[jcifs] Occasionally NTLM Filter fails...Please Help.

Michael B Allen ioplex at gmail.com
Wed May 20 16:11:48 GMT 2009


Again, it's literally been like 7 years since I've even looked at the
HTTP Filter code so I'm really not qualified to answer questions about
it. I know how it interacts with the CIFS code and it's security
limitations but otherwise I try to ignore all JCIFS filter questions.

Good luck,
Mike

On Wed, May 20, 2009 at 6:14 AM, shivsn <shivsn2008 at yahoo.com> wrote:
>
> Thanks for the repsonse. In that case is it advisable that I use ONLY
> jcifs.smb.client.domain property (i.e. (i.e. I use neither
> jcifs.smb.client.domainController or jcifs.netbios.wins). Which domain
> controller will this set up use to authenticate against and are their any
> risk with this?
>
> This URL (http://eckhart.stderr.org/doc/libjcifs-java-doc/ntlmhttpauth.html)
> says "Either a jcifs.smb.client.domain or jcifs.smb.client.domainController
> property is required". 90% of my users belong to one specific domain while
> others are third party users and need not require SSO.
>
> Thanks,
> Shiv.
>
>
>
>
> Michael B Allen wrote:
>>
>> On Tue, May 19, 2009 at 11:42 AM, shivsn <shivsn2008 at yahoo.com> wrote:
>>>
>>> Thanks Mike.
>>>
>>> I have another small question if you could please answer.
>>>
>>> Currently we are using jcifs.netbios.wins as jcifs param and seeing this
>>> issue. We noticed that when we use the DC (not WINS) the problem goes
>>> away.
>>> We tried jcifs.http.domainController and it works. Not sure why??
>>
>> Honestly I don't even remember how to use the filter. I haven't tried
>> it in many many years.
>>
>>> My quesiton is regarding jcifs.http.domainController - can you please let
>>> me
>>> know if I can provide 2 (or more) DC seperated by commas i.e. if one of
>>> the
>>> DC is down will it take the second one (similar to jcifs.netbios.wins
>>> parameter where we have provision to provide more than one WINS)?
>>
>> No but there is a patch for that in the patches directory. Not sure if
>> it actually works though.
>>
>>> If not,
>>> then what happens if the DC entered for this jcifs parameter is down?
>>
>> You'll get a big exception and it will fail miserably.
>>
>> Mike
>>
>> --
>> Michael B Allen
>> Java Active Directory Integration
>> http://www.ioplex.com/
>>
>>
>
> --
> View this message in context: http://www.nabble.com/Occasionally-NTLM-Filter-fails...Please-Help.-tp17262705p23632650.html
> Sent from the Samba - jcifs mailing list archive at Nabble.com.
>
>



-- 
Michael B Allen
Java Active Directory Integration
http://www.ioplex.com/


More information about the jcifs mailing list