[jcifs] jcifs failing randomly in Win2003 environment - ALSO

[Richard Caper]

What web server/servlet container are you using?  The garbage you are
seeing are chunked encoding artifacts; the browser and web server are
supposed to negotiate this in such a way that it is not seen by either
the client or the servlet.

It is possible that the filter is doing something that is blowing the
servlet container's mind.  This could also be causing the issues
reported by the other users.

On 5/17/06, John Engilis <JohnE at vacationsonly.com> wrote:
> Hey Mike,
>
> I wrote a while back with the same symptoms.  I was using 1.2.7 at the time.  I too have since upgraded to 1.2.9 and I'm receiving the same errors.
>
> I've attempted to follow similar steps with no resolution.  As an added bonus, the first time a user successfully authenticates to the web page, it is littered with grabage throughout.  It randomly deposits at the top, bottom and throughout the body of the page disrupting the html, text and some javascript.
>
> A refresh seems to clear the grabage up and the page will display normal afterwards.  I've tried this on 2 different web applications and they exhibited the same symptoms.
>
> Below is the information that pastes throughout the page.  It changes on occassion when a different domain name is used to visit the page.
>
> 1ff8
>
> [html code]
> 8
> [html code]
> 1ff8
> [html code]
>
> [html code]
> 8
> [html code]
> 1ff8
> [html code]
>
> [html code]
> 8
> [html code]
> 1ff8
> [html code]
>
> [html code]
> 8
> [html code]
> 1ff8
> [html code]
>
> [html code]
> 8
> [html code]
> 2c7
> [html code]
>
> 0
>
> These charactes appear on the left in a line all their own.  Above and below them is various html tags, text and javascript that is completely broken and disrupted.
>
> Any assistance you can lend to help resolve this problem would be greatly appreciated.
>
>
>
> On a separate note (and I only include this in case it provides any relevance) I have another web application on the same network using jcifs version 1.1.11. I've actually managed to get 95% connectivity with occassional jcifs.smb.SmbException: Unverifiable signature errors exhibiting the log entry below:
>
>
> treeConnect: unc=\\<Domain Controller Address>\IPC$,service=?????
> signature verification failure
> 00000: 99 B7 F3 18 9D D1 80 BD                          |.·ó..Ñ.½        |
>
> 00000: 05 DD 3F E4 2F 4F 81 84                          |.Ý?ä/O..        |
>
> socket closed: 0.0.0.0<00>/<Domain Controller Address>
> java.net.SocketException: socket closed
>         at java.net.SocketInputStream.socketRead0(Native Method)
>         at java.net.SocketInputStream.read(SocketInputStream.java:129)
>         at jcifs.netbios.SessionServicePacket.readn(SessionServicePacket.java:70)
>         at jcifs.netbios.SessionServicePacket.readPacketType(SessionServicePacket.java:84)
>         at jcifs.netbios.SocketInputStream.read(SocketInputStream.java:74)
>         at jcifs.netbios.SocketInputStream.read(SocketInputStream.java:40)
>         at java.io.FilterInputStream.read(FilterInputStream.java:66)
>         at java.io.PushbackInputStream.read(PushbackInputStream.java:120)
>         at jcifs.smb.SmbTransport.run(SmbTransport.java:388)
>         at java.lang.Thread.run(Thread.java:534)
>
>
> A simple refresh continues the web application and allows authentication.  I've also built a Windows 2000 domain controller to attempt continuous conectivity, but apparently it doesn't make a difference on any of the web applications.
>
> Thanks again in advance.
>
>
> Sincerely,
> John Engilis
> Project Coordinator / Programmer
> john.engilis at vacationsonly.com
> (407) 465-5190  Ext 7457
>
>
>
>
> -----Original Message-----
> From: jcifs-bounces+johne=vacationsonly.com at lists.samba.org [mailto:jcifs-bounces+johne=vacationsonly.com at lists.samba.org] On Behalf Of Paul
> Sent: Wednesday, May 17, 2006 2:47 AM
> To: jcifs at lists.samba.org
> Subject: [jcifs] jcifs failing randomly in Win2003 environment
>
> Hi Mike
>
