STATUS_LOGON_FAILURE

classic Classic list List threaded Threaded
5 messages Options
Reply | Threaded
Open this post in threaded view
|

STATUS_LOGON_FAILURE

Chris Lumpkin
I'm running NtlmHttpFilter in Windows XP, JBoss 4.0.1sp1, and NTLM login isn't
working. The same Windows account works on Exchange Web  Access (which uses
NTLM). Relevant config snippets below, and any help is greatly appreciated. I
can absolutely overwhelm you with more Ethereal packet captures upon request!

Thanks,
Chris

web.xml:

   <!-- jCIFS NTLM HTTP filter -->
   <filter>
      <filter-name>NtlmHttpFilter</filter-name>
      <filter-class>jcifs.http.NtlmHttpFilter</filter-class>
      <init-param>
         <param-name>jcifs.http.domainController</param-name>
         <param-value>209.201.33.8</param-value>
      </init-param>
      <init-param>
         <param-name>jcifs.smb.client.logonShare</param-name>
         <param-value>Public</param-value>
      </init-param>
   </filter>

   <filter-mapping>
      <filter-name>NtlmHttpFilter</filter-name>
      <url-pattern>/*</url-pattern>
   </filter-mapping>

jcifs.properties:
jcifs.http.basicRealm=VTIC.COM
jcifs.http.domainController=209.201.33.8
jcifs.http.enableBasic=true
jcifs.http.insecureBasic=true
jcifs.netbios.baddr=209.201.33.255
jcifs.netbios.cachePolicy=1200
jcifs.netbios.wins=209.201.33.8
jcifs.smb.client.domain=VTIC.COM
jcifs.smb.client.password=<obfuscated>
jcifs.smb.client.soTimeout=300000
jcifs.smb.client.username=build
jcifs.util.loglevel=10

