[jcifs] Some questions about Windows vs Linux update

[Glass, Eric]

Typically, IE is set to do silent NTLM on local intranet only ("Automatic
logon only in Intranet Zone").  I believe it will always do manual NTLM if
an IP address is specified rather than a hostname in this case, though I may
be mistaken.  You can try setting "Automatic logon with current username and
password" and see if that supresses the prompt.

> -----Original Message-----
> From: Tyrrell, James [mailto:JTyrrell at AEGONUSA.com]
> Sent: Tuesday, March 25, 2003 10:39 AM
> To: 'Allen, Michael B (RSCH)'; Tyrrell, James; 'jcifs at lists.samba.org'
> Subject: RE: [jcifs] Some questions about Windows vs Linux update
> 
> 
> Michael et al,
> 
> Well since I work at a place that be default does not grant 
> me admin access
> I have been working on this from another angle.
> 
> It appears that if I run this as a URL of 
> http://localhost:8080/SSIntra it
> works fine.  When I run it as a URL of 
> http://161.179.112.77:8080/SSIntra it
> fails.  I am working on getting the packet data.  I also 
> figured out how to
> turn on debugging, but it appears that I am not hitting the 
> core logon stuff
> at all.  I am guessing there is something not right in the 
> header getting
> that is going on when I use the ip address version vs the 
> localhost version.
> I will try and dig at this a little more.
> 
> Thank you
> Jim Tyrrll
> 
> 
> -----Original Message-----
> From: Allen, Michael B (RSCH) [mailto:Michael_B_Allen at ml.com]
> Sent: Monday, March 24, 2003 6:54 PM
> To: 'Tyrrell, James'; 'jcifs at lists.samba.org'
> Subject: RE: [jcifs] Some questions about Windows vs Linux
> 
> 
> 
> 
> > -----Original Message-----
> > From:	Tyrrell, James [SMTP:JTyrrell at AEGONUSA.com]
> > Sent:	Monday, March 24, 2003 4:24 PM
> > To:	'jcifs at lists.samba.org'
> > Subject:	[jcifs] Some questions about Windows vs Linux
> > 
> > Everyone,
> > 
> > All comments have to do with the jcifs.http.NtlmHttpFilter.
> > I have playing with this package over the last few days and 
> can not seem
> to
> > get this to work under Linux but it works fine under windows.
> > 
> > Some questions:
> > 1.)  If this can work under Linux how are you supposed to 
> test it, looking
> > at the code it looks like if I hit this from Mozilla then 
> it will return
> to
> > me an HttpServletResponse.SC_UNAUTHORIZED?  The docs at
> > http://jcifs.samba.org/src/docs/ntlmhttpauth.html seem to 
> indicate if a
> user
> > is not authenticated then there user name gotten with a
> > request.getUserName() is not set, however I just get a can 
> not get to
> error
> > in the logs of 401.
> > 
> 	Mozilla does not support NTLM HTTP authentication. This 
> only works
> with
> 	MSIE clients.
> 
> > 2.)  I am running the same configuration of Jetty on Linux 
> and Windows the
> > windows server from ie gives me the user name as I would 
> have thought,
> > however hitting the Linux box a prompt is given to the ie 
> user and even
> with
> > 
> 	If it works from one client against the windows server 
> and using the
> same client
> 	against the linux server gives you a password dialog 
> then it looks
> like it's trying
> 	to negotiate some other authentication. Perhaps plain.
> 
> > everything passed in they are still unable to get access.  
> Has anyone used
> > this on Linux and hit a windows domain controller and 
> gotten the user
> name.
> > 
> 	Yes.
> 
> > Does anyone use Jetty or should I use Tomcat?
> > 
> 	I have only really used Resin. My understanding is that 
> Tomcat works
> but there
> 	are reported problems with IE 6 and/or Win98 clients.
> 
> > 3.)  I tried to turn on the logging from the web.xml file with the
> parameter
> > syntax but that did not work, why?  Again I looked at the 
> code and I would
> > have thought this would have worked.
> > 
> 	How are you trying to provoke logging? If you pass 
> -Dlog=ALL as a VM
> 	parameter it should log to stderr wherever that goes. 
> Otherwise I do
> not believe
> 	setting it after jCIFS classes are loaded will have any effect.
> 
> > I am at wits end after spending all day on this.  Any 
> feedback would be a
> > great help.  This is so cool that this works from windows, but I am
> stumped
> > as to my Linux issues.
> > 
> 	The quickest way to get to the bottom of this is to get 
> an Ethereal
> or Netmon
> 	packet capture. Don't post it to the list, send it to 
> me directly.
> 
> > I should add that I changed my hosts file on Linux to resolve my IP
> address
> > from 127.0.0.1 to my assigned one and I have tried several domain
> > controllers.  I will also add that I am not getting any 
> errors at all
> echoed
> > anywhere.
> > 
> > Thank You
> > Jim Tyrrell
> > 
> > 
> 
 
**************************************************************************
The information transmitted herewith is sensitive information intended only
for use by the individual or entity to which it is addressed. If the reader
of this message is not the intended recipient, you are hereby notified that
any review, retransmission, dissemination, distribution, copying or other
use of, or taking of any action in reliance upon this information is
strictly prohibited. If you have received this communication in error,
please contact the sender and delete the material from your computer.