[jcifs] jcifs-0.9.5 timeout on the Windows 2003 domain controller

Eric Glass eric.glass at gmail.com
Mon Aug 2 18:59:00 GMT 2004


Yes, typically so; do you have the "jcifs.smb.client.*" properties
specified?  If so, it should be negotiating signing properly using
that account.  If you have a packet capture on the servlet container,
that might help; you can send it to me directly.  Also attach your
web.xml.

Eric

On Mon, 2 Aug 2004 10:41:00 -0500, John Jih <john.jih at halliburton.com> wrote:
> Eric:
> 
> When I got the message as the following, does that mean the SMB
> Signature requirement of the specific Win 2003 Domain Controller is on?
> (I replaced the real name and IP of the error message). I got this error
> like every two or three tries by using this param:
> 
>        <init-param>
>            <param-name>jcifs.http.domainController</param-name>
>            <param-value>corp.mycompany.com</param-value>
>        </init-param>
> 
> ------------------------------------------------------------------------
> ---
> 
> 500 Internal Server Error
> jcifs.smb.SmbException: Unverifiable signature:
> corp.mycompany.com/??.???.?.??? at
> jcifs.smb.SmbTransport.send(SmbTransport.java:644)      at
> jcifs.smb.SmbSession.sessionSetup(SmbSession.java:189)  at
> jcifs.smb.SmbSession.send(SmbSession.java:148)  at
> jcifs.smb.SmbTree.treeConnect(SmbTree.java:134) at
> jcifs.smb.SmbSession.logon(SmbSession.java:85)  at
> jcifs.smb.SmbSession.logon(SmbSession.java:80)  at
> jcifs.http.NtlmHttpFilter.doFilter(NtlmHttpFilter.java:129)     at
> com.evermind[Oracle9iAS (9.0.2.1.0) Containers for
> J2EE].server.http.ServletRequestDispatcher.invoke(ServletRequestDispatch
> er.java:535)    at com.evermind[Oracle9iAS (9.0.2.1.0) Containers for
> J2EE].server.http.ServletRequestDispatcher.forwardInternal(ServletReques
> tDispatcher.java:281)   at com.evermind[Oracle9iAS (9.0.2.1.0)
> Containers for
> J2EE].server.http.HttpRequestHandler.processRequest(HttpRequestHandler.j
> ava:766)        at com.evermind[Oracle9iAS (9.0.2.1.0) Containers for
> J2EE].server.http.HttpRequestHandler.run(HttpRequestHandler.java:259)
> at com.evermind[Oracle9iAS (9.0.2.1.0) Containers for
> J2EE].server.http.HttpRequestHandler.run(HttpRequestHandler.java:107)
> at
> EDU.oswego.cs.dl.util.concurrent.PooledExecutor$Worker.run(PooledExecuto
> r.java:802)     at java.lang.Thread.run(Thread.java:479)
> 
> Thanks,
> John Jih
> Halliburton ERP CoE HR/Payroll/Labor Applications
> 
> -----Original Message-----
> From: Eric Glass [mailto:eric.glass at gmail.com]
> Sent: Thursday, July 22, 2004 11:56 AM
> To: John Jih
> Cc: jCIFS Mailing List
> Subject: Re: [jcifs] jcifs-0.9.5 timeout on the Windows 2003 domain
> controller
> 
> >
> > <init-param>
> >    <param-name>jcifs.smb.client.domain</param-name>
> >    <param-value>MYDOMAIN</param-value>
> > </init-param>
> > <init-param>
> >    <param-name>jcifs.smb.client.username</param-name>
> >    <param-value>myusername</param-value>
> > </init-param>
> > <init-param>
> >    <param-name>jcifs.smb.client.password</param-name>
> >    <param-value>mypassword</param-value>
> > </init-param>
> > <init-param>
> >    <param-name>jcifs.netbios.wins</param-name>
> >    <param-value>10.10.2.20</param-value>
> > </init-param>
> >
> >
> > then add the following param to authenticate the web application
> user's
> > information with a specific or group of Domain Controllers. Is this
> the
> > recommended way to work with the windows 2003 Domain Controller
> > environment?
> >
> >        <init-param>
> >            <param-name>jcifs.http.domainController</param-name>
> >            <param-value>10.10.3.55,10,10.3.56</param-value>
> >        </init-param>
> >
> 
> "jcifs.http.domainController" is used to specify a single domain
> controller to contact.  You can specify multiple WINS servers in
> "jcifs.netbios.wins" using a comma-delimited list.
> 
> With what you have specified above, you shouldn't need to have
> "jcifs.http.domainController" specified.  jCIFS will contact a WINS
> server listed in "jcifs.netbios.wins" and ask it for the list of
> domain controllers for the domain specified in
> "jcifs.smb.client.domain" ("MYDOMAIN").  It will then automatically
> load balance among those controllers.  If it encounters a Windows 2003
> server that requires signing, it will set up the connection using the
> credentials you provided in jcifs.smb.client.domain/username/password.
> So you should be okay with just what you have above.
> 
> Eric
>


More information about the jcifs mailing list