[jcifs] Sporadic Authetication Failures for same user

Ravinder Gade r.jcifs at gmail.com
Fri May 23 18:01:21 GMT 2008


Skipped content of type multipart/alternative-------------- next part --------------


SmbComNegotiate[command=SMB_COM_NEGOTIATE,received=false,errorCode=0,flags=0x0018,flags2=0xC003,signSeq=0,tid=0,pid=26079,uid=0,mid=3,wordCount=0,byteCount=12,wordCount=0,dialects=NT LM 0.12]
00000: FF 53 4D 42 72 00 00 00 00 98 03 C0 00 00 00 00  |?SMBr......?....|
00010: 00 00 00 00 00 00 00 00 00 00 DF 65 00 00 03 00  |..........?e....|

SmbComNegotiateResponse[command=SMB_COM_NEGOTIATE,received=false,errorCode=0,flags=0x0098,flags2=0xC003,signSeq=0,tid=0,pid=26079,uid=0,mid=3,wordCount=17,byteCount=42,wordCount=17,dialectIndex=0,securityMode=0xF,security=user,encryptedPasswords=true,maxMpxCount=50,maxNumberVcs=1,maxBufferSize=16644,maxRawSize=65536,sessionKey=0x00000000,capabilities=0x0001F3FD,serverTime=Fri Apr 25 14:13:20 EDT 2008,serverTimeZone=300,encryptionKeyLength=8,byteCount=42,encryptionKey=0x3EF8FD85B8291FC6,oemDomainName=Company_Domain]
<Apr 25, 2008 2:13:20 PM EDT> <Error> <Cluster> <BEA-000126> <All session objects should be serializable to replicate. Check the objects in your session. Failed to replicate non-serializable object.> 
00000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |................|
00010: 6D C9 C9 2A 47 90 E1 0F 8C 4F B2 8C AA 91 43 05  |m??*G.?..O?.?.C.|
00020: 3F 8F 7E 7B 30 CD 60 48                          |?.~{0?`H        |

00000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |................|
00010: 6D C9 C9 2A 47 90 E1 0F 8C 4F B2 8C AA 91 43 05  |m??*G.?..O?.?.C.|
00020: 3F 8F 7E 7B 30 CD 60 48                          |?.~{0?`H        |

00000: FF 53 4D 42 73 00 00 00 00 18 07 C0 00 00 00 00  |?SMBs......?....|
00010: 00 00 00 00 00 00 00 00 00 00 DF 65 00 00 04 00  |..........?e....|
00020: 0D 75 00 A6 00 04 41 0A 00 01 00 00 00 00 00 18  |.u.?..A.........|
00030: 00 18 00 00 00 00 00 54 10 00 00 69 00 C2 CA D0  |.......T...i.???|
00040: 44 86 7E 64 6E E5 EA E5 4B 32 7A 00 A5 21 E7 58  |D.~dn???K2z.?!?X|
00050: 2D 62 EF E6 46 6D C9 C9 2A 47 90 E1 0F 8C 4F B2  |-b??Fm??*G.?..O?|
00060: 8C AA 91 43 05 3F 8F 7E 7B 30 CD 60 48 00 42 00  |.?.C.?.~{0?`H.B.|
00070: 50 00 2D 00 42 00 52 00 30 00 30 00 30 00 31 00  |P.-.B.R.0.0.0.1.|
00080: 00 00 43 00 41 00 42 00 4C 00 45 00 00 00 53 00  |..C.A.B.L.E...S.|
00090: 75 00 6E 00 4F 00 53 00 00 00 6A 00 43 00 49 00  |u.n.O.S...j.C.I.|
000A0: 46 00 53 00 00 00 04 FF 00 00 00 00 00 01 00 21  |F.S....?.......!|
000B0: 00 00 5C 00 5C 00 43 00 41 00 42 00 4C 00 45 00  |..\.\.C.A.B.L.E.|
000C0: 5C 00 49 00 50 00 43 00 24 00 00 00 3F 3F 3F 3F  |\.I.P.C.$...????|
000D0: 3F 00                                            |?.              |

