[jcifs] JCIFS authentication: errorCode=The parameter is incorrect.
mbeedell
mbeedell at cryoserver.com
Thu Sep 16 10:22:24 MDT 2010
I am using jCifs HTTP authentication module. It has been working OK in the
target environment for some time. The jCIFS version was 1.2.1.
Due to various requirements, I upgraded the application, which now includes
jCIFS version 1.3.12.
Since then only SOME users are able to authenticate automatically.
We could move them on to the Jespa package – but I would ideally like to
know what had changed to cause the issue. From the customer point of view,
it looks like we are forcing them to use a new technology (Jespa) for SSO.
I have no debug level logging from the time before the upgrade (as it was
working just fine!).
But I show below the logging for updated but now only semi-working system.
Users connect from a Windows Server 2007 Enterprise Terminal Server user
instance with Internet Explorer 8. The web site has been specified as a
Trusted Site. Nothing has changed on the Terminal Servers or domain
controller.
A user on a Windows 2003 Server, interestingly, performs SSO without issue.
Any useful tips would be most welcome, thank you,
Merlin Beedell
#JCIFS PROPERTIES
#Thu Sep 16 12:59:08 BST 2010
sun.boot.library.path=/opt/java/jdk1.6.0_06/jre/lib/amd64
jcifs.smb.client.username=cryoserver
jcifs.smb.lmCompatibility=0
jcifs.netbios.cachePolicy=1200
java.runtime.version=1.6.0_06-b02
os.name=Linux
jcifs.smb.client.soTimeout=1800000
jcifs.util.loglevel=4
jcifs.http.domainController=192.168.1.10
jcifs.smb.client.domain=mvhomes
jcifs.smb.client.useExtendedSecurity=false
********************** the following is the WORKING connection
*****************************
SmbComNegotiate[command=SMB_COM_NEGOTIATE,received=false,errorCode=0,flags=0
x0018,flags2=0xC003,signSeq=0,tid=0,pid=6158,uid=0,mid=1,wordCount=0,byteCou
nt=12,wordCount=0,dialects=NT LM 0.12]
New data read: Transport1[0.0.0.0<00>/192.168.1.10:0]
00000: FF 53 4D 42 72 00 00 00 00 98 03 C0 00 00 00 00 |ÿSMBr......À....|
00010: 00 00 00 00 00 00 00 00 00 00 0E 18 00 00 01 00 |................|
SmbComNegotiateResponse[command=SMB_COM_NEGOTIATE,received=false,errorCode=0
,flags=0x0098,flags2=0xC003,signSeq=0,tid=0,pid=6158,uid=0,mid=1,wordCount=1
7,byteCount=38,wordCount=17,dialectIndex=0,securityMode=0xF,security=user,en
cryptedPasswords=true,maxMpxCount=50,maxNumberVcs=1,maxBufferSize=16644,maxR
awSize=65536,sessionKey=0x00000000,capabilities=0x0001F3FD,serverTime=Thu
Sep 16 12:59:28 BST
2010,serverTimeZone=65476,encryptionKeyLength=8,byteCount=38,oemDomainName=M
VHOMES]
NetBIOS: new data read from socket
NodeStatusRequest[nameTrnId=1,isResponse=false,opCode=QUERY,isAuthAnswer=fal
se,isTruncated=false,isRecurAvailable=false,isRecurDesired=false,isBroadcast
=false,resultCode=0,questionCount=1,answerCount=0,authorityCount=0,additiona
lCount=0,questionName=*<NULL>
<00>,questionType=NBSTAT,questionClass=IN,recordName=null,recordType=0x0000,
recordClass=0x0000,ttl=0,rDataLength=0]
00000: 00 01 00 00 00 01 00 00 00 00 00 00 20 43 4B 41 |............ CKA|
00010: 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 |AAAAAAAAAAAAAAAA|
