[jcifs] JCIFS : Issues with Windows Vista and IE

[NIKHIL MEHTA]

Hi Micheal,
 
Thanks for the reply. We have already tried setting it to various values from 1 to 5 but to no avail. I believe since this setting is present on the client Vista machine which forces NTLMv2 authentication and since JCIFS doesnt support it ( is what I understand), it is not working.
 
Please correct me if I am wrong.
 
Thanks and Regards,
Nikhil Mehta
> Date: Tue, 9 Oct 2007 01:12:03 -0400> From: miallen at ioplex.com> To: nikhil_c_mehta at hotmail.com> CC: jcifs at lists.samba.org> Subject: Re: [jcifs] JCIFS : Issues with Windows Vista and IE> > On Tue, 9 Oct 2007 10:21:27 +0530> NIKHIL MEHTA <nikhil_c_mehta at hotmail.com> wrote:> > > > > Hi All,> > > > We are facing some issues with JCIFS Authentication. We are using the jcifs 1.2.15. We have a Web Application deployed on Windows 2003 Server. When we try to access this application from Windows XP, windows 2000 Server and Windows 2003 server (any browser), it runs properly and we are prompted for a JCIFS authentication. But when we try accessing the application from Windows Vista using IE, we are not able to access the application. It does not give any error in the logs. When we try using firefox on Vista, the application works. When we digged into it, it seemed to be an issue of NTLMv2. There was a setting in the Windows Vista Secuirty Policies namely "Network security: Minimum session security for NTLM SSP based (including secure RPC) clients needs “Require NTLMv2 session security” and this needs to be unchecked. But doing this on all machines is not advisable. Kindly suggest if there is a way by which an NTLMv2 authentication can be done using JCIFS.> > Try different values for jcifs.smb.lmCompatibility as described in the> Overview page of the API documentation. I must confess I never really> understood if changing that value was supposed to yield correct behavior> under all conditions but it's worth a try. Please let us know the results.> > Mike> > -- > Michael B Allen> PHP Active Directory SPNEGO SSO> http://www.ioplex.com/
_________________________________________________________________
Call friends with PC-to-PC calling -- FREE
http://get.live.com/messenger/overview
-------------- next part --------------
HTML attachment scrubbed and removed