server log:
2006-02-02 15:21:02,270 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]: REQUEST URI       =/mobile/
2006-02-02 15:21:02,270 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:           authType=null
2006-02-02 15:21:02,270 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:  characterEncoding=null
2006-02-02 15:21:02,270 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:      contentLength=-1
2006-02-02 15:21:02,270 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:        contentType=null
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:        contextPath=/mobile
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:             cookie=auth_realm=1
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:            
cookie=JSESSIONID=BA156ABE2FEA0CCA17BCB463D36A5E4E
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:             header=accept=image/gif,
image/x-xbitmap, image/jpeg, image/pjpeg, application/vnd.ms-excel,
application/vnd.ms-powerpoint, application/msword,
application/x-shockwave-flash, */*
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:             header=accept-language=en-us
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:             header=accept-encoding=gzip, deflate
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:             header=user-agent=Mozilla/4.0
(compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:             header=host=localhost
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:             header=connection=Keep-Alive
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:             header=authorization=NTLM
TlRMTVNTUAABAAAAB4IIogAAAAAAAAAAAAAAAAAAAAAFASgKAAAADw==
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:             header=cookie=auth_realm=1;
JSESSIONID=BA156ABE2FEA0CCA17BCB463D36A5E4E
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:             locale=en_US
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:             method=GET
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:           pathInfo=null
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:           protocol=HTTP/1.1
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:        queryString=null
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:         remoteAddr=127.0.0.1
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:         remoteHost=127.0.0.1
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:         remoteUser=null
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]: requestedSessionId=BA156ABE2FEA0CCA17B
CB463D36A5E4E
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:             scheme=http
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:         serverName=localhost
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:         serverPort=80
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:        servletPath=/default.jsp
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:           isSecure=false
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:
---------------------------------------------------------------
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:
---------------------------------------------------------------
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:           authType=null
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:      contentLength=0
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:        contentType=null
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:             header=WWW-Authenticate=NTLM
TlRMTVNTUAACAAAAEAAQADAAAAAFAoEAtVM564fUppIAAAAAAAAAADYANgBAAAAAVgBUAEk
AQwAuAEMATwBNAAIAEABWAFQASQBDAC4AQwBPAE0AAQAaAEoAQwBJAEYAUwAzADMAXwA4ADg
AXwA2AEMAAAAAAA==
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:             header=Content-Length=0
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:            
header=Date=Thu, 02 Feb 2006 20:21:02 GMT
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:             header=Server=Apache-Coyote/1.1
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:            message=null
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:         remoteUser=null
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:             status=401
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:
===============================================================
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]: REQUEST URI       =/mobile/
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:           authType=null
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:  characterEncoding=null
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:      contentLength=-1
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:        contentType=null
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:        contextPath=/mobile
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:             cookie=auth_realm=1
