[jcifs] NTLMv2 Authentication doesnt work

Richard Caper rcaper at gmail.com
Sun Mar 6 01:29:51 GMT 2005


Right.  The client registry is for the web browser; that tells it to
actually send the LMv2/NTLMv2 responses (rather than LM/NTLM).  If you
don't set that, Internet Explorer will only send LM/NTLM (regardless
of what jCIFS supports).

>From what I can gather jCIFS sends only the LMv2 response on to the
domain controller (which would support your statement).  But from a
client web browser perspective there is no difference.


On Fri, 4 Mar 2005 13:44:14 -0600, Christopher R. Hertel
<crh at ubiqx.mn.org> wrote:
> Correct in general, except that jCIFS won't pay attention to Windows
> client registry settings.  :)
>
> I think Mike is the one to speak to this, but I seem to recall that jCIFS
> does not support NTLMv2 authentication yet.  It supports LMv2, which is a
> simplified version of NTLMv2.
>
> Chris -)-----
>
> On Fri, Mar 04, 2005 at 02:28:53PM -0500, Richard Caper wrote:
> > I believe the flag is not for authentication but instead NTLMv2
> > signing and sealing negotiation.  Authentication is not controlled by
> > the flags but uses the registry setting "LMCompatibilityLevel".
> >
> > If you set the registry on your client to LM compatibility level = 3,
> > it will send NTLMv2/LMv2 in the response.  Setting the jcifs value
> > allows the filter to handle such response correctly.
> >
> > >
> > > I'am using JCIFS 1.1.8 fot NTLM authentication on a Java web app and i would
> > > like to enable NTLMv2 authentication in JCIFS.
> > > I tried to set jcifs.smb.lmCompatibility to 3, but JCIFS, when sending
> > > NTLMSSP_CHALLENGE, don't set the NTLMv2 flag and just set NTLM flag. What is
> > > the way to enable NTLMv2 in JCIFS?
> > >
> > > Thanks and regards.
> > >
> > > Pascal
>
> --
> "Implementing CIFS - the Common Internet FileSystem" ISBN: 013047116X
> Samba Team -- http://www.samba.org/     -)-----   Christopher R. Hertel
> jCIFS Team -- http://jcifs.samba.org/   -)-----   ubiqx development, uninq.
> ubiqx Team -- http://www.ubiqx.org/     -)-----   crh at ubiqx.mn.org
> OnLineBook -- http://ubiqx.org/cifs/    -)-----   crh at ubiqx.org
>


More information about the jcifs mailing list