[jcifs] Occasionally NTLM Filter fails...Please Help.

[shivsn]

Hi Andrew,

With below parameter I receive occasional credential pop windows (even after
entering correct credentials it does not authenticate and NO the the account
is not locked out but after 3 successive failures it locks out as per
policy) and errors in logs (just to let you know these pop ups are coming up
only after a recent DC refresh carried out on the site) - 

jcifs.netbios.wins
jcifs.smb.client.domain
jcifs.util.loglevel

(Note - I know that I should also use jcifs.smb.client.username and
jcifs.smb.client.password but without these parameters no issues are
observed in other sites we support. We have plans to use these param as well
in future but this param not being used is not the root cause here)

With below parameters I do not see the errors - 

jcifs.smb.client.domain
jcifs.http.domainController
jcifs.util.loglevel

OR

jcifs.smb.client.domain
jcifs.http.domainController
jcifs.util.loglevel

Below are the errors thrown in logs after successive successful
authentication - 

SmbComSessionSetupAndXResponse[command=SMB_COM_SESSION_SETUP_ANDX,received=false,errorCode=Logon
failure: unknown user name or bad
password.,flags=0x0098,flags2=0xC003,signSeq=0,tid=0,pid=1152,uid=0,mid=17,wordCount=0,byteCount=0,andxCommand=0xFF,andxOffset=0,isLoggedInAsGuest=false,nativeOs=,nativeLanMan=,primaryDomain=]
NtlmHttpFilter: <Domain Name>\d6ane0: 0xC000006D:
jcifs.smb.SmbAuthException: Logon failure: unknown user name or bad
password.
treeConnect: unc=\\<Domain Name>\IPC$,service=?????
sessionSetup: accountName=d6ane0,primaryDomain=<Domain Name>

Please help.

Thanks,
Shiv.


Andrew Murphy-5 wrote:
> 
> These are the parameters that we use:
> 
> jcifs.smb.client.domain
> jcifs.http.domainController
> jcifs.smb.client.username
> jcifs.smb.client.password
> jcifs.util.loglevel
> jcifs.smb.lmCompatibility
> jcifs.smb.client.useExtendedSecurity
> 
> We have found that these will only support a single Windows Domain. 
> Perhaps you should reply with the settings, type of environment and what
> errors you may be getting?
> 
> Andrew Murphy
> Lead Developer, Technical Services
> 
> 
> -----Original Message-----
> From: jcifs-bounces+amurphy=halogensoftware.com at lists.samba.org
> [mailto:jcifs-bounces+amurphy=halogensoftware.com at lists.samba.org] On
> Behalf Of shivsn
> Sent: Monday, May 18, 2009 9:30 AM
> To: jcifs at lists.samba.org
> Subject: RE: [jcifs] Occasionally NTLM Filter fails...Please Help.
> 
> 
> Hi Andrew,
> 
> I tried with jcifs version 1.3.8 and the 2 parameters you suggseted. But
> it
> does not help. I am unable to get hold of jar file for jcifs version
> 1.3.3.
> Can you please upload the same here.
> 
> Also, can you please confirm all the jcifs parameters you are using in
> your
> case. 
> 
> Thanks,
> Shiv.
> 
> 
> shivsn wrote:
>> 
>> Many thanks Andrew. I will try with 1.3.8 version which seems to be the
>> latest one now and the the 2 parameters you have mentioned below and
>> feedback. Thanks again.
>> 
>> Shiv.
>> 
>> 
>> Andrew Murphy-5 wrote:
>>> 
>>> We found that this problem was solved by upgrading the version of the
>>> JCIFS jar to the latest (at the time) of 1.3.3.  But when we did that,
>>> we
>>> had to implement the two extra parameters in the initialization:
>>> jcifs.smb.lmCompatibility=0 and
>>> jcifs.smb.client.useExtendedSecurity=false.
>>> 
>>> Hope that is helpful for you.
>>> 
>>> Andrew Murphy
>>> Lead Developer, Technical Services
>>> 
>>> 
>>> -----Original Message-----
>>> From: jcifs-bounces+amurphy=halogensoftware.com at lists.samba.org
>>> [mailto:jcifs-bounces+amurphy=halogensoftware.com at lists.samba.org] On
>>> Behalf Of shivsn
>>> Sent: Thursday, May 14, 2009 10:42 AM
>>> To: jcifs at lists.samba.org
>>> Subject: Re: [jcifs] Occasionally NTLM Filter fails...Please Help.
>>> 
>>> 
>>> Hello Andrew,
>>> 
>>> Did you find a solution to this issue. We are facing exactly the same
>>> problem as yours. We are on jcifs version 1.2.17. Please help.
>>> 
>>> Thanks,
>>> Shiv.
>>> 
>>> 
>>> 
>>> 
>>> Andrew Murphy-5 wrote:
>>>> 
>>>> Ti Lian Hwang <lian_hwang.ti <at> fairprice.com.sg> writes:
>>>> 
>>>>> 
>>>>> 
>>>>> Please refer 
>>>>> to
>>>>> 
>>>>>  
>>>>> http://lists.samba.org/archive/jcifs/2008-January/007602.html
>>>>> 
>>>>>  
>>>>> which has worked for me ever 
>>>>> since.
>>>>> 
>>>> 
>>>> 
>>>> Is there no other way to accomplish this without having to modify the
>>>> JCIFS 
>>>> source classes?  Its convenient to stay on the released versions as
>>>> opposed to 
>>>> having to maintain a separate source.
>>>> 
>>>> I was more wondering about a configuration change that we might do on
>>>> the 
>>>> Domain Controller server so that it doesn't worry about the unicode
>>>> password 
>>>> not being present.  Or some jcifs property that would ensure that the
>>>> unicode 
>>>> password is always included.
>>>> 
>>>> I forgot to mention that we are using the 1.2.13 version of the jcifs
>>>> jar
>>>> file.
>>>> 
>>>> Thanks again. 
>>>> 
>>>> Andrew
>>>> 
>>>> 
>>>> 
>>> 
>>> -- 
>>> View this message in context:
>>> http://www.nabble.com/Occasionally-NTLM-Filter-fails...Please-Help.-tp17262705p23542067.html
>>> Sent from the Samba - jcifs mailing list archive at Nabble.com.
>>> 
>>> 
>>> 
>> 
>> 
> 
> -- 
> View this message in context:
> http://www.nabble.com/Occasionally-NTLM-Filter-fails...Please-Help.-tp17262705p23595882.html
> Sent from the Samba - jcifs mailing list archive at Nabble.com.
> 
> 
> 

-- 
View this message in context: http://www.nabble.com/Occasionally-NTLM-Filter-fails...Please-Help.-tp17262705p23633376.html
Sent from the Samba - jcifs mailing list archive at Nabble.com.