00000: B0 A8 7A 36 1D 44 86 0B 13 94 EE C8 0F B3 BF C9  |??z6.D....??.???|

SmbComSessionSetupAndX[command=SMB_COM_SESSION_SETUP_ANDX,received=false,errorCode=0,flags=0x0018,flags2=0xC007,signSeq=0,tid=0,pid=26079,uid=0,mid=4,wordCount=13,byteCount=105,andxCommand=0x75,andxOffset=166,snd_buf_size=16644,maxMpxCount=10,VC_NUMBER=1,sessionKey=0,passwordLength=24,unicodePasswordLength=24,capabilities=4180,accountName=user-001,primaryDomain=Company_Domain,NATIVE_OS=SunOS,NATIVE_LANMAN=jCIFS]
SmbComTreeConnectAndX[command=SMB_COM_TREE_CONNECT_ANDX,received=false,errorCode=0,flags=0x0018,flags2=0x0000,signSeq=0,tid=0,pid=26079,uid=0,mid=0,wordCount=4,byteCount=33,andxCommand=0xFF,andxOffset=0,disconnectTid=false,passwordLength=1,password=,path=\\Company_Domain\IPC$,service=?????]
00000: FF 53 4D 42 73 00 00 00 00 98 07 C0 00 00 5D CC  |?SMBs......?..]?|
00010: D8 A8 95 5D 15 A7 00 00 01 10 DF 65 01 18 04 00  |??.].?....?e....|

SmbComSessionSetupAndXResponse[command=SMB_COM_SESSION_SETUP_ANDX,received=false,errorCode=0,flags=0x0098,flags2=0xC007,signSeq=1,tid=4097,pid=26079,uid=6145,mid=4,wordCount=3,byteCount=140,andxCommand=0x75,andxOffset=181,isLoggedInAsGuest=false,nativeOs=Windows Server 2003 3790 Service Pack 2,nativeLanMan=Windows Server 2003 5.2,primaryDomain=Company_Domain]
2008-04-25 14:13:20,780  WARN [ExecuteThread: '82' for queue: 'weblogic.kernel.Default'] (jcifs.http.NtlmHttpFilter) - NtlmHttpFilter: Company_Domain\user-001 successfully authenticated against Company_Domain<1C>/10.41.1.7




-------------- next part --------------
SmbComNegotiate[command=SMB_COM_NEGOTIATE,received=false,errorCode=0,flags=0x0018,flags2=0xC003,signSeq=0,tid=0,pid=26079,uid=0,mid=5,wordCount=0,byteCount=12,wordCount=0,dialects=NT LM 0.12]
00000: FF 53 4D 42 72 00 00 00 00 98 03 C0 00 00 00 00  |?SMBr......?....|
00010: 00 00 00 00 00 00 00 00 00 00 DF 65 00 00 05 00  |..........?e....|

SmbComNegotiateResponse[command=SMB_COM_NEGOTIATE,received=false,errorCode=0,flags=0x0098,flags2=0xC003,signSeq=0,tid=0,pid=26079,uid=0,mid=5,wordCount=17,byteCount=42,wordCount=17,dialectIndex=0,securityMode=0xF,security=user,encryptedPasswords=true,maxMpxCount=50,maxNumberVcs=1,maxBufferSize=16644,maxRawSize=65536,sessionKey=0x00000000,capabilities=0x0001F3FD,serverTime=Fri Apr 25 14:13:18 EDT 2008,serverTimeZone=240,encryptionKeyLength=8,byteCount=42,encryptionKey=0xAF3349FCFF904954,oemDomainName=Company_Domain]
<Apr 25, 2008 2:15:56 PM EDT> <Error> <Cluster> <BEA-000126> <All session objects should be serializable to replicate. Check the objects in your session. Failed to replicate non-serializable object.> 
00000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |................|
00010: 9F B8 02 52 83 4A F9 B6 BE 06 1E 7C FD 5D 69 99  |.?.R.J???..|?]i.|
00020: DC 23 62 51 DB 8E AC 46                          |?#bQ?.?F        |

00000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |................|
00010: 9F B8 02 52 83 4A F9 B6 BE 06 1E 7C FD 5D 69 99  |.?.R.J???..|?]i.|
00020: DC 23 62 51 DB 8E AC 46                          |?#bQ?.?F        |

