[jcifs] Signing is required by the server but passwords are external

Mush Salee nimrod786 at hotmail.com
Mon Aug 2 21:22:10 GMT 2004


Guys,

thank you for all your help. I managed to get this working I'm not sure how, 
but the last thing I did was to enable file and print sharing and that 
seemed to do the trick. Thanks again for all your help.

re



>From: Richard Heap <richardheap at beeb.net>
>To: Eric Glass <eric.glass at gmail.com>
>CC: Mush Salee <nimrod786 at hotmail.com>, jcifs at lists.samba.org
>Subject: Re: [jcifs] Signing is required by the server but passwords 
>are	external
>Date: Fri, 30 Jul 2004 08:54:42 +0100
>
>Most Windows machines (certainly XP) do not listen to port 139 on 127.0.0.1 
>(the loopback address - what 'localhost' normally resolves to).
>
>To get this to work you have to have a real network connection (wireless, 
>ethernet, whatever) that is 'up' (i.e can see the access point, is plugged 
>into a hub etc) and have that interface have a ip address (for example, via 
>DHCP or static). [If you then do a >>netstat -an | find "139" you should 
>see it listening] - mine looks like this:
> >netstat -an | find "139"
>  TCP    10.10.112.2:139        0.0.0.0:0              LISTENING
>  TCP    192.168.30.101:139     0.0.0.0:0              LISTENING
>
>You could then use that ip address, or use the hostname that resolves to 
>that address.
>Tracert is a quick way to resolve ip->hostname
>from the example above use tracert 10.10.112.2 to find the hostname
>
>This 127.0.0.1 problem has caught me out several times (mostly when on a 
>long airplane journey with no way to get a network connection) and no way 
>to get XP to listen on the loopback port, when I've been intending to do 
>some testing etc. Anybody got any ideas about how to get XP to listen on 
>the loopback as well as physical network connections?
>
>Eric Glass wrote:
>
>>You've got "jcifs.http.domainController" pointing at "localhost", but
>>it doesn't appear to be listening on port 139.  If you have a
>>non-loopback address you could try that.  You should be able to use
>>any Windows box; pick one, then try telnetting to port 139 to make
>>sure you can connect.  Then put its IP in there and see if it works.
>>
>>Eric
>>
>>On Thu, 29 Jul 2004 20:57:45 +0000, Mush Salee <nimrod786 at hotmail.com> 
>>wrote:
>>
>>
>>>Guys,
>>>
>>>I've changed the web.xml to include some of the additional setting as
>>>suggested , i tried all the lmCompatibility setting as well but with no 
>>>joy.
>>>Please can you take a quick look at the web.xml below, just incase i'm 
>>>doing
>>>something really stupid. With the log level set to 10 I get an error
>>>straight away. I've attached the output below.
>>>
>>>Thanks again for you help and patience.
>>>
>>>Re
>>>
>>>M
>>>
>>>
>>><web-app>
>>>  <filter>
>>>    <filter-name>NTLM Authentication Filter</filter-name>
>>>    <filter-class>jcifs.http.NtlmHttpFilter</filter-class>
>>>
>>>    <init-param>
>>>      <param-name>jcifs.http.domainController</param-name>
>>>      <param-value>localhost</param-value>
>>>    </init-param>
>>>
>>>    <init-param>
>>>      <param-name>jcifs.util.loglevel</param-name>
>>>      <param-value>10</param-value>
>>>    </init-param>
>>>
>>><init-param>
>>>    <param-name>jcifs.smb.lmCompatibility</param-name>
>>>    <param-value>3</param-value>
>>></init-param>
>>>
>>>    <init-param>
>>>      <param-name>jcifs.smb.username</param-name>
>>>      <param-value>administrator</param-value>
>>>    </init-param>
>>>
>>>    <init-param>
>>>      <param-name>jcifs.smb.password</param-name>
>>>      <param-value>MYPASSWORD</param-value>
>>>    </init-param>
>>>
>>>  </filter>
>>>
>>>  <filter-mapping>
>>>    <filter-name>NTLM Authentication Filter</filter-name>
>>>    <url-pattern>/*</url-pattern>
>>>  </filter-mapping>
>>>
>>>jcifs.smb.SmbException: An error occured sending the request.
>>>java.net.ConnectException: Connection refused: connect
>>>        at java.net.PlainSocketImpl.socketConnect(Native Method)
