[jcifs] NetApp access denied

Russell_Balast at DellTeam.com Russell_Balast at DellTeam.com
Thu Dec 17 17:23:28 UTC 2015


Dell - Internal Use - Confidential

Using NetApp Release 8.3RC1



Running the jcifs 1.3.18 example code SmbShell to browse a NetApp cifs share, I receive 'Access denied'.



The cifs share has packet signing enabled.



I have debugged this to line ~150 of NtlmContext.java in jcifs source, which is:



ntlmsspFlags &= msg2.getFlags();



If I comment out this line, then browsing works.   That is because:



ntlmsspFlags=0x60088014



and,



ms2.getFlags() returns: 0x60088004



So the bitwise & turns off the 0x00000010 flag which is (NtlmFlags.java)



public static final int NTLMSSP_NEGOTIATE_SIGN = 0x00000010;



So, for some reason the NetApp seems to be disabling packet signing during the negotiation.



This may be a bug in NetApp.   On the other hand, perhaps it is a

configuration problem or a misunderstanding of the protocol that someone already knows about.



Any information appreciated,

Russell


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.samba.org/pipermail/jcifs/attachments/20151217/407a2f20/attachment.html>


More information about the jCIFS mailing list