00000: FF 53 4D 42 73 00 00 00 00 18 07 C0 00 00 00 00  |?SMBs......?....|
00010: 00 00 00 00 00 00 00 00 00 00 DF 65 00 00 06 00  |..........?e....|
00020: 0D 75 00 A6 00 04 41 0A 00 01 00 00 00 00 00 18  |.u.?..A.........|
00030: 00 18 00 00 00 00 00 54 10 00 00 69 00 F0 28 4F  |.......T...i.?(O|
00040: 1B 9A BB 51 32 0A 3A 78 F4 ED 4D 6C 30 ED EB 76  |..?Q2.:x??Ml0??v|
00050: 31 81 64 6C DB 9F B8 02 52 83 4A F9 B6 BE 06 1E  |1.dl?.?.R.J???..|
00060: 7C FD 5D 69 99 DC 23 62 51 DB 8E AC 46 00 42 00  ||?]i.?#bQ?.?F.B.|
00070: 50 00 2D 00 42 00 52 00 30 00 30 00 30 00 31 00  |P.-.B.R.0.0.0.1.|
00080: 00 00 43 00 41 00 42 00 4C 00 45 00 00 00 53 00  |..C.A.B.L.E...S.|
00090: 75 00 6E 00 4F 00 53 00 00 00 6A 00 43 00 49 00  |u.n.O.S...j.C.I.|
000A0: 46 00 53 00 00 00 04 FF 00 00 00 00 00 01 00 21  |F.S....?.......!|
000B0: 00 00 5C 00 5C 00 43 00 41 00 42 00 4C 00 45 00  |..\.\.C.A.B.L.E.|
000C0: 5C 00 49 00 50 00 43 00 24 00 00 00 3F 3F 3F 3F  |\.I.P.C.$...????|
000D0: 3F 00                                            |?.              |

00000: 4F 0E CF F4 60 9D 56 E6 78 47 64 90 1D F0 8D 26  |O.??`.V?xGd..?.&|

SmbComSessionSetupAndX[command=SMB_COM_SESSION_SETUP_ANDX,received=false,errorCode=0,flags=0x0018,flags2=0xC007,signSeq=0,tid=0,pid=26079,uid=0,mid=6,wordCount=13,byteCount=105,andxCommand=0x75,andxOffset=166,snd_buf_size=16644,maxMpxCount=10,VC_NUMBER=1,sessionKey=0,passwordLength=24,unicodePasswordLength=24,capabilities=4180,accountName=BP-XXXXX,primaryDomain=Company_Domain,NATIVE_OS=SunOS,NATIVE_LANMAN=jCIFS]
SmbComTreeConnectAndX[command=SMB_COM_TREE_CONNECT_ANDX,received=false,errorCode=0,flags=0x0018,flags2=0x0000,signSeq=0,tid=0,pid=26079,uid=0,mid=0,wordCount=4,byteCount=33,andxCommand=0xFF,andxOffset=0,disconnectTid=false,passwordLength=1,password=,path=\\Company_Domain\IPC$,service=?????]
00000: FF 53 4D 42 73 6D 00 00 C0 98 07 C0 00 00 4F 0E  |?SMBsm..?..?..O.|
00010: CF F4 60 9D 56 E6 00 00 00 00 DF 65 00 00 06 00  |??`.V?....?e....|

SmbComSessionSetupAndXResponse[command=SMB_COM_SESSION_SETUP_ANDX,received=false,errorCode=Logon failure: unknown user name or bad password.,flags=0x0098,flags2=0xC007,signSeq=1,tid=0,pid=26079,uid=0,mid=6,wordCount=0,byteCount=0,andxCommand=0xFF,andxOffset=0,isLoggedInAsGuest=false,nativeOs=,nativeLanMan=,primaryDomain=]
2008-04-25 14:15:56,325  WARN [ExecuteThread: '88' for queue: 'weblogic.kernel.Default'] (jcifs.http.NtlmHttpFilter) - NtlmHttpFilter: Company_Domain\user-001: 0xC000006D: jcifs.smb.SmbAuthException: Logon failure: unknown user name or bad password.


More information about the jcifs mailing list