[jcifs] Ntlm authentication prompts 2nd user - Win 2003

AARON WILT AARONWILT at afninet.com
Fri Jul 8 15:25:52 GMT 2005


"Explain what the problem is and not what you think the problem is."

Ok, sorry for not being clear.  The problem is that when I try to access the NtlmHttpAuthExample servlet, I get prompted for a username/password/domain instead of it automatically determining my NT Domain information.  You can see my web.xml in the previous email.

"Do you get an error?"
Yes - now that I've added log level init param (level 3) and I downloaded ethereal, I can see what these errors are.

"If so what is the error?"

In my Tomcat server log, I get the following error:

<snip>

signature verification failure
00000: 9A 61 B5 BB A0 C4 7C ED                          |.aµ» Ä|í        |

00000: 03 2D 79 55 9A E3 24 88                          |.-yU.ã$.        |

NtlmHttpFilter: BLOOMINGTON\AARONWILT: 0xC0000022: jcifs.smb.SmbAuthException: Access is denied.
java.net.SocketTimeoutException: Receive timed out
	at java.net.PlainDatagramSocketImpl.receive(Native Method)
	at java.net.DatagramSocket.receive(DatagramSocket.java:711)
	at jcifs.netbios.NameServiceClient.run(NameServiceClient.java:184)
	at java.lang.Thread.run(Thread.java:534)
java.net.SocketTimeoutException: Read timed out
	at java.net.SocketInputStream.socketRead0(Native Method)
	at java.net.SocketInputStream.read(SocketInputStream.java:129)
	at jcifs.util.transport.Transport.readn(Transport.java:29)
	at jcifs.smb.SmbTransport.peekKey(SmbTransport.java:319)
	at jcifs.util.transport.Transport.loop(Transport.java:89)
	at jcifs.util.transport.Transport.run(Transport.java:229)
	at java.lang.Thread.run(Thread.java:534)
<snip>

(See the attachment for the full server log)

In ethereal, I see that I'm getting an Error: STATUS_ACCESS_DENIED message. 
(see attached smb status_access_denied.pcap for full capture)

"What steps are required to produce the error?"

Simply going to a IE web browser, and typing in the location of my the NtlmHttpAuthExample servlet.


Thanks for any help you can provide.  Please let me know if there is any additional information I can give you.

Aaron.


-----Original Message-----
From: Michael B Allen [mailto:mba2000 at ioplex.com] 
Sent: Thursday, July 07, 2005 6:20 PM
To: AARON WILT
Cc: jcifs at lists.samba.org
Subject: Re: [jcifs] Ntlm authentication prompts 2nd user - Win 2003

AARON WILT said:
> Hello all-
>
> I'm brand new to JCIFS.  I've downloaded jcifs-1.2.1 and read through 
> some old messages to this listserv dealing with this issue of login 
> prompting and nothing I have tried works so far.  We're using Windows
> 2003 for our domain controller.

I don't understand. Explain what the problem is and not what you think the problem is. Do you get an error? If so what is the error? What steps are required to produce the error?

Mike

PS: The fastest way to solve these problems is to send me a capture:
    http://jcifs.samba.org/capture.html



