[jcifs] Occasionally NTLM Filter fails...Please Help.

shivsn shivsn2008 at yahoo.com
Wed May 20 21:10:05 GMT 2009


Thanks. no problem. I will try to take a look at the code as well to get some
understanding.

However, has anybody else in this forum tried out working only with
jcifs.smb.client.domain property and see any issues/risks please?

Thanks,
Shiv.



Michael B Allen wrote:
> 
> Again, it's literally been like 7 years since I've even looked at the
> HTTP Filter code so I'm really not qualified to answer questions about
> it. I know how it interacts with the CIFS code and it's security
> limitations but otherwise I try to ignore all JCIFS filter questions.
> 
> Good luck,
> Mike
> 
> On Wed, May 20, 2009 at 6:14 AM, shivsn <shivsn2008 at yahoo.com> wrote:
>>
>> Thanks for the repsonse. In that case is it advisable that I use ONLY
>> jcifs.smb.client.domain property (i.e. (i.e. I use neither
>> jcifs.smb.client.domainController or jcifs.netbios.wins). Which domain
>> controller will this set up use to authenticate against and are their any
>> risk with this?
>>
>> This URL
>> (http://eckhart.stderr.org/doc/libjcifs-java-doc/ntlmhttpauth.html)
>> says "Either a jcifs.smb.client.domain or
>> jcifs.smb.client.domainController
>> property is required". 90% of my users belong to one specific domain
>> while
>> others are third party users and need not require SSO.
>>
>> Thanks,
>> Shiv.
>>
>>
>>
>>
>> Michael B Allen wrote:
>>>
>>> On Tue, May 19, 2009 at 11:42 AM, shivsn <shivsn2008 at yahoo.com> wrote:
>>>>
>>>> Thanks Mike.
>>>>
>>>> I have another small question if you could please answer.
>>>>
>>>> Currently we are using jcifs.netbios.wins as jcifs param and seeing
>>>> this
>>>> issue. We noticed that when we use the DC (not WINS) the problem goes
>>>> away.
>>>> We tried jcifs.http.domainController and it works. Not sure why??
>>>
>>> Honestly I don't even remember how to use the filter. I haven't tried
>>> it in many many years.
>>>
>>>> My quesiton is regarding jcifs.http.domainController - can you please
>>>> let
>>>> me
>>>> know if I can provide 2 (or more) DC seperated by commas i.e. if one of
>>>> the
>>>> DC is down will it take the second one (similar to jcifs.netbios.wins
>>>> parameter where we have provision to provide more than one WINS)?
>>>
>>> No but there is a patch for that in the patches directory. Not sure if
>>> it actually works though.
>>>
>>>> If not,
>>>> then what happens if the DC entered for this jcifs parameter is down?
>>>
>>> You'll get a big exception and it will fail miserably.
>>>
>>> Mike
>>>
>>> --
>>> Michael B Allen
>>> Java Active Directory Integration
>>> http://www.ioplex.com/
>>>
>>>
>>
>> --
>> View this message in context:
>> http://www.nabble.com/Occasionally-NTLM-Filter-fails...Please-Help.-tp17262705p23632650.html
>> Sent from the Samba - jcifs mailing list archive at Nabble.com.
>>
>>
> 
> 
> 
> -- 
> Michael B Allen
> Java Active Directory Integration
> http://www.ioplex.com/
> 
> 

-- 
View this message in context: http://www.nabble.com/Occasionally-NTLM-Filter-fails...Please-Help.-tp17262705p23643589.html
Sent from the Samba - jcifs mailing list archive at Nabble.com.



More information about the jcifs mailing list