> I'm having a problem with consistency of access in a Windows 2003 environment (SDK 1.4.2_10, Tomcat 5.5.15 with Compatibility, JCIFS 1.2.9). Initially I had the problem where only the first user could connect and subsequent users got dialog boxes headed "Connect to JCIFS... in DomainX". Regardless of detail input, access was never granted.
>
> We implemented (based on these archives):
> Upgrading to JCIFS 1.2.9 (from 1.2.7)
> Adding the machine to the Local Intranet Zone Ensuring it was not in Trusted Sites Preauthentication (Which I don't think I ever got working correctly) Setting Hostname Setting LM Compatibility=3 (Currently removed from web.xml) Setting ssnLimit=1 (Currently removed from web.xml)
>
> None of the above resolved the problem, but when we set soTimeout to 5000 we were able to get many users connecting. Testing under load showed this to be unreliable and resetting soTimeout to 500 helped - but now under further load it is failing randomly. The same user may be able to move around pages and get a failure on the 10th (or some random number) access.
>
> Current web.xml is
>        <init-param>
>              <param-name>jcifs.http.domainController</param-name>
>             <param-value>xx.xx.xx.xxx</param-value>
>         </init-param>
>
>         <init-param>
>             <param-name>jcifs.smb.client.domain</param-name>
>             <param-value>domainxxx</param-value>
>         </init-param>
>         <init-param>
>              <param-name>jcifs.util.loglevel</param-name>
>             <param-value>9</param-value>
>         </init-param>
>         <init-param>
>              <param-name>jcifs.smb.client.soTimeout</param-name>
>             <param-value>500</param-value>
>         </init-param>
>
>         <init-param>
>              <param-name>jcifs.smb.client.username</param-name>
>             <param-value>service_account</param-value>
>         </init-param>
>         <init-param>
>              <param-name>jcifs.smb.client.password</param-name>
>             <param-value>xxxxxxxxxxx</param-value>
>         </init-param>
>         <init-param>
>              <param-name>jcifs.netbios.hostname</param-name>
>             <param-value>servername</param-value>
>         </init-param>
>
> Current log entries show items like:
> NtlmHttpFilter: domainxxx\UsernameX: 0xC000006D: jcifs.smb.SmbAuthException:
> Logon failure: unknown user name or bad password.
> java.net.SocketTimeoutException: Read timed out
>         at java.net.SocketInputStream.socketRead0(Native Method)
>         at java.net.SocketInputStream.read(SocketInputStream.java:129)
>         at jcifs.util.transport.Transport.readn(Transport.java:29)
>         at jcifs.smb.SmbTransport.peekKey(SmbTransport.java:351)
>         at jcifs.util.transport.Transport.loop(Transport.java:100)
>         at jcifs.util.transport.Transport.run(Transport.java:248)
>         at java.lang.Thread.run(Thread.java:534)
> also:
> NtlmHttpFilter: domainxxx\UsernameZ successfully authenticated against 0.0.0.0<00>/xx.xx.xx.xxx
> java.net.SocketTimeoutException: Read timed out
>         at java.net.SocketInputStream.socketRead0(Native Method)
>         at java.net.SocketInputStream.read(SocketInputStream.java:129)
>         at jcifs.util.transport.Transport.readn(Transport.java:29)
>         at jcifs.smb.SmbTransport.peekKey(SmbTransport.java:351)
>         at jcifs.util.transport.Transport.loop(Transport.java:100)
>         at jcifs.util.transport.Transport.run(Transport.java:248)
>         at java.lang.Thread.run(Thread.java:534
>
> I've tried setting LM_COMPATIBILITY=3 (and other values) to no avail. I've also tried setting the ssnlimit to 1 and set up a valid logonshare and attempted to use that.
>
> If my reading of the documentation is correct, my config above should work and should be preauthenticating. I get the same error (the network login popup) regardless of what values I put in for preauth (e.g. I tried invalid username/password and still get the same errors)
>
> Can you suggest where I should start? I think I've tried every possible combination, starting from the very basic, but am hopefully overlooking something obvious. Is it worth sending a traffic capture or more log info?
>
> Thanks in advance!
> Paul
>
>
>
>
>