00020: 41 41 41 41 41 41 41 41 41 41 41 41 41 00 00 21 |AAAAAAAAAAAAA..!|
00030: 00 01 |.. |
NodeStatusResponse[nameTrnId=1,isResponse=true,opCode=QUERY,isAuthAnswer=tru
e,isTruncated=false,isRecurAvailable=false,isRecurDesired=false,isBroadcast=
false,resultCode=0,questionCount=0,answerCount=1,authorityCount=0,additional
Count=0,questionName=null,questionType=0x0000,questionClass=IN,recordName=*<
NULL>
<00>,recordType=NBSTAT,recordClass=IN,ttl=0,rDataLength=137]
00000: 00 01 84 00 00 00 00 01 00 00 00 00 20 43 4B 41 |............ CKA|
00010: 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 |AAAAAAAAAAAAAAAA|
00020: 41 41 41 41 41 41 41 41 41 41 41 41 41 00 00 21 |AAAAAAAAAAAAA..!|
00030: 00 01 00 00 00 00 00 89 05 4D 56 48 44 43 31 20 |.........MVHDC1 |
00040: 20 20 20 20 20 20 20 20 00 04 00 4D 56 48 4F 4D | ...MVHOM|
00050: 45 53 20 20 20 20 20 20 20 20 00 84 00 4D 56 48 |ES ...MVH|
00060: 4F 4D 45 53 20 20 20 20 20 20 20 20 1C 84 00 4D |OMES ...M|
00070: 56 48 44 43 31 20 20 20 20 20 20 20 20 20 20 04 |VHDC1 .|
00080: 00 4D 56 48 4F 4D 45 53 20 20 20 20 20 20 20 20 |.MVHOMES |
00090: 1B 04 00 00 50 56 85 30 AE 00 00 00 00 00 00 00 |....PV.0®.......|
000A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
000B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
000C0: 00 |. |
NodeStatusRequest[nameTrnId=2,isResponse=false,opCode=QUERY,isAuthAnswer=fal
se,isTruncated=false,isRecurAvailable=false,isRecurDesired=false,isBroadcast
=false,resultCode=0,questionCount=1,answerCount=0,authorityCount=0,additiona
lCount=0,questionName=*<NULL>
<00>,questionType=NBSTAT,questionClass=IN,recordName=null,recordType=0x0000,
recordClass=0x0000,ttl=0,rDataLength=0]
00000: 00 02 00 00 00 01 00 00 00 00 00 00 20 43 4B 41 |............ CKA|
00010: 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 |AAAAAAAAAAAAAAAA|
00020: 41 41 41 41 41 41 41 41 41 41 41 41 41 00 00 21 |AAAAAAAAAAAAA..!|
00030: 00 01 |.. |
NetBIOS: new data read from socket
NodeStatusResponse[nameTrnId=2,isResponse=true,opCode=QUERY,isAuthAnswer=tru
e,isTruncated=false,isRecurAvailable=false,isRecurDesired=false,isBroadcast=
false,resultCode=0,questionCount=0,answerCount=1,authorityCount=0,additional
Count=0,questionName=null,questionType=0x0000,questionClass=IN,recordName=*<
NULL>..
<00>,recordType=NBSTAT,recordClass=IN,ttl=0,rDataLength=137]
00000: 00 02 84 00 00 00 00 01 00 00 00 00 20 43 4B 41 |............ CKA|
00010: 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 |AAAAAAAAAAAAAAAA|
00020: 41 41 41 41 41 41 41 41 41 41 41 41 41 00 00 21 |AAAAAAAAAAAAA..!|
00030: 00 01 00 00 00 00 00 89 05 4D 56 48 44 43 31 20 |.........MVHDC1 |
00040: 20 20 20 20 20 20 20 20 00 04 00 4D 56 48 4F 4D | ...MVHOM|
00050: 45 53 20 20 20 20 20 20 20 20 00 84 00 4D 56 48 |ES ...MVH|
00060: 4F 4D 45 53 20 20 20 20 20 20 20 20 1C 84 00 4D |OMES ...M|
00070: 56 48 44 43 31 20 20 20 20 20 20 20 20 20 20 04 |VHDC1 .|
00080: 00 4D 56 48 4F 4D 45 53 20 20 20 20 20 20 20 20 |.MVHOMES |
00090: 1B 04 00 00 50 56 85 30 AE 00 00 00 00 00 00 00 |....PV.0®.......|
000A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
000B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
000C0: 00 |. |
treeConnect: unc=\\MVHDC1\IPC$,service=?????
