[jcifs] jcifs-0.9.5 timeout on the Windows 2003 domain controller

[John Jih]

Eric:

When I got the message as the following, does that mean the SMB
Signature requirement of the specific Win 2003 Domain Controller is on?
(I replaced the real name and IP of the error message). I got this error
like every two or three tries by using this param:


        <init-param>
            <param-name>jcifs.http.domainController</param-name>
            <param-value>corp.mycompany.com</param-value>
        </init-param>


------------------------------------------------------------------------
---

500 Internal Server Error
jcifs.smb.SmbException: Unverifiable signature:
corp.mycompany.com/??.???.?.???	at
jcifs.smb.SmbTransport.send(SmbTransport.java:644)	at
jcifs.smb.SmbSession.sessionSetup(SmbSession.java:189)	at
jcifs.smb.SmbSession.send(SmbSession.java:148)	at
jcifs.smb.SmbTree.treeConnect(SmbTree.java:134)	at
jcifs.smb.SmbSession.logon(SmbSession.java:85)	at
jcifs.smb.SmbSession.logon(SmbSession.java:80)	at
jcifs.http.NtlmHttpFilter.doFilter(NtlmHttpFilter.java:129)	at
com.evermind[Oracle9iAS (9.0.2.1.0) Containers for
J2EE].server.http.ServletRequestDispatcher.invoke(ServletRequestDispatch
er.java:535)	at com.evermind[Oracle9iAS (9.0.2.1.0) Containers for
J2EE].server.http.ServletRequestDispatcher.forwardInternal(ServletReques
tDispatcher.java:281)	at com.evermind[Oracle9iAS (9.0.2.1.0)
Containers for
J2EE].server.http.HttpRequestHandler.processRequest(HttpRequestHandler.j
ava:766)	at com.evermind[Oracle9iAS (9.0.2.1.0) Containers for
J2EE].server.http.HttpRequestHandler.run(HttpRequestHandler.java:259)
at com.evermind[Oracle9iAS (9.0.2.1.0) Containers for
J2EE].server.http.HttpRequestHandler.run(HttpRequestHandler.java:107)
at
EDU.oswego.cs.dl.util.concurrent.PooledExecutor$Worker.run(PooledExecuto
r.java:802)	at java.lang.Thread.run(Thread.java:479)




Thanks,
John Jih
Halliburton ERP CoE HR/Payroll/Labor Applications

-----Original Message-----
From: Eric Glass [mailto:eric.glass at gmail.com] 
Sent: Thursday, July 22, 2004 11:56 AM
To: John Jih
Cc: jCIFS Mailing List
Subject: Re: [jcifs] jcifs-0.9.5 timeout on the Windows 2003 domain
controller

> 
> <init-param>
>    <param-name>jcifs.smb.client.domain</param-name>
>    <param-value>MYDOMAIN</param-value>
> </init-param>
> <init-param>
>    <param-name>jcifs.smb.client.username</param-name>
>    <param-value>myusername</param-value>
> </init-param>
> <init-param>
>    <param-name>jcifs.smb.client.password</param-name>
>    <param-value>mypassword</param-value>
> </init-param>
> <init-param>
>    <param-name>jcifs.netbios.wins</param-name>
>    <param-value>10.10.2.20</param-value>
> </init-param>
> 
> 
> then add the following param to authenticate the web application
user's
> information with a specific or group of Domain Controllers. Is this
the
> recommended way to work with the windows 2003 Domain Controller
> environment?
> 
>        <init-param>
>            <param-name>jcifs.http.domainController</param-name>
>            <param-value>10.10.3.55,10,10.3.56</param-value>
>        </init-param>
> 

"jcifs.http.domainController" is used to specify a single domain
controller to contact.  You can specify multiple WINS servers in
"jcifs.netbios.wins" using a comma-delimited list.

With what you have specified above, you shouldn't need to have
"jcifs.http.domainController" specified.  jCIFS will contact a WINS
server listed in "jcifs.netbios.wins" and ask it for the list of
domain controllers for the domain specified in
"jcifs.smb.client.domain" ("MYDOMAIN").  It will then automatically
load balance among those controllers.  If it encounters a Windows 2003
server that requires signing, it will set up the connection using the
credentials you provided in jcifs.smb.client.domain/username/password.
 So you should be okay with just what you have above.


Eric