[jcifs] "account currently disabled" and "Access denied"
pulazzo at gmail.com
Tue Nov 9 13:52:21 GMT 2004
Thank you for the quick response. See my comments below.
On Tue, 9 Nov 2004 01:48:44 -0500, Michael B Allen <mba2000 at ioplex.com> wrote:
> On Mon, 8 Nov 2004 23:57:11 -0500
> Andrew Miller <pulazzo at gmail.com> wrote:
> > I just upgraded to 1.1.2 and am getting the following error:
> > jcifs.smb.SmbAuthException: Logon failure: account currently disabled.
> Well this error is being returned by the server so I think you have to
> assume that the username submitted to the server is indeed disabled. Take a
> packet capture  and see what the username is in the Session Setup AndX
I'm happy to do a packet capture, but will be unable to do it for a
few hours as I will be travelling. While it would seem that the
accounts were disabled, I was logged into the Windows 2000 machine
using this account when I attempted the NTLM authentication. And the
same user worked fine with 0.7.19, with the occassional issue
I saw that there was another post to the mailing list last month about
a similar problem, but it was buried in another thread and wasn't
resolved. I thought that perhaps this was common and that there was
some configuration or other error.
> > I upgraded because I was previously using version 0.7.19 and
> > occassionally, about 1 in every 50 requests (on average), I would
> > receive the following error:
> > jcifs.smb.SmbAuthException: Access denied
> > This would be after many succesful login attempts and is followed by
> > many more successful login attempts.
> So you're using the NTLM HTTP Authentication Filter? Not too long ago we had
> an issue where an authentication or two would fail when the
> jcifs.netbios.cachePolicy expired. That could be a potential reason. I think
> you really want to use 1.1.2 for a variety of other reasons anyway.
> You really want to get a packet capture. Install tcpdump on the web server,
> stop the container, start the capture, generate the error, stop the capture,
> and look at it with Ethereal on a workstation.
>  http://jcifs.samba.org/capture.html
I agree that upgrading is a good idea and will get a capture shortly.
More information about the jcifs