang when I try to execute a listFiles() on certain hosts.
I have tried it out with the old 7b3 library and it seems to work.
I will try to comply a more definite responsre, as soon as I get
ethereal to diagnose the problem, but stopping and restarting the
service sometimes alleviates the delay.
Sujit


-----Original Message-----
From: jcifs-request at lists.samba.org
[mailto:jcifs-request at lists.samba.org] 
Sent: Wednesday, October 30, 2002 12:00 PM
To: jcifs at lists.samba.org
Subject: jcifs digest, Vol 1 #529 - 4 msgs

Send jcifs mailing list submissions to
	jcifs at lists.samba.org

To subscribe or unsubscribe via the World Wide Web, visit
	http://lists.samba.org/listinfo/jcifs
or, via email, send a message with subject or body 'help' to
	jcifs-request at lists.samba.org

You can reach the person managing the list at
	jcifs-admin at lists.samba.org

When replying, please edit your Subject line so it is more specific
than "Re: Contents of jcifs digest..."


Today's Topics:

   1. Re: Obtaining username to/from NT SID (Michael B. Allen)
   2. RE: Obtaining username to/from NT SID
(Peter.Leschev at BTFinancialgroup.com)
   3. Re: Obtaining username to/from NT SID (eglass1 at attbi.com)
   4. RE: Obtaining username to/from NT SID (eglass1 at attbi.com)

--__--__--

Message: 1
Date: Tue, 29 Oct 2002 14:41:12 -0500
From: "Michael B. Allen" <miallen at eskimo.com>
To: eglass1 at attbi.com
Cc: jcifs at lists.samba.org
Subject: Re: [jcifs] Obtaining username to/from NT SID

This needs DCE/RCP and LsarLookupSids or similar (p67 DCE/RPC over SMB)
which we just don't support. We have up to TransactNamedPipe functions
but it requires a PDU layer, some crypto, and a lot of patience. I just
cannot bring myself to start doing it. Don't hold your breath.

On Tue, 29 Oct 2002 12:54:28 +0000
eglass1 at attbi.com wrote:

> I'm currently working on a project where I have the need 
> to match a user's NT SID to their username.  Previously, 
> I was using a native call to LookupAccountSid with the 
> SID to retrieve the username.  However, I was wondering 
> if it would be possible via jCIFS to either do this or 
> go the other way -- i.e., the user has authenticated via 
> NTLM, and I want to retrieve the SID (using perhaps the 
> NtlmPasswordAuthentication object?).  I essentially have 
> 2 sources (one with the SID and one with a username), 
> and I need to match them.  Anyone have any ideas?  
> Ideally, I would like to do this in pure Java (I can 
> already do it natively, but that ties me to a specific 
> platform).
> 
> Eric


-- 
A  program should be written to model the concepts of the task it
performs rather than the physical world or a process because this
maximizes  the  potential  for it to be applied to tasks that are
conceptually  similar and, more important, to tasks that have not
yet been conceived. 

--__--__--

Message: 2
From: <Peter.Leschev at BTFinancialgroup.com>
To: eglass1 at attbi.com
Cc: jcifs at lists.samba.org, miallen at eskimo.com
Subject: RE: [jcifs] Obtaining username to/from NT SID
Date: Wed, 30 Oct 2002 09:57:06 +1100


	You should be able to obtain this information using JNDI LDAP
querying NT's ActiveDirectory...	Is this an option for you in
your environment?

-----Original Message-----
From: Michael B. Allen [mailto:miallen at eskimo.com]
Sent: Wednesday, October 30, 2002 6:41 AM
To: eglass1 at attbi.com
Cc: jcifs at lists.samba.org
Subject: Re: [jcifs] Obtaining username to/from NT SID


This needs DCE/RCP and LsarLookupSids or similar (p67 DCE/RPC over SMB)
which we just don't support. We have up to TransactNamedPipe functions
but it requires a PDU layer, some crypto, and a lot of patience. I just
cannot bring myself to start doing it. Don't hold your breath.

On Tue, 29 Oct 2002 12:54:28 +0000
eglass1 at attbi.com wrote:

> I'm currently working on a project where I have the need 
> to match a user's NT SID to their username.  Previously, 
> I was using a native call to LookupAccountSid with the 
> SID to retrieve the username.  However, I was wondering 
> if it would be possible via jCIFS to either do this or 
> go the other way -- i.e., the user has authenticated via 
> NTLM, and I want to retrieve the SID (using perhaps the 
> NtlmPasswordAuthentication object?).  I essentially have 
> 2 sources (one with the SID and one with a username), 
> and I need to match them.  Anyone have any ideas?  
> Ideally, I would like to do this in pure Java (I can 
> already do it natively, but that ties me to a specific 
> platform).
> 
> Eric


-- 
A  program should be written to model the concepts of the task it
performs rather than the physical world or a process because this
maximizes  the  potential  for it to be applied to tasks that are
conceptually  similar and, more important, to tasks that have not
yet been conceived. 

------------------------------------------------------------------------
------
This message and any attachment is confidential and may be privileged or
otherwise protected from disclosure.  If you have received it by mistake
please let us know by reply and then delete it from your system; you
should not copy the message or disclose its contents to anyone.