>>>        at java.net.PlainSocketImpl.doConnect(PlainSocketImpl.java:305)
>>>        at 
>>>java.net.PlainSocketImpl.connectToAddress(PlainSocketImpl.java:171)
>>>        at java.net.PlainSocketImpl.connect(PlainSocketImpl.java:158)
>>>        at java.net.Socket.connect(Socket.java:452)
>>>        at java.net.Socket.connect(Socket.java:402)
>>>        at java.net.Socket.(Socket.java:309)
>>>        at java.net.Socket.(Socket.java:211)
>>>        at jcifs.netbios.NbtSocket.(NbtSocket.java:59)
>>>        at jcifs.smb.SmbTransport.ensureOpen(SmbTransport.java:275)
>>>        at jcifs.smb.SmbTransport.send(SmbTransport.java:600)
>>>        at jcifs.smb.SmbTransport.negotiate(SmbTransport.java:854)
>>>        at jcifs.smb.SmbSession.getChallenge(SmbSession.java:64)
>>>        at jcifs.smb.SmbSession.getChallenge(SmbSession.java:58)
>>>        at jcifs.http.NtlmHttpFilter.doFilter(NtlmHttpFilter.java:109)
>>>        at
>>>org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:213)
>>>        at
>>>org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:193)
>>>        at
>>>org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:256)
>>>        at
>>>org.apache.catalina.core.StandardPipeline$StandardPipelineValveContext.invokeNext(StandardPipeline.java:643)
>>>        at
>>>org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:480)
>>>        at 
>>>org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:995)
>>>        at
>>>org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
>>>        at
>>>org.apache.catalina.core.StandardPipeline$StandardPipelineValveContext.invokeNext(StandardPipeline.java:643)
>>>        at
>>>org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:480)
>>>        at 
>>>org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:995)
>>>        at
>>>org.apache.catalina.core.StandardContext.invoke(StandardContext.java:2417)
>>>        at
>>>org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:180)
>>>        at
>>>org.apache.catalina.core.StandardPipeline$StandardPipelineValveContext.invokeNext(StandardPipeline.java:643)
>>>        at
>>>org.apache.catalina.valves.ErrorDispatcherValve.invoke(ErrorDispatcherValve.java:171)
>>>        at
>>>org.apache.catalina.core.StandardPipeline$StandardPipelineValveContext.invokeNext(StandardPipeline.java:641)
>>>        at
>>>org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:172)
>>>        at
>>>org.apache.catalina.core.StandardPipeline$StandardPipelineValveContext.invokeNext(StandardPipeline.java:641)
>>>        at
>>>org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:577)
>>>        at
>>>org.apache.catalina.core.StandardPipeline$StandardPipelineValveContext.invokeNext(StandardPipeline.java:641)
>>>        at
>>>org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:480)
>>>        at 
>>>org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:995)
>>>        at
>>>org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:174)
>>>        at
>>>org.apache.catalina.core.StandardPipeline$StandardPipelineValveContext.invokeNext(StandardPipeline.java:643)
>>>        at
>>>org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:480)
>>>        at 
>>>org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:995)
>>>        at
>>>org.apache.catalina.connector.http.HttpProcessor.process(HttpProcessor.java:1040)
>>>        at
>>>org.apache.catalina.connector.http.HttpProcessor.run(HttpProcessor.java:1151)
>>>        at java.lang.Thread.run(Thread.java:534)
>>>
>>>        at jcifs.smb.SmbTransport.send(SmbTransport.java:630)
>>>        at jcifs.smb.SmbTransport.negotiate(SmbTransport.java:854)
>>>        at jcifs.smb.SmbSession.getChallenge(SmbSession.java:64)
>>>        at jcifs.smb.SmbSession.getChallenge(SmbSession.java:58)
>>>        at jcifs.http.NtlmHttpFilter.doFilter(NtlmHttpFilter.java:109)
>>>        at
>>>org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:213)
>>>        at
>>>org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:193)
