[jcifs] Authentication denied issue

[Barsky, Geora (Contractor)]

Hello, 

Here are some details regarding our problem:

 

Our platform : Java 1.6, Tomcat 6, JCIFS version 1.3.15. We invoke JCIFS
through HttpFilter defined in web.xml

JCIFS configuration:

<filter>

    <filter-name>NtlmHttpFilter</filter-name>

    <filter-class>jcifs.http.NtlmHttpFilter</filter-class>

    <init-param>

        <param-name>jcifs.http.domainController</param-name>

        <param-value><DOMAIN_CONTROLLER></param-value>

    </init-param>

    <init-param>

        <param-name>jcifs.resolveOrder</param-name>

        <param-value>DNS</param-value>

    </init-param>

    <init-param>

        <param-name>jcifs.http.loadBalance</param-name>

        <param-value>false</param-value>

    </init-param>

    <init-param>

        <param-name>jcifs.smb.client.domain</param-name>

        <param-value><DOMAIN></param-value>

    </init-param>

    <init-param>

        <param-name>jcifs.smb.client.username</param-name>

        <param-value><JCIFS_PRE_AUTHENTICATION_USER></param-value>

    </init-param>

    <init-param>

        <param-name>jcifs.smb.client.password</param-name>

        <param-value><JCIFS_PRE_AUTHENTICATION_PWD></param-value>

    </init-param>

    <init-param>

        <param-name>jcifs.util.loglevel</param-name>

        <param-value>3</param-value>

    </init-param>

</filter>

 

 

Using version 1.2.17, we sporadically experienced the problem during the
authentication
for some users, while other users are authenticated successfully at the
same time. The error message is :  "jcifs.smb.SmbAuthException: Access
is denied".
After upgrade to 1.3.15 we get now another  exception:

"jcifs.smb.SmbException: NTLMv2 requires extended security
(jcifs.smb.client.useExtendedSecurity must be true if
jcifs.smb.lmCompatibility >= 3)", 

regardless that we don't override any of these two settings and by
default they should be :

jcifs.smb.lmCompatibility = 0 

jcifs.smb.client.useExtenededSecurity = false

 

Please advise what might be a reason for this exception?

 

We also suspect that possible reason for our authentication failures
might be JCIFS caching mechanism.

We see that there are three relevant parameters:

jcifs.smb.client.soTimeout

jcifs.smb.client.responseTimeout

jcifs.netbios.cachePolicy

 

Please advise whether caching might be one of causes to authentication
failures and what are the recommended values for these settings.

 

Thanks

Geora

 

 
 
 

 

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.samba.org/pipermail/jcifs/attachments/20110201/e2278b9e/attachment.html>