AW: AW: [jcifs] cifs and rap

[Michael B Allen]

Unfortunately I don't really know a whole lot about the jcifs-ext Filter.

On Thu, 12 Aug 2004 10:29:18 +0200
"Carsten Dick" <cad at halvotec.de> wrote:

> When I'm using just the jcifs.http.domainController the authentication
> challenge will succeed. Only the request for the groups will fail the
> reponse I get is (response.toString() output):
> 
> RapResponse[command=SMB_COM_TRANSACTION,received=true,errorCode=The
> operation completed
> successfully.,flags=0x0098,flags2=0xC003,signSeq=0,tid=8193,pid=47819,uid
> =14337,mid=11,wordCount=10,byteCount=9,totalParameterCount=8,totalDataCou
> nt=0,parameterCount=8,parameterOffset=56,parameterDisplacement=0,dataCoun
> t=0,dataOffset=64,dataDisplacement=0,setupCount=0,pad=1,pad1=0]
> 
> and the response.status is 5.
> 
> I don't use the filter, I'm using the servlet implementation.

Same difference.

> 
> Carsten
> 
> -----Ursprüngliche Nachricht-----
> Von: Michael B Allen [mailto:mba2000 at ioplex.com]
> Gesendet: Donnerstag, 12. August 2004 08:42
> An: Carsten Dick
> Cc: jcifs at samba.org
> Betreff: Re: AW: [jcifs] cifs and rap
> 
> 
> Please send all correspondance to the list.
> 
> On Thu, 12 Aug 2004 08:20:33 +0200
> "Carsten Dick" <cad at halvotec.de> wrote:
> 
> > Hello Michael,
> > 
> > I have set the following properties in web.xml:
> > 
> > 	jcifs.smb.client.domain=<DOMAIN_NAME>
> > 	jcifs.http.domainController=<IP OF DOMAIN CONTROLLER>
> > 
> > and by my Servlet I have set that parameters:
> > 
> > 	jcifs.smb.client.soTimeout=300000
> > 	jcifs.netbios.cachePolicy=600
> > 	jcifs.http.basicRealm=jCIFS
> 
> Drop all of these properties except jcifs.http.domainController.
> 
> > I can't install one of the programms to get a network packet dump, 
> > because it is installed on the test server of our customer and I don't
> > have all privileges there.
> > The server challenge for NtlmPasswordAuthentication is on the same
> > server as that where I start the request for the credentials.
> > The application is running in a Bea Weblogic 6.1 Sp4 container which 
> > is runnning as service under Windows 2000. I think running the container
> > 
> > as service has no user, which is privileged at the domain controller to 
> > request the credentials. Am I right? 
> > When it is so, I have to start the request with a user known by the 
> > domain controller. Is there a way to do this?
> 
> JCIFS operates entirely independantly from the host operating system.
> 
> Does the regular (no jcifs-ext) Filter work?
> 
> Mike
> 
> > 
> > Carsten
> > 
> > -----Ursprüngliche Nachricht-----
> > Von: Michael B Allen [mailto:mba2000 at ioplex.com]
> > Gesendet: Mittwoch, 11. August 2004 19:48
> > An: Carsten Dick
> > Cc: jcifs at lists.samba.org
> > Betreff: Re: [jcifs] cifs and rap
> > 
> > 
> > On Wed, 11 Aug 2004 13:54:16 +0000 (UTC)
> > carsten <cad at halvotec.de> wrote:
> > 
> > > Hello,
> > > 
> > > I try to authenticate to a nt domain controller by using jcifs. After 
> > > authentication I want to get the groups of authenticated user by using
> > > jcifs- ext and the rap extension of it. The domain controller will
> > > authenticate the user, but when I try to get the user groups the
> > > domain controller will respond with a result of 5, which means that
> > > the user has insufficient privilege. Which 
> > 
> > Actually it doesn't mean "insufficient privilege" exactly. What's the
> > full stack-trace? NT_STATUS_ACCESS_VIOLATION has special meaning for
> > jCIFS. If the NtlmPasswordAuthentication object was created with a
> > server challenge different from a server different from the server with
> > which you are trying to use the credentials you will get this error
> > indicating that the negotiate credentials are invalid for the target.
> > 
> > What does your web.xml file look like (what jcifs properties do you
> > have set)?
> > 
> > Mike
> > 
> > -- 
> > Greedo shoots first? Not in my Star Wars.
> > 
> 
> 
> -- 
> Greedo shoots first? Not in my Star Wars.
> 


-- 
Greedo shoots first? Not in my Star Wars.