sessionSetup: accountName=cntadmin,primaryDomain=MVHOMES
treeConnect: unc=\\MVHDC1\IPC$,service=?????
sessionSetup: accountName=cryoserver,primaryDomain=mvhomes
SmbComSessionSetupAndX[command=SMB_COM_SESSION_SETUP_ANDX,received=false,err
orCode=0,flags=0x0018,flags2=0xC007,signSeq=0,tid=0,pid=6158,uid=0,mid=2,wor
dCount=13,byteCount=111,andxCommand=0x75,andxOffset=172,snd_buf_size=16644,m
axMpxCount=10,VC_NUMBER=1,sessionKey=0,lmHash.length=24,ntHash.length=24,cap
abilities=4180,accountName=cryoserver,primaryDomain=MVHOMES,NATIVE_OS=Linux,
NATIVE_LANMAN=jCIFS]
SmbComTreeConnectAndX[command=SMB_COM_TREE_CONNECT_ANDX,received=false,error
Code=0,flags=0x0018,flags2=0x0000,signSeq=0,tid=0,pid=6158,uid=0,mid=0,wordC
ount=4,byteCount=35,andxCommand=0xFF,andxOffset=0,disconnectTid=false,passwo
rdLength=1,password=,path=\\MVHDC1\IPC$,service=?????]
New data read: Transport1[MVHDC1<00>/192.168.1.10:0]
00000: FF 53 4D 42 73 00 00 00 00 98 07 C0 00 00 D2 A7 |ÿSMBs......À..Ò§|
00010: BD 5E 17 B8 97 F4 00 00 04 30 0E 18 02 C8 02 00 |½^.¸.ô...0...È..|
SmbComSessionSetupAndXResponse[command=SMB_COM_SESSION_SETUP_ANDX,received=f
alse,errorCode=0,flags=0x0098,flags2=0xC007,signSeq=1,tid=12292,pid=6158,uid
=51202,mid=2,wordCount=3,byteCount=196,andxCommand=0x75,andxOffset=237,isLog
gedInAsGuest=false,nativeOs=Windows Server (R) 2008 Standard 6001 Service
Pack 1,nativeLanMan=Windows Server (R) 2008 Standard
6.0,primaryDomain=MVHOMES]
SmbComSessionSetupAndX[command=SMB_COM_SESSION_SETUP_ANDX,received=false,err
orCode=0,flags=0x0018,flags2=0xC007,signSeq=2,tid=0,pid=6158,uid=0,mid=3,wor
dCount=13,byteCount=107,andxCommand=0x75,andxOffset=168,snd_buf_size=16644,m
axMpxCount=10,VC_NUMBER=1,sessionKey=0,lmHash.length=24,ntHash.length=24,cap
abilities=4180,accountName=cntadmin,primaryDomain=MVHOMES,NATIVE_OS=Linux,NA
TIVE_LANMAN=jCIFS]
SmbComTreeConnectAndX[command=SMB_COM_TREE_CONNECT_ANDX,received=false,error
Code=0,flags=0x0018,flags2=0x0000,signSeq=0,tid=0,pid=6158,uid=0,mid=0,wordC
ount=4,byteCount=35,andxCommand=0xFF,andxOffset=0,disconnectTid=false,passwo
rdLength=1,password=,path=\\MVHDC1\IPC$,service=?????]
New data read: Transport1[MVHDC1<00>/192.168.1.10:0]
00000: FF 53 4D 42 73 00 00 00 00 98 07 C0 00 00 BB 5B |ÿSMBs......À..»[|
00010: 9B E9 33 46 FB 43 00 00 03 28 0E 18 03 C8 03 00 |.é3FûC...(...È..|
..etc..
