[jcifs] Re: JCIF Ntml HTTP Filter and Tomcat issues

Michael B Allen mba2000 at ioplex.com
Thu Sep 9 23:00:07 GMT 2004


Gasior, Patrick T said:
> In Tomcat I'm running into a problem with the JCIF as soon as I add the
> filter I
> see the messages listed below the web.xml  and the web path no longer
> responds
> to requests.  I've attached the full web.xml .
> I ran tcp traces and saw JCIF and SMB negotiating to NT LM 0.12 and
> nothing
> happens after that as far as I can see.
> Let me know if anything else would help.
> Thanks in advance and keep up the excellent work! Congrats on 5 years!

Thanks.

It would be better if you sent your message to the mailing list. There are
many people on the list with more experience using the filter than I.

Just from glancing over your info it looks like the negotiation is not
getting very far. Usually these problems turn out to be an issue with the
containter or proxy also trying to do NTLM HTTP Authentication, some
redirector component like mod_jk (or whatever it's called), a problem with
keep-alives or similar.

>
> Server Information
> Tomcat Version	JVM Version	JVM Vendor	OS Name	OS Version	OS
> Architecture
> Version
> Apache Tomcat/4.1.30	1.4.1-b21	Sun Microsystems Inc.	Windows XP
> 5.1	x86
>
>
> Web.xml:
>   <filter>
>       <filter-name>NtlmHttpFilter</filter-name>
>       <filter-class>jcifs.http.NtlmHttpFilter</filter-class>
>
>       <init-param>
>           <param-name>jcifs.http.domainController</param-name>
>           <param-value>10.xx.xx.36</param-value>
>       </init-param>
>       <init-param>
>           <param-name>jcifs.util.loglevel</param-name>
>           <param-value>10</param-value>
>       </init-param>
>
>       <init-param>
>           <param-name>jcifs.smb.lmCompatibility</param-name>
>           <param-value>2</param-value>
>       </init-param>
>       <init-param>
>           <param-name>jcifs.netbios.wins</param-name>
>           <param-value>10.xx.xx.2,10.xx.xx.3</param-value>
>       </init-param>
>   </filter>
>
>
> requesting negotiation with 0.0.0.0<00>/10.xx.xx.1
> session established ok with 0.0.0.0<00>/10.xx.xx.1
> SmbComNegotiate[command=SMB_COM_NEGOTIATE,received=false,errorCode=The
> operation
>  completed
> successfully.,flags=0x0018,flags2=0xC003,signSeq=0,tid=0,pid=39844,ui
> d=0,mid=1,wordCount=0,byteCount=12,wordCount=0,dialects=NT LM 0.12]
> 00000: 00 00 00 2F FF 53 4D 42 72 00 00 00 00 18 03 C0  |.../
> SMBr......â””|
> 00010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 A4 9B
> |..............ñ.|
> 00020: 00 00 01 00 00 0C 00 02 4E 54 20 4C 4D 20 30     |........NT LM 0
> |
>
> new data read from socket: 0.0.0.0<00>/192.168.0.1
> byteCount=38 but readBytesWireFormat returned 14
> SmbComNegotiateResponse[command=SMB_COM_NEGOTIATE,received=true,errorCode=The
> op
> eration completed
> successfully.,flags=0x0098,flags2=0xC003,signSeq=0,tid=0,pid=3
> 9844,uid=0,mid=1,wordCount=17,byteCount=38,wordCount=17,dialectIndex=0,securityM
> ode=0x7,security=user,encryptedPasswords=true,maxMpxCount=50,maxNumberVcs=1,maxB
> ufferSize=16644,maxRawSize=65536,sessionKey=0x00000000,capabilities=0x0000F3FD,s
> erverTime=Thu Sep 09 12:35:08 CDT
> 2004,serverTimeZone=300,encryptionKeyLength=8,
> byteCount=38,encryptionKey=BLAH,oemDomainName=ADomain]
> 00000: FF 53 4D 42 72 00 00 00 00 98 03 C0 00 00 00 00  |
> SMBr......â””....|
> 00010: 00 00 00 00 00 00 00 00 00 00 A4 9B 00 00 01 00
> |..........ñ.....|
> 00020: 11 00 00 07 32 00 01 00 04 41 00 00 00 00 01 00
> |....2....A......|
> 00030: 00 00 00 00 FD F3 00 00 27 72 00 5A 93 96 C4 01
> |....²≤..'r.Z..─.|
> 00040: 2C 01 08 26 00 FB D7 59 DA D8 F6 54 EA 41 00 42
> |,..&.√╫Y┌╪÷TΩA.B|
> 00050: 00 43 00 00 00 53 00 53 00 48 00 41 00 42 00 43
> |.C...B.L.H.A.A.D|
> 00060: 00 44 00 43 00 30 00 31 00 00 00                 |.D.C.0.0...
> |
>
> close: NbtSocket[addr=0.0.0.0<00>/10.xx.xx.1,port=139,localport=4595]
> close: NbtSocket[addr=0.0.0.0<00>/10.xx.xx.1,port=139,localport=4603]



More information about the jcifs mailing list