[jcifs] NTLM Filter logs as a 'Guest' user, when the domaincontroller property is removed

[Nidhi Bhatnagar]

This is a little wierd, but the filter works fine in win2k3 environment if
the domainCOntroller address is specified, but when I use the WINS
resolution only, the browser doe not get my credentials and tries to
authenticate as a GUEST user with "?" domain. 
Any ideas what is likely missing that I can consut my AD Admins with.
I am using jcifs-1.2.19

Thanks
~ NIdhi


Here is the trace
treeConnect: unc=\\MSDS\IPC$,service=?????
sessionSetup: accountName=GUEST,primaryDomain=?
SmbComSessionSetupAndX[command=SMB_COM_SESSION_SETUP_ANDX,received=false,errorCode=0,flags=0x0018,flags2=0xC007,signSeq=0,tid=0,pid=3958,uid=0,mid=8,wordCount=13,byteCount=55,andxCommand=0x75,andxOffset=116,snd_buf_size=16644,maxMpxCount=10,VC_NUMBER=1,sessionKey=0,passwordLength=0,unicodePasswordLength=0,capabilities=4180,accountName=GUEST,primaryDomain=?,NATIVE_OS=Windows
2003,NATIVE_LANMAN=jCIFS]
SmbComTreeConnectAndX[command=SMB_COM_TREE_CONNECT_ANDX,received=false,errorCode=0,flags=0x0018,flags2=0x0000,signSeq=0,tid=0,pid=3958,uid=0,mid=0,wordCount=4,byteCount=31,andxCommand=0xFF,andxOffset=0,disconnectTid=false,passwordLength=1,password=,path=\\MSDS\IPC$,service=?????]
New data read: Transport2[MSDS<1C>/10.253.13.53:0]
00000: FF 53 4D 42 73 6D 00 00 C0 98 07 C0 00 00 5D 4A  |ÿSMBsm..À..À..]J|
00010: 6E 01 27 71 B8 E0 00 00 00 00 76 0F 00 00 08 00  |n.'q¸à....v.....|

 

 Event Type: Failure Audit

Event Source: Security

Event Category: Logon/Logoff 

Event ID: 529

Date: 11/17/2008

Time: 1:46:31 PM

User: NT AUTHORITY\SYSTEM

Computer: HQP-DC-XXXX

Description:

Logon Failure:

Reason: Unknown user name or bad password

User Name: GUEST

Domain: 

Logon Type: 3

Logon Process: NtLmSsp 

Authentication Package: NTLM

Workstation Name: \\10.10.10.10

Caller User Name: -

Caller Domain: -

Caller Logon ID: -

Caller Process ID: -

Transited Services: -

Source Network Address: 10.10.10.10

Source Port: 0


-- 
View this message in context: http://www.nabble.com/NTLM-Filter-logs-as-a-%27Guest%27-user%2C-when-the-domaincontroller-property-is-removed-tp20551810p20551810.html
Sent from the Samba - jcifs mailing list archive at Nabble.com.