[jcifs] NetApp access denied

Brett Johnson brett.michael.johnson at gmail.com
Fri Dec 18 18:17:48 UTC 2015


This fix for this issue can be found in Google’s
fork of jCIFS here:

https://github.com/googlegsa/filesystem.v3/commit/da4e5a3360dfe6d9a064ffd0f95d17fc133649f1?diff=split

—
Brett M. Johnson

> On Dec 18, 2015, at 4:00 AM, jcifs-request at lists.samba.org wrote:
> 
> Send jCIFS mailing list submissions to
> 	jcifs at lists.samba.org
> 
> To subscribe or unsubscribe via the World Wide Web, visit
> 	https://lists.samba.org/mailman/listinfo/jcifs
> or, via email, send a message with subject or body 'help' to
> 	jcifs-request at lists.samba.org
> 
> You can reach the person managing the list at
> 	jcifs-owner at lists.samba.org
> 
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of jCIFS digest..."
> 
> 
> Today's Topics:
> 
>   1. NetApp access denied (Russell_Balast at DellTeam.com)
> 
> 
> ----------------------------------------------------------------------
> 
> Message: 1
> Date: Thu, 17 Dec 2015 17:23:28 +0000
> From: <Russell_Balast at DellTeam.com>
> To: <jcifs at lists.samba.org>
> Subject: [jcifs] NetApp access denied
> Message-ID:
> 	<6021994cb1904d1896db6af7d4417881 at AUSX13MPC107.AMER.DELL.COM>
> Content-Type: text/plain; charset="utf-8"
> 
> Dell - Internal Use - Confidential
> 
> Using NetApp Release 8.3RC1
> 
> 
> 
> Running the jcifs 1.3.18 example code SmbShell to browse a NetApp cifs share, I receive 'Access denied'.
> 
> 
> 
> The cifs share has packet signing enabled.
> 
> 
> 
> I have debugged this to line ~150 of NtlmContext.java in jcifs source, which is:
> 
> 
> 
> ntlmsspFlags &= msg2.getFlags();
> 
> 
> 
> If I comment out this line, then browsing works.   That is because:
> 
> 
> 
> ntlmsspFlags=0x60088014
> 
> 
> 
> and,
> 
> 
> 
> ms2.getFlags() returns: 0x60088004
> 
> 
> 
> So the bitwise & turns off the 0x00000010 flag which is (NtlmFlags.java)
> 
> 
> 
> public static final int NTLMSSP_NEGOTIATE_SIGN = 0x00000010;
> 
> 
> 
> So, for some reason the NetApp seems to be disabling packet signing during the negotiation.
> 
> 
> 
> This may be a bug in NetApp.   On the other hand, perhaps it is a
> 
> configuration problem or a misunderstanding of the protocol that someone already knows about.
> 
> 
> 
> Any information appreciated,
> 
> Russell
> 
> 
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL: <http://lists.samba.org/pipermail/jcifs/attachments/20151217/407a2f20/attachment-0001.html>
> 
> ------------------------------
> 
> Subject: Digest Footer
> 
> _______________________________________________
> jCIFS mailing list
> jCIFS at lists.samba.org
> https://lists.samba.org/mailman/listinfo/jcifs
> 
> 
> ------------------------------
> 
> End of jCIFS Digest, Vol 154, Issue 1
> *************************************




More information about the jCIFS mailing list