NtlmHttpFilter: MVHOMES\cntadmin successfully authenticated against
MVHDC1<00>/192.168.1.10
************************ BUT *** Here are is an example of a client who
fails to connect **************
treeConnect: unc=\\MVHDC1\IPC$,service=?????
sessionSetup: accountName=Chris.Watts,primaryDomain=MVHOMES
SmbComSessionSetupAndX[command=SMB_COM_SESSION_SETUP_ANDX,received=false,err
orCode=0,flags=0x0018,flags2=0xC007,signSeq=6,tid=0,pid=6158,uid=0,mid=5,wor
dCount=13,byteCount=333,andxCommand=0x75,andxOffset=394,snd_buf_size=16644,m
axMpxCount=10,VC_NUMBER=1,sessionKey=0,lmHash.length=24,ntHash.length=244,ca
pabilities=4180,accountName=Chris.Watts,primaryDomain=MVHOMES,NATIVE_OS=Linu
x,NATIVE_LANMAN=jCIFS]
SmbComTreeConnectAndX[command=SMB_COM_TREE_CONNECT_ANDX,received=false,error
Code=0,flags=0x0018,flags2=0x0000,signSeq=0,tid=0,pid=6158,uid=0,mid=0,wordC
ount=4,byteCount=35,andxCommand=0xFF,andxOffset=0,disconnectTid=false,passwo
rdLength=1,password=,path=\\MVHDC1\IPC$,service=?????]
New data read: Transport1[MVHDC1<00>/192.168.1.10:0]
00000: FF 53 4D 42 73 0D 00 00 C0 98 07 C0 00 00 30 63 |ÿSMBs...À..À..0c|
00010: C8 DE D1 45 F6 C5 00 00 00 00 0E 18 00 00 05 00 |ÈÞÑEöÅ..........|
SmbComSessionSetupAndXResponse[command=SMB_COM_SESSION_SETUP_ANDX,received=f
alse,errorCode=The parameter is
incorrect.,flags=0x0098,flags2=0xC007,signSeq=7,tid=0,pid=6158,uid=0,mid=5,w
ordCount=0,byteCount=0,andxCommand=0xFF,andxOffset=0,isLoggedInAsGuest=false
,nativeOs=,nativeLanMan=,primaryDomain=]
NodeStatusRequest[nameTrnId=9,isResponse=false,opCode=QUERY,isAuthAnswer=fal
se,isTruncated=false,isRecurAvailable=false,isRecurDesired=false,isBroadcast
=false,resultCode=0,questionCount=1,answerCount=0,authorityCount=0,additiona
lCount=0,questionName=*[NULL][NULL][NULL][NULL][NULL][NULL][NULL][NULL][NULL
][NULL][NULL][NULL][NULL][NULL]<00>,questionType=NBSTAT,questionClass=IN,rec
ordName=null,recordType=0x0000,recordClass=0x0000,ttl=0,rDataLength=0]
00000: 00 09 00 00 00 01 00 00 00 00 00 00 20 43 4B 41 |............ CKA|
00010: 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 |AAAAAAAAAAAAAAAA|
00020: 41 41 41 41 41 41 41 41 41 41 41 41 41 00 00 21 |AAAAAAAAAAAAA..!|
00030: 00 01 |.. |
NetBIOS: new data read from socket
NodeStatusResponse[nameTrnId=9,isResponse=true,opCode=QUERY,isAuthAnswer=tru
e,isTruncated=false,isRecurAvailable=false,isRecurDesired=false,isBroadcast=
false,resultCode=0,questionCount=0,answerCount=1,authorityCount=0,additional
Count=0,questionName=null,questionType=0x0000,questionClass=IN,recordName=*[
NULL][NULL][NULL][NULL][NULL][NULL][NULL][NULL][NULL][NULL][NULL][NULL][NULL
][NULL]<00>,recordType=NBSTAT,recordClass=IN,ttl=0,rDataLength=137]
00000: 00 09 84 00 00 00 00 01 00 00 00 00 20 43 4B 41 |............ CKA|
00010: 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 |AAAAAAAAAAAAAAAA|