>>>        at
>>>org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:256)
>>>        at
>>>org.apache.catalina.core.StandardPipeline$StandardPipelineValveContext.invokeNext(StandardPipeline.java:643)
>>>        at
>>>org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:480)
>>>        at 
>>>org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:995)
>>>        at
>>>org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
>>>        at
>>>org.apache.catalina.core.StandardPipeline$StandardPipelineValveContext.invokeNext(StandardPipeline.java:643)
>>>        at
>>>org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:480)
>>>        at 
>>>org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:995)
>>>        at
>>>org.apache.catalina.core.StandardContext.invoke(StandardContext.java:2417)
>>>        at
>>>org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:180)
>>>        at
>>>org.apache.catalina.core.StandardPipeline$StandardPipelineValveContext.invokeNext(StandardPipeline.java:643)
>>>        at
>>>org.apache.catalina.valves.ErrorDispatcherValve.invoke(ErrorDispatcherValve.java:171)
>>>        at
>>>org.apache.catalina.core.StandardPipeline$StandardPipelineValveContext.invokeNext(StandardPipeline.java:641)
>>>        at
>>>org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:172)
>>>        at
>>>org.apache.catalina.core.StandardPipeline$StandardPipelineValveContext.invokeNext(StandardPipeline.java:641)
>>>        at
>>>org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:577)
>>>        at
>>>org.apache.catalina.core.StandardPipeline$StandardPipelineValveContext.invokeNext(StandardPipeline.java:641)
>>>        at
>>>org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:480)
>>>        at 
>>>org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:995)
>>>        at
>>>org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:174)
>>>        at
>>>org.apache.catalina.core.StandardPipeline$StandardPipelineValveContext.invokeNext(StandardPipeline.java:643)
>>>        at
>>>org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:480)
>>>        at 
>>>org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:995)
>>>        at
>>>org.apache.catalina.connector.http.HttpProcessor.process(HttpProcessor.java:1040)
>>>        at
>>>org.apache.catalina.connector.http.HttpProcessor.run(HttpProcessor.java:1151)
>>>        at java.lang.Thread.run(Thread.java:534)
>>>
>>>
>>>
>>>
>>>>From: Eric Glass <eric.glass at gmail.com>
>>>>To: Michael B Allen <mba2000 at ioplex.com>
>>>>CC: Mush Salee <nimrod786 at hotmail.com>, jcifs at lists.samba.org
>>>>Subject: Re: Re: [jcifs] Signing is required by the server but passwords
>>>>are external
>>>>Date: Wed, 28 Jul 2004 19:55:08 -0400
>>>>
>>>>
>>>
>>>
>>>>>Sounds like it's quite simply not working. Three-strikes-you're-out
>>>>>
>>>>>
>>>>sounds
>>>>
>>>>
>>>>>like the account is getting locked out. Look at the lmCompatibility
>>>>>property maybe. Try enabling logging with a jcifs.util.loglevel
>>>>>init-param. Collect a packet trace [1]. Ask your network admins if the
>>>>>server supports NTLMv1. Etc....
>>>>>
>>>>>
>>>>>
>>>>This could just be client retries (IE will prompt for a retry three
>>>>times if the authentication fails, then it just gives up).
>>>>
>>>>At this point, a packet capture run on the Tomcat server would be your
>>>>best bet; send it to Mike and/or myself directly and we can have a
>>>>look.  If you could repost the current version of your web.xml, I can
>>>>take a final look and make sure nothing seems wrong.
>>>>
>>>>
>>>>Eric
>>>>
>>>>
>>>_________________________________________________________________
>>>It's fast, it's easy and it's free. Get MSN Messenger today!
>>>
>>>
>>>http://www.msn.co.uk/messenger
>>>
>>>
>>>
>>>
>>
>>
>>

_________________________________________________________________
Express yourself with cool new emoticons http://www.msn.co.uk/specials/myemo



More information about the jcifs mailing list