[jcifs] jcifs.smb.SmbAuthException: Logon failure: account currently disabled.

Bérengère CLAUDEAU berengere.claudeau at ilex.fr
Wed Oct 8 13:24:07 GMT 2008


Hi,

I'm trying to protect a web application with the NtlmHttpFilter.
Sometimes it works perfectly, sometimes the negotiation fail and I don't 
understand what does it wrong...

the web.xml contains :
   <init-param>
        <param-name>jcifs.smb.client.domain</param-name>
        <param-value>ILEX</param-value>
    </init-param>   
    <init-param>
        <param-name>jcifs.netbios.wins</param-name>
        <param-value>192.168.10.72</param-value>
    </init-param>
    <init-param>
        <param-name>jcifs.smb.client.password</param-name>
        <param-value>ClearPasswordOfTestAccount</param-value>
    </init-param>
    <init-param>
        <param-name>jcifs.smb.client.username</param-name>
        <param-value>test</param-value>
    </init-param>
   <init-param>
        <param-name>jcifs.util.loglevel</param-name>
        <param-value>4</param-value>
    </init-param>
   <init-param>
        <param-name>jcifs.encoding</param-name>
        <param-value>Cp1252</param-value>
    </init-param>


The error "account currently disabled" occur but my account and the 
"test" account are both enable...

Errors are  :

java.net.NoRouteToHostException: No route to host: connect
[...]
NameQueryRequest[nameTrnId=1,isResponse=false,opCode=QUERY,isAuthAnswer=false,isTruncated=false,isRecurAvailable=false,isRecurDesired=true,isBroadcast=false,resultCode=0,questionCount=1,answerCount=0,authorityCount=0,additionalCount=0,questionName=ILEX<1C>,questionType=0x0020,questionClass=IN,recordName=null,recordType=0x0000,recordClass=0x0000,ttl=0,rDataLength=0]
00000: 00 01 01 00 00 01 00 00 00 00 00 00 20 45 4A 45  |............ EJE|
00010: 4D 45 46 46 49 43 41 43 41 43 41 43 41 43 41 43  |MEFFICACACACACAC|
00020: 41 43 41 43 41 43 41 43 41 43 41 42 4D 00 00 20  |ACACACACACABM.. |
00030: 00 01                                            |..              |

NetBIOS: new data read from socket
NameQueryResponse[nameTrnId=1,isResponse=true,opCode=QUERY,isAuthAnswer=true,isTruncated=false,isRecurAvailable=true,isRecurDesired=true,isBroadcast=false,resultCode=0,questionCount=0,answerCount=1,authorityCount=0,additionalCount=0,questionName=null,questionType=0x0000,questionClass=IN,recordName=ILEX<1C>,recordType=0x0020,recordClass=IN,ttl=0,rDataLength=24,addrEntry=[Ljcifs.netbios.NbtAddress;@6963d0]
00000: 00 01 85 80 00 00 00 01 00 00 00 00 20 45 4A 45  |............ EJE|
00010: 4D 45 46 46 49 43 41 43 41 43 41 43 41 43 41 43  |MEFFICACACACACAC|
00020: 41 43 41 43 41 43 41 43 41 43 41 42 4D 00 00 20  |ACACACACACABM.. |
00030: 00 01 00 00 00 00 00 18 80 00 C0 A8 0A 48 80 00  |..........ˬ.H..|
00040: A9 FE 0A 93 80 00 C0 A8 0A 46 80 00 C0 A8 0A DE  |©þ....À¨.F..À¨.Þ|

SmbComNegotiate[command=SMB_COM_NEGOTIATE,received=false,errorCode=0,flags=0x0018,flags2=0xC003,signSeq=0,tid=0,pid=1563,uid=0,mid=1,wordCount=0,byteCount=12,wordCount=0,dialects=NT 
LM 0.12]
New data read: Transport1[ILEX<1C>/192.168.10.72:0]
00000: FF 53 4D 42 72 00 00 00 00 98 03 C0 00 00 00 00  |ÿSMBr......À....|
00010: 00 00 00 00 00 00 00 00 00 00 1B 06 00 00 01 00  |................|