00020: 41 41 41 41 41 41 41 41 41 41 41 41 41 00 00 21 |AAAAAAAAAAAAA..!|
00030: 00 01 00 00 00 00 00 89 05 4D 56 48 44 43 31 20 |.........MVHDC1 |
00040: 20 20 20 20 20 20 20 20 00 04 00 4D 56 48 4F 4D | ...MVHOM|
00050: 45 53 20 20 20 20 20 20 20 20 00 84 00 4D 56 48 |ES ...MVH|
00060: 4F 4D 45 53 20 20 20 20 20 20 20 20 1C 84 00 4D |OMES ...M|
00070: 56 48 44 43 31 20 20 20 20 20 20 20 20 20 20 04 |VHDC1 .|
00080: 00 4D 56 48 4F 4D 45 53 20 20 20 20 20 20 20 20 |.MVHOMES |
00090: 1B 04 00 00 50 56 85 30 AE 00 00 00 00 00 00 00 |....PV.0®.......|
000A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
000B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
000C0: 00 |. |
NodeStatusRequest[nameTrnId=10,isResponse=false,opCode=QUERY,isAuthAnswer=fa
lse,isTruncated=false,isRecurAvailable=false,isRecurDesired=false,isBroadcas
t=false,resultCode=0,questionCount=1,answerCount=0,authorityCount=0,addition
alCount=0,questionName=*[NULL][NULL][NULL][NULL][NULL][NULL][NULL][NULL][NUL
L][NULL][NULL][NULL][NULL][NULL]<00>,questionType=NBSTAT,questionClass=IN,re
cordName=null,recordType=0x0000,recordClass=0x0000,ttl=0,rDataLength=0]
00000: 00 0A 00 00 00 01 00 00 00 00 00 00 20 43 4B 41 |............ CKA|
00010: 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 |AAAAAAAAAAAAAAAA|
00020: 41 41 41 41 41 41 41 41 41 41 41 41 41 00 00 21 |AAAAAAAAAAAAA..!|
00030: 00 01 |.. |
NetBIOS: new data read from socket
NodeStatusResponse[nameTrnId=10,isResponse=true,opCode=QUERY,isAuthAnswer=tr
ue,isTruncated=false,isRecurAvailable=false,isRecurDesired=false,isBroadcast
=false,resultCode=0,questionCount=0,answerCount=1,authorityCount=0,additiona
lCount=0,questionName=null,questionType=0x0000,questionClass=IN,recordName=*
[NULL][NULL][NULL][NULL][NULL][NULL][NULL][NULL][NULL][NULL][NULL][NULL][NUL
L][NULL]<00>,recordType=NBSTAT,recordClass=IN,ttl=0,rDataLength=137]
00000: 00 0A 84 00 00 00 00 01 00 00 00 00 20 43 4B 41 |............ CKA|
00010: 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 |AAAAAAAAAAAAAAAA|
00020: 41 41 41 41 41 41 41 41 41 41 41 41 41 00 00 21 |AAAAAAAAAAAAA..!|
00030: 00 01 00 00 00 00 00 89 05 4D 56 48 44 43 31 20 |.........MVHDC1 |
00040: 20 20 20 20 20 20 20 20 00 04 00 4D 56 48 4F 4D | ...MVHOM|
00050: 45 53 20 20 20 20 20 20 20 20 00 84 00 4D 56 48 |ES ...MVH|
00060: 4F 4D 45 53 20 20 20 20 20 20 20 20 1C 84 00 4D |OMES ...M|
00070: 56 48 44 43 31 20 20 20 20 20 20 20 20 20 20 04 |VHDC1 .|
00080: 00 4D 56 48 4F 4D 45 53 20 20 20 20 20 20 20 20 |.MVHOMES |
00090: 1B 04 00 00 50 56 85 30 AE 00 00 00 00 00 00 00 |....PV.0®.......|
000A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
000B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
000C0: 00 |. |
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.samba.org/pipermail/jcifs/attachments/20100916/2b213203/attachment-0001.html>
More information about the jCIFS
mailing list