[jcifs] FW: Inconsistent Authentication Results: Access Denied & Windows Enter password popping up

[Augustus Macaulay]

Mike,
I tried the preauth settings with 1.2.7 and the result is that; we still
get the Enter password box and only
the user supplied in the preauth settings can successfully login through
the password box.

I will try the preauth settings with 1.2.8 and let you know the outcome.

Gus
 

-----Original Message-----
From: Michael B Allen [mailto:mba2000 at ioplex.com]
Sent: 04 April 2006 22:01
To: Augustus Macaulay
Subject: Re: [jcifs] FW: Inconsistent Authentication Results: Access
Denied & Windows Enter password popping up

You need preauth. See the section about "SMB Signatures and Windows
2003"
in the NTLM HTTP Authentication documentation.

On Thu, 30 Mar 2006 09:45:19 +0100
"Augustus Macaulay" <Augustus.macaulay at detica.com> wrote:

> Mike,
> 
> Thanks for your suggestion. Here's my Filter settings.
>   
> 
>     <filter>
>         <filter-name>HTTP Authentication Filter</filter-name>
>         <filter-class>jcifs.http.NtlmHttpFilter</filter-class>
> 
>         <init-param>
>             <param-name>jcifs.http.domainController</param-name>
>             <param-value>@DOMAIN_CONTROLLER_IP_ADDRESS@</param-value>
>         </init-param>
>         
>         <init-param>
>             <param-name>jcifs.util.loglevel</param-name>
>             <param-value>3</param-value>
>         </init-param>
>         
>         <init-param>
>             <param-name>jcifs.smb.lmCompatibility</param-name>
>             <param-value>3</param-value>
>         </init-param>
>     </filter>
> 
> I will try jcifs 1.2.8 out tomorrow when I get some down time on the 
> LIVE server.
> Thanks for your help and I'll keep you posted.
> 
> Gus
> 
> -----Original Message-----
> From: Michael B Allen [mailto:mba2000 at ioplex.com]
> Sent: 29 March 2006 17:47
> To: Augustus Macaulay
> Cc: jcifs at lists.samba.org
> Subject: Re: [jcifs] FW: Inconsistent Authentication Results: Access 
> Denied & Windows Enter password popping up
> 
> 1.2.7 has a bug that looks like this. I believe it is fixed in 1.2.8.
> Pls try 1.2.8 and let us know either way what happends. Also, you 
> might want to post your filter section from your web.xml just so that 
> I can verify it's sane.
> 
> Mike
> 
> On Wed, 29 Mar 2006 16:39:50 +0100
> "Augustus Macaulay" <Augustus.macaulay at detica.com> wrote:
> 
> > 
> > > I am using NtlmHttpFilter on jcifs 1.2.7, the application is 
> > > running
> 
> > > in a Tomcat Web server on a Windows 2000 Advanced Server, and the 
> > > Domain Controller is on Windows 2003 Server.
> > > 
> > > With Tomcat running on the STAGING Windows 2000 advanced server, 
> > > everything runs fine and we can authenticate against the Domain 
> > > Controller.
> > > 
> > > With Tomcat running on the LIVE windows 2000 advanced server, with

> > > the same jcifs configuration and using the same Domain Controller,

> > > we get inconsistent results.
> > > Sometimes a user gets authenticated successfully, and at other 
> > > times
> 
> > > we get;
> > >  
> > > NtlmHttpFilter: [DOMAIN]\\[USERNAME]: 0xC0000022:
> > > jcifs.smb.SmbAuthException: Access is denied.
> > > 
> > > At the same time the Window's "Enter Network Password" box pops
up.
> > > 
> > > Any suggestions from anyone out there will be much appreciated.
> > > 
> > > Gus
> > 
> > 
> > 
> > This message should be regarded as confidential. If you have 
> > received
> this email in error please notify the sender and destroy it
immediately.
> > Statements of intent shall only become binding when confirmed in 
> > hard
> copy by an authorised signatory.  The contents of this email may 
> relate to dealings with other companies within the Detica Group plc 
> group of companies.
> > 
> > Detica Limited is registered in England under No: 1337451.
> > 
> > Registered offices: Surrey Research Park, Guildford, Surrey, GU2 
> > 7YP,
> England.
> > 
> > 
> > 
>