--__--__--

Message: 3
From: eglass1 at attbi.com
To: "Michael B. Allen" <miallen at eskimo.com>
Cc: jcifs at lists.samba.org
Subject: Re: [jcifs] Obtaining username to/from NT SID
Date: Wed, 30 Oct 2002 12:19:42 +0000

Yeah, I kind of figured it wouldn't be trivial, but it 
doesn't hurt to ask.  Oh well.  I'm assuming a DCE/RPC 
implementation would be required to enumerate the NT 
group memberships as well?
> This needs DCE/RCP and LsarLookupSids or similar (p67 DCE/RPC over
SMB)
> which we just don't support. We have up to TransactNamedPipe functions
> but it requires a PDU layer, some crypto, and a lot of patience. I
just
> cannot bring myself to start doing it. Don't hold your breath.
> 
> On Tue, 29 Oct 2002 12:54:28 +0000
> eglass1 at attbi.com wrote:
> 
> > I'm currently working on a project where I have the need 
> > to match a user's NT SID to their username.  Previously, 
> > I was using a native call to LookupAccountSid with the 
> > SID to retrieve the username.  However, I was wondering 
> > if it would be possible via jCIFS to either do this or 
> > go the other way -- i.e., the user has authenticated via 
> > NTLM, and I want to retrieve the SID (using perhaps the 
> > NtlmPasswordAuthentication object?).  I essentially have 
> > 2 sources (one with the SID and one with a username), 
> > and I need to match them.  Anyone have any ideas?  
> > Ideally, I would like to do this in pure Java (I can 
> > already do it natively, but that ties me to a specific 
> > platform).
> > 
> > Eric
> 
> 
> -- 
> A  program should be written to model the concepts of the task it
> performs rather than the physical world or a process because this
> maximizes  the  potential  for it to be applied to tasks that are
> conceptually  similar and, more important, to tasks that have not
> yet been conceived. 

--__--__--

Message: 4
From: eglass1 at attbi.com
To: <Peter.Leschev at BTFinancialgroup.com>
Cc: jcifs at lists.samba.org, miallen at eskimo.com
Subject: RE: [jcifs] Obtaining username to/from NT SID
Date: Wed, 30 Oct 2002 12:36:47 +0000

Possibly; we are currently beginning deployment of AD 
within our organization, so I haven't done too much with 
it.  At the moment I'm using JNDI against an Exchange 
server.

The biggest stumbling block I'm encountering is that the 
Exchange LDAP schema doesn't provide an attribute for 
the domain (or a reliable username, for that 
matter; "uid" is usually, but not necessarily, the same 
as the username).  So what I'm doing is retrieving the 
Assoc-NT-Account attribute (which is a SID) and 
resolving it to a domain and username via 
LookupAccountSid.

I'm not familiar with Active Directory's schema, but if 
you have any suggestions I would be quite interested.  
This is kind of off-topic for the jCIFS list, I know, 
but hopefully someone out there has had to do something 
similar.
> 
> 	You should be able to obtain this information using JNDI LDAP
querying 
> NT's ActiveDirectory...	Is this an option for you in your
environment?
> 
> -----Original Message-----
> From: Michael B. Allen [mailto:miallen at eskimo.com]
> Sent: Wednesday, October 30, 2002 6:41 AM
> To: eglass1 at attbi.com
> Cc: jcifs at lists.samba.org
> Subject: Re: [jcifs] Obtaining username to/from NT SID
> 
> 
> This needs DCE/RCP and LsarLookupSids or similar (p67 DCE/RPC over
SMB)
> which we just don't support. We have up to TransactNamedPipe functions
> but it requires a PDU layer, some crypto, and a lot of patience. I
just
> cannot bring myself to start doing it. Don't hold your breath.
> 
> On Tue, 29 Oct 2002 12:54:28 +0000
> eglass1 at attbi.com wrote:
> 
> > I'm currently working on a project where I have the need 
> > to match a user's NT SID to their username.  Previously, 
> > I was using a native call to LookupAccountSid with the 
> > SID to retrieve the username.  However, I was wondering 
> > if it would be possible via jCIFS to either do this or 
> > go the other way -- i.e., the user has authenticated via 
> > NTLM, and I want to retrieve the SID (using perhaps the 
> > NtlmPasswordAuthentication object?).  I essentially have 
> > 2 sources (one with the SID and one with a username), 
> > and I need to match them.  Anyone have any ideas?  
> > Ideally, I would like to do this in pure Java (I can 
> > already do it natively, but that ties me to a specific 
> > platform).
> > 
> > Eric
> 
> 
> -- 
> A  program should be written to model the concepts of the task it
> performs rather than the physical world or a process because this
> maximizes  the  potential  for it to be applied to tasks that are
> conceptually  similar and, more important, to tasks that have not
> yet been conceived. 
> 
>
------------------------------------------------------------------------
------
> This message and any attachment is confidential and may be privileged
or > otherwise protected from disclosure.  If you have received it by
mistake please 
> let us know by reply and then delete it from your system; you should
not copy 
> the message or disclose its contents to anyone.
> 
> 
> 
> 


--__--__--

_______________________________________________
jcifs mailing list
jcifs at lists.samba.org
http://lists.samba.org/listinfo/jcifs


End of jcifs Digest


-----

The information contained in this message is proprietary of Casero Inc.,
protected from disclosure, and may be privileged. The information is
intended to be conveyed only to the designated recipient(s) of the
message. If the reader of this message is not the intended recipient,
you are hereby notified that any dissemination, use, distribution or
copying of this communication is strictly prohibited and may be
unlawful. If you have received this communication in error, please
notify us immediately by replying to the message and deleting it from
your computer. Thank you.




More information about the jcifs mailing list