[jcifs] NTLM Filter error message

[Jeroen ter Voorde]

Hi again,

I did some debugging and i think the problem is in the dc_list expire 
code in SmbSession.getChallengeForDomain(). It seems the following is 
happening:

- I do single sign-on. dc_list var is set.
- I disable the network interface.
- I do single sign-on again dc_list[0] becomes null (bad dc).
- dc_list[0] stays null until the dc_list expires.

I get another similar problem by doing the first sso login when the 
network interface is down.
In this case dc_list stays null but dc_list_expiration is set causing 
NPE's on this line:
NbtAddress addr = dc_list[dc_list_index]; (SmbClient.java: line 109) 
until the dc_list expires.

I think the dc_list should always be refreshed if dc_list == null or all 
dc_list entries are null.

Jeroen

On Fri, 07 Jan 2005 16:00:05 +0100
Jeroen ter Voorde <j.tervoorde at home.nl> wrote:


 > Hi,
 >
 > I get the following exception after an unknown amount of time. The
 > filter works correctly for a while but after a while (could be a couple
 > of days) i get this error. The only way to get SSO to
 > work again is by restarting the server.
 >
 > java.net.UnknownHostException: Failed to negotiate with a suitable
 > domain controller for REINHP
 >     at jcifs.smb.SmbSession.getChallengeForDomain(SmbSession.java:139)
 >     at jcifs.http.NtlmHttpFilter.doFilter(NtlmHttpFilter.java:123)
 >
 > The WINS and domain controller are accessible (otherwise it wouldn't
 > work after a restart).
 > I'm using jcifs 1.1.6 with a samba 2.2.4 domain controller but a
 > customer of ours has also
 > experienced the problem using jcifs 1.1.5 and a windows NT4 domain
 > controller.
 >
 > I'm using the following configuration:
 >
 >         <init-param>
 >             <param-name>jcifs.smb.client.domain</param-name>
 >             <param-value>REINHP</param-value>
 >         </init-param>       
 >         <init-param>
 >             <param-name>jcifs.netbios.wins</param-name>
 >             <param-value>192.168.0.10</param-value>
 >         </init-param>
 >
 > Any ideas? Thanks,
 

I would say that the client is not able to retrieve a list of domain
controllers or that none of the DCs in the list are responding. If you can
provide a capture [1] I might be able to confirm that.

http://jcifs.samba.org/capture.html

Mike



-- 
Greedo shoots first? Not in my Star Wars.



----- Message from Michael B Allen <mba2000 at ioplex.com> on Fri, 7 Jan 
2005 15:12:03 -0500 -----
Jeroen ter Voorde <j.tervoorde at home.nl>    To:
jcifs at lists.samba.org    cc:
Re: [jcifs] NTLM Filter error message    Subject:

On Fri, 07 Jan 2005 16:00:05 +0100
Jeroen ter Voorde <j.tervoorde at home.nl> wrote:

 > Hi,
 >
 > I get the following exception after an unknown amount of time. The
 > filter works correctly for a while but after a while (could be a couple
 > of days) i get this error. The only way to get SSO to
 > work again is by restarting the server.
 >
 > java.net.UnknownHostException: Failed to negotiate with a suitable
 > domain controller for REINHP
 >     at jcifs.smb.SmbSession.getChallengeForDomain(SmbSession.java:139)
 >     at jcifs.http.NtlmHttpFilter.doFilter(NtlmHttpFilter.java:123)
 >
 > The WINS and domain controller are accessible (otherwise it wouldn't
 > work after a restart).
 > I'm using jcifs 1.1.6 with a samba 2.2.4 domain controller but a
 > customer of ours has also
 > experienced the problem using jcifs 1.1.5 and a windows NT4 domain
 > controller.
 >
 > I'm using the following configuration:
 >
 >         <init-param>
 >             <param-name>jcifs.smb.client.domain</param-name>
 >             <param-value>REINHP</param-value>
 >         </init-param>       
 >         <init-param>
 >             <param-name>jcifs.netbios.wins</param-name>
 >             <param-value>192.168.0.10</param-value>
 >         </init-param>
 >
 > Any ideas? Thanks,

I would say that the client is not able to retrieve a list of domain
controllers or that none of the DCs in the list are responding. If you can
provide a capture [1] I might be able to confirm that.

http://jcifs.samba.org/capture.html

Mike


-- 
Greedo shoots first? Not in my Star Wars.