[jcifs] NTLM aithentication filter randomly timeouted

Michael B Allen mba2000 at ioplex.com
Fri May 11 16:02:05 GMT 2007


Try increasing timeouts 1000x. If the problem persists then you know
it's a logic / protocol issue and not a timeout issue.

Mike

On Mon, 30 Apr 2007 17:08:13 +0200
"Libor Janda" <libor.janda at ahasware.cz> wrote:

> Hello,
> We use NtlmHttpFilter with web aplication. Usualy we use variant SP45AuthFilter which can return reason in case of rejection. Because of this filter we use older version jcifs-0.7.19.
> At one customer we've met a strange problem. Tomcat with jcifs filter sometimes cannot connect to domain server. This seems to happen randomly in day, this state usually lasts for few minutes and later all works OK.
> There is a MS cluster on the side of domain server. There are no known issues on network or domain controllers.
> I've tried to play with configuration in web.xml with no progress.
> Typical errors are below.
> Have anyone met similar behavior?
> Are there any tips for MS cluster environment?
> Could be Kerberos help? (Is there any link for implementation of Kerberos in HTTP filter?
> 			Thanks
> 				Libor
> 
> 
> -------------------------
> Error 1:
> jcifs.smb.SmbException: Operation timed out: connect
> 	at jcifs.smb.SmbTransport.send(SmbTransport.java:663)
> 	at jcifs.smb.SmbTransport.negotiate(SmbTransport.java:875)
> 	at jcifs.smb.SmbSession.getChallenge(SmbSession.java:42)
> 	at jcifs.http.SP45AuthFilter.doFilter(SP45AuthFilter.java:130)
> 	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:213)
> 	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:193)
> 	at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:243)
> 	at org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:566)
> 	at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:472)
> 	at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:943)
> 	at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:190)
> 	at org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:566)
> 	at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:472)
> 	at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:943)
> 	at org.apache.catalina.core.StandardContext.invoke(StandardContext.java:2343)
> 	at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:180)
> 	at org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:566)
> 	at org.apache.catalina.valves.ErrorDispatcherValve.invoke(ErrorDispatcherValve.java:170)
> 	at org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:564)
> 	at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:170)
> 	at org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:564)
> 	at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:468)
> 	at org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:564)
> 	at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:472)
> 	at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:943)
> 	at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:174)
> 	at org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:566)
> 	at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:472)
> 	at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:943)
> 	at org.apache.catalina.connector.http.HttpProcessor.process(HttpProcessor.java:1012)
> 	at org.apache.catalina.connector.http.HttpProcessor.run(HttpProcessor.java:1107)
> 	at java.lang.Thread.run(Unknown Source)
> ---------------------------
> Error 2:
> jcifs.smb.SmbException: Host unreachable: connect
> 	at jcifs.smb.SmbTransport.send(SmbTransport.java:663)
> 	at jcifs.smb.SmbTransport.negotiate(SmbTransport.java:875)
> 	at jcifs.smb.SmbSession.getChallenge(SmbSession.java:42)
> 	at jcifs.http.SP45AuthFilter.doFilter(SP45AuthFilter.java:130)
> 	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:213)
> 	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:193)
> 	at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:243)
> 	at org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:566)
> 	at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:472)
> 	at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:943)
> 	at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:190)
> 	at org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:566)
> 	at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:472)
> 	at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:943)
> 	at org.apache.catalina.core.StandardContext.invoke(StandardContext.java:2343)
> 	at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:180)
> 	at org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:566)
> 	at org.apache.catalina.valves.ErrorDispatcherValve.invoke(ErrorDispatcherValve.java:170)
> 	at org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:564)
> 	at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:170)
> 	at org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:564)
> 	at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:468)
> 	at org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:564)
> 	at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:472)
> 	at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:943)
> 	at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:174)
> 	at org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:566)
> 	at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:472)
> 	at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:943)
> 	at org.apache.catalina.connector.http.HttpProcessor.process(HttpProcessor.java:1012)
> 	at org.apache.catalina.connector.http.HttpProcessor.run(HttpProcessor.java:1107)
> 	at java.lang.Thread.run(Unknown Source)
> 


-- 
Michael B Allen
PHP Active Directory Kerberos SSO
http://www.ioplex.com/


More information about the jcifs mailing list