Antwort: [jcifs] NTLM HTTP Filter Does Not Work With SMB Signing [ Virenprüfung durchgeführt]

[matthias.weber at barmenia.de]

Hi Mike,

did what you wanted (with 1.2.8, but there should be no difference to 
1.2.9?):

- Login of two users with session signing enabled (
jcifs.smb.client.username and jcifs.smb.client.password not commented):

 works for both.

- Login of two users with session signing disabled (
jcifs.smb.client.username and jcifs.smb.client.password not commented, 
JCifs reports "Default credentials (jcifs.smb.client.username/password) 
not specified. SMB signing may not work propertly.  Skipping DC 
interrogation."):

First user can, the second user can't login.

Regards,
Matthias



Gesendet von:   jcifs-bounces+matthias.weber=barmenia.de at lists.samba.org
An:     jcifs at samba.org
Kopie:   
Thema:  [jcifs] NTLM HTTP Filter Does Not Work With SMB Signing 
[Virenprüfung durchgeführt]

Folks,

There is something wrong with the NTLM HTTP Filter - several users have
reported sporatic failures. A number of people have sent me a variety of
diagnostics but all I really need right now is for someone (preferrably
multiple people) to perform the following simple test:

1) Install the stock config as supplied in the documentation. Use the
first example config unless you're not using WINS in which case use the
second example. Do not use any properties other than those explicitly
directed.

2) Restart your container and have two or three different users on
different workstations simultaneously login to the site. If this does
not work, please report the failure.

3) If multiple users does work, then please stop the container, comment
out the username and password for preauthentication, start the container
and again have two or three different users access the site. If it
works, then your domain controller does not require SMB signing and your
environment is not affected. No need to report your results. If it fails,
then that means SMB signing is being used and works with multiple users
in which case please report your success.

Any deviation from the above right now is bad science and I'm not
interested.

Until someone performs this test we simply cannot proceed with this
issue. I would like to try and make progress on this issue soon. Otherwise
I will need to update the documentation to reflect the fact that the
filter basically does not work with SMB signing.

Mike

-------------- next part --------------
HTML attachment scrubbed and removed