[jcifs] Re: JCIFS http filter problem with DC on Win 2003

[Inge Solvoll]

http://jcifs.samba.org/src/docs/ntlmhttpauth.html#adpolicy

One long shot theory:

When a client logs on, he is assigned a dynamically generated name.
Sometimes, the generated name can be resolved by the DC, other times the
generated name is not in the approved list. I'm completely lost here, is
this a valid theory?

The problem is, the only exception I get in the log is the "Access is
denied" for manual attempts. On transparent IE NTLM requests, I get nothing
in the log from NtlmHttpFilter. My log level is 4.

Thanks for any help!

Inge

On 4/21/06, Inge Solvoll <inge.tapestry at gmail.com> wrote:
>
> I'm having stability issues with NtlmHttpFilter. The authentication works
> transparently most times for most users, but for some of them, no
> "NtlmHttpAuth" attribute is set in the session after NtlmHttpFilter has
> performed its work. On these occations, "manual" logins don't work either
> for these users, they get an exception (SmbException: Access is denied) when
> they try to manually type their username and password in the browser popup.
>
> A user can achieve successful logins one day, and then fail the next day.
>
> Any ideas? I'll try to get some more details if needed.
>
> I've tried some of the ideas in the FAQ:
> - Provide username/password for preauthentication
> - change the jcifs.smb.client.ssnLimit to 1.
>
> My setup:
> JBoss 4 on Windows 2003
> Domain controller on Windows 2003
> IE6 clients
>
>
> <filter>
>     <filter-name>NtlmHttpFilter</filter-name>
>     <filter-class>mypackage.common.filters.NtlmHttpFilter</filter-class>
> <!--  Overrides jcifs NtlmHttpFilter -->
>
>     <init-param>
>         <param-name>jcifs.smb.client.domain</param-name>
>         <param-value>mydomain.com</param-value>
>     </init-param>
>     <init-param>
>         <param-name>jcifs.http.domainController</param-name>
>         <param-value>10.10.10.10</param-value>
>     </init-param>
> </filter>
>
-------------- next part --------------
HTML attachment scrubbed and removed