[jcifs] Exception when connecting to DFS share

[Michael B Allen]

On Wed, 5 Sep 2007 12:10:07 -0400
Michael B Allen <miallen at ioplex.com> wrote:

> On Wed, 5 Sep 2007 08:30:46 -0500
> <Eric.Mitchell at wellsfargo.com> wrote:
> 
> >  Hi Michael, 
> > I should have provided more clarification... Yes I am attempting the
> > authentication against a domain based dfs root.
> > In my case the URL appears as //my.fully.qualifieddomain.corp/dfs_root
> > 
> > I am testing between our current version of jcifs (1.2.13) and 1.2.17 with
> > the hopes of being able to allow our java apps (running on Linux)read/write
> > files within a dfs (on Windows 2003 Active Directory).
> > 
> > The test is a shell script which simply returns a listing...
> > 
> > Currently working in 1.2.13: "${JAVA_HOME}/bin/java" ListFiles
> > smb://servername/dfsshare
> > Results in listing all files.
> > 
> > Testing in 1.2.17: "${JAVA_HOME}/bin/java" ListFiles
> > smb://some.example.name.corp/dfs_root (happens to be same name as dfsshare)
> > Results in the logon failure.
> > 
> > Testing 1.2.17 for servername/share: "${JAVA_HOME}/bin/java" ListFiles
> > smb://servername/dfsshare
> > Also results in logon failure.
> > 
> > Both the .13 and the .17 testing are using the same userID and encrypted
> > password called from the same jcifs.properties file. 
> 
> Ok, so it does have something to do with the new changes because
> smb://servername/dfsshare works with 1.2.13 and does not with 1.2.17. I'll
> see if I can replicate that issue here.

Eric,

I was not able to replicate this issue. Viewing DFS shares by
NetBIOS server name as well as by DNS name works as expected in the
somewhat limited DFS setup I have here. Perhaps 'servername' is not
resolving to the name you are expecting and your credentials are in
fact not sufficient for the server it is communicating with. Does
smb://some.example.name.corp/dfsshare/ work with .13?

Mike

> > -----Original Message-----
> > From: Michael B Allen [mailto:miallen at ioplex.com] 
> > Sent: Tuesday, September 04, 2007 3:29 PM
> > To: Mitchell, Eric (SAS)
> > Cc: jcifs at lists.samba.org
> > Subject: Re: [jcifs] Exception when connecting to DFS share
> > 
> > On Tue, 4 Sep 2007 12:34:31 -0500
> > <Eric.Mitchell at wellsfargo.com> wrote:
> > 
> > > Receiving an authentication exception "jcifs.smb.SmbAuthException: 
> > > Logon
> > > failure: unknown user name or bad password" when attempting a List 
> > > Files to a DFS share (smb://fqdn//dfs_share/).
> > > 
> > > However when connecting directly to one of the shares referenced by 
> > > the DFS object in active directory -  (smb://servername/dfs_share/) -  
> > > it is working.
> > > 
> > > I am using jcifs-1.2.17 - has anyone else seen this behaviour and know 
> > > how to correct it?
> > > Pulling my hair out here!
> > 
> > Hi Eric,
> > 
> > We recently made some very significant changes to the DFS code so I'd really
> > like to know precisely what you're doing. But in general your descriptions
> > is filled with ambiguity. Can you be more precise using examples like
> > server1.example.com server2.example.com. By "dfs_share"
> > do you mean a DFS root?
> > 
> > For example, the following URLs can provoke greatly different protocol
> > sequences:
> > 
> > smb://example.com/
> > smb://example.com/dfsroot/
> > smb://server1.example.com/dfsroot/
> > smb://server1.example.com/dfsroot/foo/
> > smb://server2.example.com/dfsshare/
> > 
> > The above assumes server1.example.com/dfsroot is the DFS root,
> > server1 and server2 are domain controllers in the example.com domain,
> > server2.example.com/dfsshare is a link in the DFS topology, etc.
> > 
> > Please be more specific,
> > Mike
> > 
> > --
> > Michael B Allen
> > PHP Active Directory Kerberos SSO
> > http://www.ioplex.com/
> > 
> 
> 
> -- 
> Michael B Allen
> PHP Active Directory Kerberos SSO
> http://www.ioplex.com/
> 


-- 
Michael B Allen
PHP Active Directory Kerberos SSO
http://www.ioplex.com/