[jcifs] jcifs - user cant log in

[Kevin Tapperson]

Take a look at the Active Directory attribute called userWorkstations.  If
the userWorkstations attribute for a user is not populated, then a user can
login to any workstation.  If the userWorkstations attribute for a user
contains one or more workstation names, then that user can only login from
those workstations.  I would suggest setting your netbios hostname in jcifs
using the jcifs.netbios.hostname property; this way you are guaranteed a
consistent netbios workstation name (this is particularly useful if you have
a cluster of servers running jcifs).  Then you will need to make sure that
that workstation name is listed in all user accounts in AD that make use of
the userWorkstations attribute.  (There is no need to add the jcifs
workstation name to users who do not already have a userWorkstations
attribute.)

Hope this helps...

-- Kevin Tapperson
kevin at tapperson.net



On 10/26/06, gruizf at credomatic.com <gruizf at credomatic.com> wrote:
>
> Thanks all for your replies.
>
> Erick, Im not sure about using jcifs.netbios.hostname, because we are
> using
> multiple domains with a trust relationship. All users in domain 1, 2, and
> 3
> are working properly, but this problem is happening with users on domain
> 4.
> The problem is that I'm not the server administrator so I dont have access
> to the server. I'm trying to give an answer to the server admin.
>
> Thanks anyway.
>
>
>
>
>             "Eric Glass"
>             <eric.glass at gmail
>             .com>                                                      To
>                                       "Michael B Allen"
>             25/10/2006 08:44          <mba2000 at ioplex.com>
>             p.m.                                                       cc
>                                       gruizf at credomatic.com,
>                                       jcifs at lists.samba.org
>                                                                   Subject
>                                       Re: [jcifs] jcifs - user cant log
>                                       in
>
>
>
>
>
>
>
>
>
>
> You can also use jcifs.netbios.hostname to specify a hostname which
> the user is allowed to log on to.
>
> On 10/25/06, Michael B Allen <mba2000 at ioplex.com> wrote:
> > On Wed, 25 Oct 2006 08:32:36 -0600
> > gruizf at credomatic.com wrote:
> >
> > >
> > > Hi all!
> > >
> > > Anyone know why this user cant log-in, or can anyone recognize this
> error?
> > >
> > > NtlmHttpFilter: gerencia\guillermov: 0xC0000070:
> > > jcifs.smb.SmbAuthException: Logon failure: user not allowed to log on
> to
> > > this computer.
> > >
> > > Is there some configuration needed in the Active Directory of the
> Win2003
> > > Server?
> >
> > Yes, I can't think of the exact name or location but I think it's
> standard
> > security policy (google on secpol.msc).
> >
> > Mike
> >
> > --
> > Michael B Allen
> > PHP Active Directory SSO
> > http://www.ioplex.com/
> >
>
>
>
-------------- next part --------------
HTML attachment scrubbed and removed