[jcifs] SmbAuthException: Logon Failure: Unknown User Name or Bad Passwor d

[Michael B Allen]

On Mon, 13 Dec 2004 12:14:04 -0500
"Lieber, Samuel" <Samuel.Lieber at Artesia.com> wrote:

> I am trying to use NtlmHttpFilter and have been unsuccessful and I am
> totally stumped.
> 
> Followed the directions exactly on
> http://jcifs.samba.org/src/docs/ntlmhttpauth.html
> <http://jcifs.samba.org/src/docs/ntlmhttpauth.html>  and am using the
> NtlmHttpFilter verbatim.  Using jCIFS 1.1.4.  Running Tomcat 4.1.30 on
> Windows XP.
> My problem occurs when authenticating a client (trying to connect through
> IE 6.0).  When I do, I get a SmbAuthException saying "Logon Failure:
> Unknown User Name or Bad Password".  I can confirm that my filter is being
> executed and I certainly see the 3-handshaking taking place.  When I
> examine the NtlmAuthentication object (via debugging my filter), the
> domain and user are correct (the password is null, I assume this is ok). 
> I downloaded ethereal and did a network capture as well, below is a
> snippet.  What is interesting is that the account being accessed is GUEST?

The server is negotiating SMB signing which requires real credentials to
generate a MAC key. Meaning you need to provide
jcifs.smb.client.{domain,username,password} of some account to do
"pre-authentication". Think of this like a workstation account. Create an
account with a long random password.

I know it sucks that you have to have creds in the properties file but for
now that's the way we're doing it. Windows does the same thing with the
workstation account. It's just autogenerated when the machine first joins
the domain and you can't access the password so easily.

Mike

-- 
Greedo shoots first? Not in my Star Wars.