-------------- next part --------------
- Initializing Coyote HTTP/1.1 on port 80
Starting service Tomcat-Standalone
Apache Tomcat/4.1.30
#JCIFS PROPERTIES
#Fri Jul 08 10:10:10 CDT 2005
jcifs.smb.client.password=password
java.runtime.name=Java(TM) 2 Runtime Environment, Standard Edition
sun.boot.library.path=C\:\\j2sdk1.4.2_08\\jre\\bin
java.vm.version=1.4.2_08-b03
jcifs.smb.client.username=aaronwilt
java.vm.vendor=Sun Microsystems Inc.
java.vendor.url=http\://java.sun.com/
path.separator=;
jcifs.netbios.cachePolicy=1200
java.vm.name=Java HotSpot(TM) Client VM
file.encoding.pkg=sun.io
user.country=US
sun.os.patch.level=Service Pack 4
java.vm.specification.name=Java Virtual Machine Specification
user.dir=C\:\\Program Files\\IBM\\WebSphere Studio\\Site Developer\\v5.1.2
java.runtime.version=1.4.2_08-b03
java.awt.graphicsenv=sun.awt.Win32GraphicsEnvironment
java.endorsed.dirs=C\:\\j2sdk1.4.2_08\\jre\\lib\\endorsed
os.arch=x86
java.io.tmpdir=C\:\\DOCUME~1\\AARONW~1\\LOCALS~1\\Temp\\
line.separator=\r\n
java.vm.specification.vendor=Sun Microsystems Inc.
user.variant=
java.naming.factory.url.pkgs=org.apache.naming
os.name=Windows 2000
sun.java2d.fontpath=
java.library.path=C\:\\j2sdk1.4.2_08\\bin;.;C\:\\WINNT\\system32;C\:\\WINNT;C\:\\Program Files\\IBM\\WebSphere Studio\\Site Developer\\v5.1.2\\eclipse\\jre\\bin;C\:\\WINNT\\system32;C\:\\WINNT;C\:\\WINNT\\System32\\Wbem;C\:\\Program Files\\Microsoft SQL Server\\80\\Tools\\BINN;C\:\\Sun\\jwsdp-1.5\\jwsdp-shared\\bin;C\:\\Sun\\AppServer\\bin;C\:\\j2sdk1.4.2_08\\bin
java.specification.name=Java Platform API Specification
java.class.version=48.0
java.util.prefs.PreferencesFactory=java.util.prefs.WindowsPreferencesFactory
os.version=5.0
user.home=C\:\\Documents and Settings\\aaronwilt
user.timezone=America/Chicago
catalina.useNaming=true
java.awt.printerjob=sun.awt.windows.WPrinterJob
jcifs.smb.client.soTimeout=300000
file.encoding=Cp1252
java.specification.version=1.4
jcifs.util.loglevel=3
catalina.home=C\:\\Tomcat\\4.1
user.name=aaronwilt
java.class.path=C\:\\Tomcat\\4.1\\bin\\bootstrap.jar;C\:\\j2sdk1.4.2_08\\lib\\tools.jar
java.naming.factory.initial=org.apache.naming.java.javaURLContextFactory
java.vm.specification.version=1.0
jcifs.http.domainController=10.250.254.164
sun.arch.data.model=32
java.home=C\:\\j2sdk1.4.2_08\\jre
java.specification.vendor=Sun Microsystems Inc.
user.language=en
awt.toolkit=sun.awt.windows.WToolkit
java.vm.info=mixed mode
java.version=1.4.2_08
java.ext.dirs=C\:\\j2sdk1.4.2_08\\jre\\lib\\ext
sun.boot.class.path=C\:\\j2sdk1.4.2_08\\jre\\lib\\rt.jar;C\:\\j2sdk1.4.2_08\\jre\\lib\\i18n.jar;C\:\\j2sdk1.4.2_08\\jre\\lib\\sunrsasign.jar;C\:\\j2sdk1.4.2_08\\jre\\lib\\jsse.jar;C\:\\j2sdk1.4.2_08\\jre\\lib\\jce.jar;C\:\\j2sdk1.4.2_08\\jre\\lib\\charsets.jar;C\:\\j2sdk1.4.2_08\\jre\\classes
java.vendor=Sun Microsystems Inc.
catalina.base=C\:\\Tomcat\\4.1
file.separator=\\
jcifs.smb.client.domain=BLOOMINGTON
java.vendor.url.bug=http\://java.sun.com/cgi-bin/bugreport.cgi
sun.cpu.endian=little
sun.io.unicode.encoding=UnicodeLittle
sun.cpu.isalist=pentium i486 i386
- Initializing, config='org.apache.struts.util.LocalStrings', returnNull=true
- Initializing, config='org.apache.struts.action.ActionResources', returnNull=true
- Initializing, config='org.apache.webapp.admin.ApplicationResources', returnNull=true
- Starting Coyote HTTP/1.1 on port 80
- JK2: ajp13 listening on /0.0.0.0:8009
- Jk running ID=0 time=15/63  config=C:\Tomcat\4.1\conf\jk2.properties
New data read: Transport1[0.0.0.0<00>/10.250.254.164:445]
00000: FF 53 4D 42 72 00 00 00 00 98 03 C0 00 00 00 00  |ÿSMBr......À....|
00010: 00 00 00 00 00 00 00 00 00 00 58 B4 00 00 01 00  |..........X´....|

byteCount=44 but readBytesWireFormat returned 30
treeConnect: unc=\\ORION\IPC$,service=?????
treeConnect: unc=\\ORION\IPC$,service=?????
New data read: Transport1[ORION<00>/10.250.254.164:445]
00000: FF 53 4D 42 73 00 00 00 00 98 07 C0 00 00 D6 A1  |ÿSMBs......À..Ö¡|
00010: A7 AA CD BE 8F DC 00 00 07 08 58 B4 00 18 02 00  |§ªÍ¾.Ü....X´....|

New data read: Transport1[ORION<00>/10.250.254.164:445]
00000: FF 53 4D 42 73 22 00 00 C0 98 07 C0 00 00 03 2D  |ÿSMBs"..À..À...-|
00010: 79 55 9A E3 24 88 00 00 00 00 58 B4 00 00 03 00  |yU.ã$.....X´....|

signature verification failure
00000: 9A 61 B5 BB A0 C4 7C ED                          |.aµ» Ä|í        |

00000: 03 2D 79 55 9A E3 24 88                          |.-yU.ã$.        |

NtlmHttpFilter: BLOOMINGTON\AARONWILT: 0xC0000022: jcifs.smb.SmbAuthException: Access is denied.
java.net.SocketTimeoutException: Receive timed out
	at java.net.PlainDatagramSocketImpl.receive(Native Method)
	at java.net.DatagramSocket.receive(DatagramSocket.java:711)
	at jcifs.netbios.NameServiceClient.run(NameServiceClient.java:184)
	at java.lang.Thread.run(Thread.java:534)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smb status_access_denied.pcap
Type: application/octet-stream
Size: 2628 bytes
Desc: smb status_access_denied.pcap
Url : http://lists.samba.org/archive/jcifs/attachments/20050708/9356f7c8/smbstatus_access_denied.obj


More information about the jcifs mailing list