[jcifs] authentication not working

[Eric Glass]

What are the values of the following registry entries on the machines where
the app is not working:


HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\LSA\LMCompatibilityLevel

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\LSA\MSV1_0\NtlmMinClientSec

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\LSA\MSV1_0\NtlmMinServerSec



On 8/27/07, Ashok Kumar K <AshokKumar_220060 at infosys.com> wrote:
>
>
>
> Hi Torben
>
> I would like to thank you for sparing your valuable time to solve my
> problem. I could not give my immediate reply as I was out this weekend, so
> excuse me.
>
> Coming to the issue,
>
> As you suggested I changed to version 1.2.17
>
> I tried all the 3 steps that you suggested and the result is as under
>
> 1. those who could not connect through laptop are able to connect through
> regular pc using their username and password.
>
> 2.when I disabled auto logon feature in IE settings, its prompting for
> username and password. Also I could able to reach server from their system,
> i.e. I could open tomcat admin console of server from their system.
>
> 3.i find a little difference in the output of 'tracert <server>' on
> machines those accessing and those not accessing. Even then I could reach
> server machine from both systems ( as I could reach tomcat admin console
> from both systems ) so I don't think it's a problem.
>
> To tell you, when I commented out the code that is accessing the windows
> login user's name, I am able to hit the application from all systems.
>
> You also suggested to try out Ethereal, we don't know how to use it.
>
> Here is the extra info you asked that might help to trace the problem.
>
> -Windows version over which tomcat running : windows server 2003
>
> -windows version on laptops : windows XP
>
> As I told you before there are some laptops with windows XP over which app
> is accessible.
>
> -IE version on all systems are 6.0
>
> We did not installed any servicepacks anywhere.
>
> I know that I am troubling you too much, but hope you understood my
> situation and help regarding this.
>
>
>
> Thanks and regards
> Ashok
>
> -----Original Message-----
> From: Torben Wölm [mailto:torben.wolm at LEGO.com]
> Sent: Saturday, August 25, 2007 1:42 PM
> To: Ashok Kumar K
> Cc: jcifs at lists.samba.org
> Subject: RE: [jcifs] authentication not working
>
> Hi Ashok
>
> I meant that the library in the meantime is up to version 1.2.17 and you
> are still using 1.1.11...
>
> When connecting from the laptops -- do you always only get a
> "SmbComTreeDisconnect" message?
>
> I don't think the problem lies with JCIFS -- then it wouldn't work for the
> regular users either.
>
>
> Some things to try out:
>
> 1) Have one of the laptop users logon a regular PC, and see if they can
> connect to the application.
>
>    This is to see if it is something with the account.
>
>
> 2) Try to disable the autologon feature in Internet Explorer
> (Tools->Internet Options->Security->Custom Level -- at the bottom locate
> "Logon" and set to "Prompt for username and password")
>
>    This is to see if the users have connected to the server that hosts
> Tomcat earlier and maybe checked of "Remember password".
>
>
> 3) Make a "tracert <server>" on a commandline on both regular PC and
> laptop
>
>    To see if the network paths are different (firewalls/routers/proxies)
>
>
> If this doesn't give any clues I would still try to run Ethereal at the
> server to see what the difference is between the communication between a
> regular PC and a laptop...
>
> Some other useful info you could provide:
>
> - Windows version (incl. ServicePacks) of the server running Tomcat
>
> - Windows version (incl. SPs) of the domain controller
>
> - Windows version (incl. SPs) on laptops
>
> - Windows version (incl. SPs) on regular PC's.
>
> - Internet Explorer versions (incl. SPs) on laptop
>
> - Internet Explorer versions (incl. SPs) on regular PC's.
>
>
> HTH,
> Torben
>
> **************** CAUTION - Disclaimer *****************
> This e-mail contains PRIVILEGED AND CONFIDENTIAL INFORMATION intended
> solely for the use of the addressee(s). If you are not the intended
> recipient, please notify the sender by e-mail and delete the original
> message. Further, you are not to copy, disclose, or distribute this e-mail
> or its contents to any other person and any such actions are unlawful. This
> e-mail may contain viruses. Infosys has taken every reasonable precaution to
> minimize this risk, but is not liable for any damage you may sustain as a
> result of any virus in this e-mail. You should carry out your own virus
> checks before opening the e-mail or attachment. Infosys reserves the right
> to monitor and review the content of all messages sent to or from this
> e-mail address. Messages sent to or from this e-mail address may be stored
> on the Infosys e-mail system.
> ***INFOSYS******** End of Disclaimer ********INFOSYS***
>
-------------- next part --------------
HTML attachment scrubbed and removed