[jcifs] Issue in ntlm authentication

Robin Panicker Robin_Panicker at infosys.com
Tue Nov 28 17:06:18 GMT 2006


Hello,
      we are using JCIFS 1.2.8 for NTLM authentication in our application. When only one user logs into the application he is able to access the application. But when more than one user (with different user IDs) try to log into the application the others are not able to access the application. The others are repeteadly given the ntlm authentication box, even though they enter the correct credentials.


following are the details from our web.xml
<filter>

            <filter-name>NtlmHttpFilter</filter-name>

            <filter-class>jcifs.http.NtlmHttpFilter</filter-class>



            <init-param>

                  <param-name>jcifs.http.domainController</param-name>

                  <param-value>XXXXX</param-value>

            </init-param>

           

            <init-param>     

                  <param-name>jcifs.smb.lmCompatibility</param-name>

            <param-value>3</param-value>

            </init-param>

</filter>



Can anyone explain why is this happening? why are multiple users not able to access the application? if you require more information, please let me know.

thanks a lot

Robin






________________________________

From: Robin Panicker
Sent: Tue 11/28/2006 10:19 PM
To: Anoop Prakash
Subject: RE: Mail for review


Hello Mike,

We got your reference from the jcifs mailing list. We found out an issue in the mailing list that is similar to the problem we are facing while accessing our application using the JCIFS NTLM authentication. When multiple users try accessing our application concurrently, only one of the users will be allowed to log in. The others are shown the NTLM authentication box again and again, even though they enter the right credentials. The application is a struts based J2EE application and we are using  JCIFS version 1.2.8. We tried doing the instructions given in the link - http://lists.samba.org/archive/jcifs/2006-June/006304.html . We are using a domain controller also in this. I am pasting below a part of the web.xml for the application.



<filter>

            <filter-name>NtlmHttpFilter</filter-name>

            <filter-class>jcifs.http.NtlmHttpFilter</filter-class>



            <init-param>

                  <param-name>jcifs.http.domainController</param-name>

                  <param-value>CORPDC3</param-value>

            </init-param>

           

            <init-param>     

                  <param-name>jcifs.smb.lmCompatibility</param-name>

            <param-value>3</param-value>

            </init-param>

</filter>



It would be great if you could let us know what could be the issue.Please let us knowif you need any more details on this.



Thanks,

Anoop








[jcifs] NTLM Authentication problem

Mike Streeton mike.streeton at ardentia.co.uk <mailto:jcifs%40lists.samba.org?Subject=%5Bjcifs%5D%20NTLM%20Authentication%20problem&In-Reply-To=>
Thu Jun 22 06:51:43 GMT 2006

*	Previous message: [jcifs] NTLM Authentication problem
*	Next message: [jcifs] Authenticating Against Multiple Domain Controllers
*	Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

________________________________

We had problems with some people being able to connect but not other,
even though they have exactly the same config (XP pro), we got round
them by setting the following:

Configure the JCIFS parameter jcifs.smb.lmCompatibility try setting it
to 3, 4 or 5

Configure the JCIFS parameter jcifs.netbios.hostname to be the local
machine



Set the API documentation on how to do this:
http://jcifs.samba.org/src/docs/api/



If this does not work post the config/error logs etc and Michael is very
helpful and can usually put you right.



Thanks



Mike



www.ardentia.com the home of NetSearch

________________________________

From: jcifs-bounces+mike.streeton=ardentia.co.uk at lists.samba.org <https://lists.samba.org/mailman/listinfo/jcifs>
[mailto:jcifs-bounces+mike.streeton=ardentia.co.uk at lists.samba.org <https://lists.samba.org/mailman/listinfo/jcifs> ] On
Behalf Of Publius Ismanescu
Sent: 21 June 2006 21:25
To: jcifs at lists.samba.org <https://lists.samba.org/mailman/listinfo/jcifs>
Subject: [jcifs] NTLM Authentication problem



Hi everybody,

I have a situation where the NTLM authentication fails. I will explain
my configuration and the tests we did.

We have a weblogic server on AIX server and we use jcifs for NTLM
authentication. The users that access the website, they all have windows
desktops, with IE installed.
All user can access the website properly . The problem start when we
want to let user from outsite the company connect.

The external user connect to a metaframe (Citrix) and they use the IE
browser on the metaframe server to connect to the internal website.
The user are propted with a login dialog to enter their user ID and
password. After entering the information they get a server or DNS error.

After we turned the loglevel to see more info from jcifs, it looks like
the 3-rd handshake does not take place.

Installing Firefox on the metaframe server and testing the
access,everything is working.
Using IE to connect to a second metaframe server it woks also. IE
versions on the 2 metaframes is the same.


Can anybody help with some IE settings or give me some tips on what else
to look for to solve this.


Thank you


--
Publius Ismanescu
http://publius.wwdb.biz
email: publiusi at gmail.com <https://lists.samba.org/mailman/listinfo/jcifs> 

-------------- next part --------------
HTML attachment scrubbed and removed

________________________________


*	Previous message: [jcifs] NTLM Authentication problem
*	Next message: [jcifs] Authenticating Against Multiple Domain Controllers
*	Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

________________________________

More information about the jcifs mailing list <https://lists.samba.org/mailman/listinfo/jcifs>




**************** CAUTION - Disclaimer *****************
This e-mail contains PRIVILEGED AND CONFIDENTIAL INFORMATION intended solely for the use of the addressee(s). If you are not the intended recipient, please notify the sender by e-mail and delete the original message. Further, you are not to copy, disclose, or distribute this e-mail or its contents to any other person and any such actions are unlawful. This e-mail may contain viruses. Infosys has taken every reasonable precaution to minimize this risk, but is not liable for any damage you may sustain as a result of any virus in this e-mail. You should carry out your own virus checks before opening the e-mail or attachment. Infosys reserves the right to monitor and review the content of all messages sent to or from this e-mail address. Messages sent to or from this e-mail address may be stored on the Infosys e-mail system.
***INFOSYS******** End of Disclaimer ********INFOSYS***


More information about the jcifs mailing list