[jcifs] Problem with pre-auth

[Torben Wölm]

Hi Ashok

> Any idea how would it get all the possible domain controllers?  
> 
> In multi region environment, if the server is located in one 
> country and if JCIFS choose a domain controller which is too 
> far, performance gets affected.

I don't know the details, but I read in the documentation that it sends a "0x1C NetBIOS" name query which should return a list of domain controllers. The property "jcifs.netbios.lookupRespLimit" has a default of 5, meaning that the top 5 domain controllers will be used. I don't know if WINS has some kind of intelligent way of determining a sensible order of domain controllers.

Else there is the property "jcifs.netbios.cachePolicy" which the NtlmHttpFilter will set to 20 minutes so it doesn't have to query for the domain controller all the time. This is probably why you experience that the same domain controller is contacted all the time?

You could set this value lower (default 30 seconds) so users will experience a delay if the DC is down, but this will probably affect performance when everything is OK...

The properties are listed at:
http://jcifs.samba.org/src/docs/ntlmhttpauth.html#props

Kind regards
Torben