[jcifs] SSO problem

Michael B Allen mba2000 at ioplex.com
Fri Jan 7 19:51:49 GMT 2005


Please send all messages to the jcifs mailing list.

On Fri, 7 Jan 2005 09:21:44 +0100 
"Pietrzyk, S_awomir" <SPietrzyk at pzu.pl> wrote:

> Thanks for reply,
> 
> I did what you suggested, but still i have a problem.
> DC ip is 10.10.14.25.
> 
>     <filter-name>NtlmHttpFilter</filter-name>
>     <filter-class>jcifs.http.NtlmHttpFilter</filter-class>
>     <init-param>
>       <param-name>jcifs.http.domainController</param-name>
>       <param-value>10.10.14.25</param-value>
>     </init-param>
>     <init-param>
>       <param-name>jcifs.resolveOrder</param-name>
>       <param-value>DNS</param-value>
>     </init-param>
> 
> I did a little of debuging, and this is what i've found:
> 1. It takes around 30 sec. to get header with "NTLM xxxxxxxx" stuff.
> 2. Then this msg is decoded, and i always recieve src[8]=1.
> 3. Then in authenticate method sends resp.setHeader( "WWW-Authenticate",
> "NTLM " + msg );
> 4. and always in this moment it sends 
> 	  resp.setStatus(HttpServletResponse.SC_UNAUTHORIZED);
>         resp.flushBuffer();
> 	  return null;
> And program hangs :( (i mean, it displays in the browser that it is
> impossible to get such page...)
> 
> Can you explain me what is wrong? Is this problem with w2k serwer?

Which end is hanging the client or the server? Pls send a packet capture
[1].

> 
> Also it takes a lot od time to get to this moment (about 1min)... Is this
> normal?

No.

Mike

[1] http://jcifs.samba.org/capture.html

-- 
Greedo shoots first? Not in my Star Wars.


More information about the jcifs mailing list