SmbComNegotiateResponse[command=SMB_COM_NEGOTIATE,received=false,errorCode=0,flags=0x0098,flags2=0xC003,signSeq=0,tid=0,pid=1563,uid=0,mid=1,wordCount=17,byteCount=32,wordCount=17,dialectIndex=0,securityMode=0xF,security=user,encryptedPasswords=true,maxMpxCount=50,maxNumberVcs=1,maxBufferSize=16644,maxRawSize=65536,sessionKey=0x00000000,capabilities=0x0001F3FD,serverTime=Wed 
Oct 08 14:20:33 CEST 
2008,serverTimeZone=65416,encryptionKeyLength=8,byteCount=32,encryptionKey=0x6BE5DDC39BE5F664,oemDomainName=ILEX]
treeConnect: unc=\\ILEX\IPC$,service=?????
sessionSetup: accountName=GUEST,primaryDomain=?
SmbComSessionSetupAndX[command=SMB_COM_SESSION_SETUP_ANDX,received=false,errorCode=0,flags=0x0018,flags2=0xC007,signSeq=0,tid=0,pid=1563,uid=0,mid=2,wordCount=13,byteCount=55,andxCommand=0x75,andxOffset=116,snd_buf_size=16644,maxMpxCount=10,VC_NUMBER=1,sessionKey=0,passwordLength=0,unicodePasswordLength=0,capabilities=4180,accountName=GUEST,primaryDomain=?,NATIVE_OS=Windows 
2003,NATIVE_LANMAN=jCIFS]
SmbComTreeConnectAndX[command=SMB_COM_TREE_CONNECT_ANDX,received=false,errorCode=0,flags=0x0018,flags2=0x0000,signSeq=0,tid=0,pid=1563,uid=0,mid=0,wordCount=4,byteCount=31,andxCommand=0xFF,andxOffset=0,disconnectTid=false,passwordLength=1,password=,path=\\ILEX\IPC$,service=?????]
New data read: Transport1[ILEX<1C>/192.168.10.72:0]
00000: FF 53 4D 42 73 72 00 00 C0 98 07 C0 00 00 38 2B  |ÿSMBsr..À..À..8+|
00010: 67 7D 1F 66 CE C6 00 00 00 00 1B 06 00 00 02 00  |g}.fÎÆ..........|

SmbComSessionSetupAndXResponse[command=SMB_COM_SESSION_SETUP_ANDX,received=false,errorCode=Logon 
failure: account currently 
disabled.,flags=0x0098,flags2=0xC007,signSeq=1,tid=0,pid=1563,uid=0,mid=2,wordCount=0,byteCount=0,andxCommand=0xFF,andxOffset=0,isLoggedInAsGuest=false,nativeOs=,nativeLanMan=,primaryDomain=]
Failed validate DC: ILEX<1C>/192.168.10.72
jcifs.smb.SmbAuthException: Logon failure: account currently disabled.
    at jcifs.smb.SmbTransport.checkStatus(SmbTransport.java:515)
    at jcifs.smb.SmbTransport.send(SmbTransport.java:629)
    at jcifs.smb.SmbSession.sessionSetup(SmbSession.java:288)
    at jcifs.smb.SmbSession.send(SmbSession.java:233)
    at jcifs.smb.SmbTree.treeConnect(SmbTree.java:154)
    at jcifs.smb.SmbSession.interrogate(SmbSession.java:82)
    at jcifs.smb.SmbSession.getChallengeForDomain(SmbSession.java:114)
    at jcifs.http.NtlmHttpFilter.negotiate(NtlmHttpFilter.java:150)
    at jcifs.http.NtlmHttpFilter.doFilter(NtlmHttpFilter.java:114)
    at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:215)
    at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:188)
    at 
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:213)
    at 
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:174)
    at 
org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:433)
    at 
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
    at 
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:117)
    at 
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:108)
    at 
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:174)
    at 
org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:874)
    at 
org.apache.coyote.http11.Http11BaseProtocol$Http11ConnectionHandler.processConnection(Http11BaseProtocol.java:665)
    at 
org.apache.tomcat.util.net.PoolTcpEndpoint.processSocket(PoolTcpEndpoint.java:528)
    at 
org.apache.tomcat.util.net.LeaderFollowerWorkerThread.runIt(LeaderFollowerWorkerThread.java:81)
    at 
org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:689)
    at java.lang.Thread.run(Unknown Source)
Failed validate DC: ILEX<1C>/169.254.10.147
jcifs.smb.SmbException: Connection timeout
jcifs.util.transport.TransportException: Connection timeout
    at jcifs.util.transport.Transport.connect(Transport.java:178)
    at jcifs.smb.SmbTransport.connect(SmbTransport.java:293)
    at jcifs.smb.SmbTree.treeConnect(SmbTree.java:139)
    at jcifs.smb.SmbSession.interrogate(SmbSession.java:82)
    at jcifs.smb.SmbSession.getChallengeForDomain(SmbSession.java:114)
    at jcifs.http.NtlmHttpFilter.negotiate(NtlmHttpFilter.java:150)
    at jcifs.http.NtlmHttpFilter.doFilter(NtlmHttpFilter.java:114)
    at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:215)
    at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:188)
    at 
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:213)
    at 
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:174)
    at 
org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:433)
    at 
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
    at 
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:117)
    at 
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:108)
    at 
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:174)
    at 
org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:874)
    at 
org.apache.coyote.http11.Http11BaseProtocol$Http11ConnectionHandler.processConnection(Http11BaseProtocol.java:665)
    at 
org.apache.tomcat.util.net.PoolTcpEndpoint.processSocket(PoolTcpEndpoint.java:528)
    at 
org.apache.tomcat.util.net.LeaderFollowerWorkerThread.runIt(LeaderFollowerWorkerThread.java:81)
    at 
org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:689)
    at java.lang.Thread.run(Unknown Source)


Could you please help me?

Thanks,
Berengere.





More information about the jcifs mailing list