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:            
cookie=JSESSIONID=BA156ABE2FEA0CCA17BCB463D36A5E4E
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:             header=accept=image/gif,
image/x-xbitmap, image/jpeg, image/pjpeg, application/vnd.ms-excel,
application/vnd.ms-powerpoint, application/msword,
application/x-shockwave-flash, */*
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:             header=accept-language=en-us
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:             header=accept-encoding=gzip, deflate
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:             header=user-agent=Mozilla/4.0
(compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:             header=host=localhost
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:             header=connection=Keep-Alive
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:             header=authorization=NTLM
TlRMTVNTUAADAAAAGAAYAH4AAAAYABgAlgAAAAAAAABIAAAAIgAiAEgAAAAUABQAagAAAAAAAACu
AAAABQKAAgUBKAoAAAAPYwBsAHUAbQBwAGsAaQBuAEAAdgB0AGkAYwAuAGMAbwBtAFcAUwAtAEwA
VQBNAFAASwBJAE4AVQpK3rsZVzvhQvJPkZaaNszeviovXP7FVQpK3rsZVzvhQvJPkZaaNszeviov
XP7F
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:             header=cookie=auth_realm=1;
JSESSIONID=BA156ABE2FEA0CCA17BCB463D36A5E4E
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:             locale=en_US
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:             method=GET
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:           pathInfo=null
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:           protocol=HTTP/1.1
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:        queryString=null
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:         remoteAddr=127.0.0.1
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:         remoteHost=127.0.0.1
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:         remoteUser=null
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:
requestedSessionId=BA156ABE2FEA0CCA17BCB463D36A5E4E
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:             scheme=http
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:         serverName=localhost
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:         serverPort=80
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:        servletPath=/default.jsp
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:           isSecure=false
2006-02-02 15:21:02,285 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:
---------------------------------------------------------------
2006-02-02 15:21:02,301 INFO  [STDOUT] treeConnect:
unc=\\AGIL02\PUBLIC,service=?????
2006-02-02 15:21:02,301 INFO  [STDOUT] sessionSetup:
accountName=[hidden email],primaryDomain=
2006-02-02 15:21:02,301 INFO  [STDOUT] treeConnect:
unc=\\AGIL02\PUBLIC,service=?????
2006-02-02 15:21:02,301 INFO  [STDOUT] sessionSetup:
accountName=[hidden email],primaryDomain=VTIC.COM
2006-02-02 15:21:02,301 INFO  [STDOUT] LM_COMPATIBILITY=0
2006-02-02 15:21:02,301 INFO  [STDOUT] 00000: 60 85 18 45 4D 22 09 0C 47 E5 31
EE F7 16 4C BD  |`..EM"..Gå1î÷.L½|
00010: E7 7B A0 53 C2 11 12 08 32 CB 88 CD D3 49 6C 17  |ç{ SÂ...2Ë.ÍÓIl.|
00020: 6C AE AB F9 66 BF A4 75                          |l®«ùf¿¤u        |
2006-02-02 15:21:02,301 INFO  [STDOUT] update: 0 0:40
2006-02-02 15:21:02,301 INFO  [STDOUT] 00000: 60 85 18 45 4D 22 09 0C 47 E5 31
EE F7 16 4C BD  |`..EM"..Gå1î÷.L½|
00010: E7 7B A0 53 C2 11 12 08 32 CB 88 CD D3 49 6C 17  |ç{ SÂ...2Ë.ÍÓIl.|
00020: 6C AE AB F9 66 BF A4 75                          |l®«ùf¿¤u        |
2006-02-02 15:21:02,301 INFO  [STDOUT] update: 1 4:242
2006-02-02 15:21:02,301 INFO  [STDOUT] 00000: FF 53 4D 42 73 00 00 00 00 18 07
C0 00 00 00 00  |ÿSMBs......À....|
00010: 00 00 00 00 00 00 00 00 00 00 D5 17 00 00 0A 00  |..........Õ.....|
00020: 0D 75 00 C0 00 04 41 0A 00 01 00 00 00 00 00 18  |.u.À..A.........|
00030: 00 18 00 00 00 00 00 54 10 00 00 83 00 ED EA 69  |.......T.....íêi|
00040: 13 96 CA 41 76 75 F6 93 47 F4 FB 83 A9 1B E4 B7  |..ÊAvuö.Gôû.©.ä·|
00050: 11 31 10 4A CB E7 7B A0 53 C2 11 12 08 32 CB 88  |.1.JËç{ SÂ...2Ë.|
00060: CD D3 49 6C 17 6C AE AB F9 66 BF A4 75 00 62 00  |ÍÓIl.l®«ùf¿¤u.b.|
00070: 75 00 69 00 6C 00 64 00 40 00 56 00 54 00 49 00  |u.i.l.d.@.V.T.I.|
00080: 43 00 2E 00 43 00 4F 00 4D 00 00 00 56 00 54 00  |C...C.O.M...V.T.|
00090: 49 00 43 00 2E 00 43 00 4F 00 4D 00 00 00 57 00  |I.C...C.O.M...W.|
000A0: 69 00 6E 00 64 00 6F 00 77 00 73 00 20 00 58 00  |i.n.d.o.w.s. .X.|
000B0: 50 00 00 00 6A 00 43 00 49 00 46 00 53 00 00 00  |P...j.C.I.F.S...|
000C0: 04 FF 00 00 00 00 00 01 00 27 00 00 5C 00 5C 00  |.ÿ.......'..\.\.|
000D0: 41 00 47 00 49 00 4C 00 30 00 32 00 5C 00 50 00  |A.G.I.L.0.2.\.P.|
000E0: 55 00 42 00 4C 00 49 00 43 00 00 00 3F 3F 3F 3F  |U.B.L.I.C...????|
000F0: 3F 00                                            |?.              |
2006-02-02 15:21:02,301 INFO  [STDOUT] digest:
