[jcifs] SmbAuthException: Logon Failure: Unknown User Name or Bad
Passwor d
Lieber, Samuel
Samuel.Lieber at Artesia.com
Mon Dec 13 17:14:04 GMT 2004
I am trying to use NtlmHttpFilter and have been unsuccessful and I am
totally stumped.
Followed the directions exactly on
http://jcifs.samba.org/src/docs/ntlmhttpauth.html
<http://jcifs.samba.org/src/docs/ntlmhttpauth.html> and am using the
NtlmHttpFilter verbatim. Using jCIFS 1.1.4. Running Tomcat 4.1.30 on
Windows XP.
My problem occurs when authenticating a client (trying to connect through IE
6.0). When I do, I get a SmbAuthException saying "Logon Failure: Unknown
User Name or Bad Password". I can confirm that my filter is being executed
and I certainly see the 3-handshaking taking place. When I examine the
NtlmAuthentication object (via debugging my filter), the domain and user are
correct (the password is null, I assume this is ok). I downloaded ethereal
and did a network capture as well, below is a snippet. What is interesting
is that the account being accessed is GUEST? My Guest account on the server
running the filter is disabled. Should it be enabled? Incidentally,
enabling or disabling the GUEST account doesn't matter; neither works.
I tried specifying jcifs.smb.client.domain and jcifs.http.domainController
properties in the web.xml. Neither works and both get the same error.
Web.xml snippet is below.
I confirmed that on the target server,
HKLM\System\CurrentControlSet\Control\Lsa\LmCompatibilityLevel is set to 2.
What am I missing here? Any help would be most appreciative.
Thanks,
Sam
--------- PACKET CAPTURE --------------------------
No. Time Source Destination Protocol
Info
198 31.833760 10.1.1.233 10.1.1.35 SMB
Session Setup AndX Request, User: TTSG\TTSG; Tree Connect AndX, Path:
\\10.1.1.35\IPC$ <\\10.1.1.35\IPC$>
Frame 198 (228 bytes on wire, 228 bytes captured)
Ethernet II, Src: 00:b0:d0:57:8a:68, Dst: 00:02:b3:25:ca:c7
Internet Protocol, Src Addr: 10.1.1.233 (10.1.1.233), Dst Addr: 10.1.1.35
(10.1.1.35)
Transmission Control Protocol, Src Port: 2409 (2409), Dst Port: netbios-ssn
(139), Seq: 0, Ack: 1, Len: 174
NetBIOS Session Service
SMB (Server Message Block Protocol)
SMB Header
Server Component: SMB
Response in: 199
SMB Command: Session Setup AndX (0x73)
NT Status: STATUS_SUCCESS (0x00000000)
Flags: 0x18
Flags2: 0xc007
Process ID High: 0
Signature: 87F3294C3CFB035C
Reserved: 0000
Tree ID: 0
Process ID: 26216
User ID: 0
Multiplex ID: 3
Session Setup AndX Request (0x73)
Word Count (WCT): 13
AndXCommand: Tree Connect AndX (0x75)
Reserved: 00
AndXOffset: 118
Max Buffer: 16644
Max Mpx Count: 10
VC Number: 1
Session Key: 0x00000000
ANSI Password Length: 0
Unicode Password Length: 0
Reserved: 00000000
Capabilities: 0x00001054
Byte Count (BCC): 57
Account: GUEST
Primary Domain: TTSG
Native OS: Windows XP
Native LAN Manager: jCIFS
Tree Connect AndX Request (0x75)
Word Count (WCT): 4
AndXCommand: No further commands (0xff)
Reserved: 00
AndXOffset: 0
Flags: 0x0000
Password Length: 1
Byte Count (BCC): 41
Password: 00
Path: \\10.1.1.35\IPC$ <\\10.1.1.35\IPC$>
Service: ?????
No. Time Source Destination Protocol
Info
199 31.835812 10.1.1.35 10.1.1.233 SMB
Session Setup AndX Response, Error: STATUS_LOGON_FAILURE
Frame 199 (93 bytes on wire, 93 bytes captured)
Ethernet II, Src: 00:02:b3:25:ca:c7, Dst: 00:b0:d0:57:8a:68
Internet Protocol, Src Addr: 10.1.1.35 (10.1.1.35), Dst Addr: 10.1.1.233
(10.1.1.233)
Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: 2409
(2409), Seq: 1, Ack: 174, Len: 39
NetBIOS Session Service
SMB (Server Message Block Protocol)
SMB Header
Server Component: SMB
Response to: 198
Time from request: 0.002052000 seconds
SMB Command: Session Setup AndX (0x73)
NT Status: STATUS_LOGON_FAILURE (0xc000006d)
Flags: 0x98
Flags2: 0xc007
Process ID High: 0
Signature: 87F3294C3CFB035C
Reserved: 0000
Tree ID: 0
Process ID: 26216
User ID: 0
Multiplex ID: 3
Session Setup AndX Response (0x73)
Word Count (WCT): 0
Byte Count (BCC): 0
--------------------------------------------------------------
------------- WEB.XML -----------------------
<init-param>
<param-name>jcifs.smb.client.domain</param-name>
<param-value>TTSG</param-value>
</init-param>
<init-param>
<param-name>jcifs.netbios.wins</param-name>
<param-value>10.1.1.35,10.1.1.34</param-value>
</init-param>
------------------------------------------------------
-------------- next part --------------
HTML attachment scrubbed and removed
More information about the jcifs
mailing list