[jcifs] Dealing with simultaneous users in a Win2k3 environment

[Michael Kerley]

Thanks for the quick reply.

> > 1. new SmbFile("smb://").listFiles()  --> Fails (expected because no
> > authentication was given)
> 
> Actually I don't recall ever seeing this fail. All systems that I work
> with use null credentials to get the list of domains. Maybe Win2k3 changed
> that. Donno. What was the error?

I think Win2k3 did change it.  Here's what I'm seeing:

jcifs.smb.SmbException: Unverifiable signature.
        at jcifs.smb.SmbTransport.send(SmbTransport.java:681)
        at jcifs.smb.SmbSession.sessionSetup(SmbSession.java:138)
        at jcifs.smb.SmbSession.send(SmbSession.java:102)
        at jcifs.smb.SmbTree.treeConnect(SmbTree.java:125)
        at jcifs.smb.SmbFile.connect(SmbFile.java:580)
        at jcifs.smb.SmbFile.connect0(SmbFile.java:550)
        at jcifs.smb.SmbFile.list(SmbFile.java:1149)
        at List.main(List.java:36)

(List.java is not the same one included in the jCIFS examples)

The only time I ever see "Unverifiable signature" is when I try to do
something in this Win2k3 environment.  It appears everywhere that I would
expect to see some sort of SmbAuthException.  I also see it if I try to get
a list of computers within a domain, or a list of shares on a computer (or
any listing at all, for that matter).

If I call SmbFile.getType(), that works fine.  I haven't tried copying any
files or anything more "elaborate" than SmbFile.listFiles()/SmbFile.list()
yet.

Michael


> -----Original Message-----
> From: Michael B Allen [mailto:mba2000 at ioplex.com]
> Sent: Friday, March 19, 2004 12:42 PM
> To: Michael Kerley
> Cc: jcifs at lists.samba.org
> Subject: Re: [jcifs] Dealing with simultaneous users in a Win2k3
> environment
> 
> Michael Kerley said:
> > Hi,
> >
> >
> >
> > I'm having a problem with user authentication in a Win2k3 environment.
> > The
> > test environment is just one Win2k3 server (primary domain controller
> > running active directory, etc.  Just a simple installation with all the
> > defaults) and a WinXP Pro machine which is a member of the domain.
> >
> >
> >
> > Here is the test I've been running:
> >
> > 1. new SmbFile("smb://").listFiles()  --> Fails (expected because no
> > authentication was given)
> 
> Actually I don't recall ever seeing this fail. All systems that I work
> with use null credentials to get the list of domains. Maybe Win2k3 changed
> that. Donno. What was the error?
> 
> >
> > 2. new SmbFile("smb://user:pass@/").listFiles()  --> Gives the list of
> > domains (expected)
> >
> > 3. new SmbFile("smb://").listFiles()  --> Gives the list of domains
> (bad;
> > this is a security risk)
> 
> JCIFS does not reuse security contexts but it does reuse TCP transport. I
> have a feeling this is actually something going on on the windows server
> (master browser). Meaning once a user has successfully authenticated the
> NetServerEnum is suddenly available without credentials. Yet another quirk
> in Windows' implementation.
> 
> Mike