2006-02-02 15:21:02,301 INFO  [STDOUT] 00000: 28 F9 45 B6 24 89 9A 03 0A F4 2F
B4 A3 62 BE 1C  |(ùE¶$....ô/´£b¾.|
2006-02-02 15:21:02,301 INFO  [STDOUT]
SmbComSessionSetupAndX[command=SMB_COM_SESSION_SETUP_ANDX,received=false,
errorCode=0,flags=0x0018,flags2=0xC007,signSeq=0,tid=0,pid=6101,uid=0,mid=10,
wordCount=13,byteCount=131,andxCommand=0x75,andxOffset=192,snd_buf_size=16644,
maxMpxCount=10,VC_NUMBER=1,sessionKey=0,passwordLength=24,
unicodePasswordLength=24,
capabilities=4180,accountName=[hidden email],primaryDomain=VTIC.COM,
NATIVE_OS=Windows
XP,NATIVE_LANMAN=jCIFS]
2006-02-02 15:21:02,301 INFO  [STDOUT]
SmbComTreeConnectAndX[command=SMB_COM_TREE_CONNECT_ANDX,received=false,
errorCode=0,flags=0x0018,flags2=0x0000,signSeq=0,tid=0,pid=6101,uid=0,
mid=0,wordCount=4,byteCount=39,andxCommand=0xFF,andxOffset=0,
disconnectTid=false,passwordLength=1,password=,path=\\AGIL02\PUBLIC,
service=?????]
2006-02-02 15:21:02,301 INFO  [STDOUT] 00000: FF 53 4D 42 73 00 00 00 00 18 07
C0 00 00 28 F9  |ÿSMBs......À..(ù|
00010: 45 B6 24 89 9A 03 00 00 00 00 D5 17 00 00 0A 00  |E¶$.......Õ.....|
00020: 0D 75 00 C0 00 04 41 0A 00 01 00 00 00 00 00 18  |.u.À..A.........|
00030: 00 18 00 00 00 00 00 54 10 00 00 83 00 ED EA 69  |.......T.....íêi|
00040: 13 96 CA 41 76 75 F6 93 47 F4 FB 83 A9 1B E4 B7  |..ÊAvuö.Gôû.©.ä·|
00050: 11 31 10 4A CB E7 7B A0 53 C2 11 12 08 32 CB 88  |.1.JËç{ SÂ...2Ë.|
00060: CD D3 49 6C 17 6C AE AB F9 66 BF A4 75 00 62 00  |ÍÓIl.l®«ùf¿¤u.b.|
00070: 75 00 69 00 6C 00 64 00 40 00 56 00 54 00 49 00  |u.i.l.d.@.V.T.I.|
00080: 43 00 2E 00 43 00 4F 00 4D 00 00 00 56 00 54 00  |C...C.O.M...V.T.|
00090: 49 00 43 00 2E 00 43 00 4F 00 4D 00 00 00 57 00  |I.C...C.O.M...W.|
000A0: 69 00 6E 00 64 00 6F 00 77 00 73 00 20 00 58 00  |i.n.d.o.w.s. .X.|
000B0: 50 00 00 00 6A 00 43 00 49 00 46 00 53 00 00 00  |P...j.C.I.F.S...|
000C0: 04 FF 00 00 00 00 00 01 00 27 00 00 5C 00 5C 00  |.ÿ.......'..\.\.|
000D0: 41 00 47 00 49 00 4C 00 30 00 32 00 5C 00 50 00  |A.G.I.L.0.2.\.P.|
000E0: 55 00 42 00 4C 00 49 00 43 00 00 00 3F 3F 3F 3F  |U.B.L.I.C...????|
000F0: 3F 00                                            |?.              |
2006-02-02 15:21:02,301 INFO  [STDOUT] New data read:
Transport1[AGIL02<00>/209.201.33.8:0]
2006-02-02 15:21:02,317 INFO  [STDOUT] 00000: FF 53 4D 42 73 6D 00 00 C0 98 07
C0 00 00 28 F9  |ÿSMBsm..À..À..(ù|
00010: 45 B6 24 89 9A 03 00 00 00 00 D5 17 00 00 0A 00  |E¶$.......Õ.....|
2006-02-02 15:21:02,317 INFO  [STDOUT] NtlmHttpFilter: [hidden email]:
0xC000006D: jcifs.smb.SmbAuthException: Logon failure: unknown user name or bad
password.
2006-02-02 15:21:02,317 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:
---------------------------------------------------------------
2006-02-02 15:21:02,317 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:           authType=null
2006-02-02 15:21:02,317 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:      contentLength=0
2006-02-02 15:21:02,317 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:        contentType=null
2006-02-02 15:21:02,317 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:             header=WWW-Authenticate=NTLM
2006-02-02 15:21:02,317 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:             header=WWW-Authenticate=Basic
realm="VTIC.COM"
2006-02-02 15:21:02,317 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:             header=WWW-Authenticate=NTLM
2006-02-02 15:21:02,317 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:             header=WWW-Authenticate=Basic
realm="VTIC.COM"
2006-02-02 15:21:02,317 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:             header=Content-Length=0
2006-02-02 15:21:02,317 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:             header=Date=Thu, 02 Feb 2006 20:21:02
GMT
2006-02-02 15:21:02,317 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:             header=Server=Apache-Coyote/1.1
2006-02-02 15:21:02,317 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:            message=null
2006-02-02 15:21:02,317 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:         remoteUser=null
2006-02-02 15:21:02,317 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:             status=401
2006-02-02 15:21:02,317 INFO  [org.jboss.web.localhost.Engine]
RequestDumperValve[localhost]:
===============================================================
2006-02-02 15:23:49,812 INFO  [STDOUT] java.net.SocketException: Connection reset
2006-02-02 15:23:49,812 INFO  [STDOUT]  at
java.net.SocketInputStream.read(SocketInputStream.java:168)
2006-02-02 15:23:49,812 INFO  [STDOUT]  at
jcifs.util.transport.Transport.readn(Transport.java:29)
2006-02-02 15:23:49,812 INFO  [STDOUT]  at
jcifs.smb.SmbTransport.peekKey(SmbTransport.java:351)
2006-02-02 15:23:49,812 INFO  [STDOUT]  at
jcifs.util.transport.Transport.loop(Transport.java:98)
2006-02-02 15:23:49,812 INFO  [STDOUT]  at
jcifs.util.transport.Transport.run(Transport.java:242)
2006-02-02 15:23:49,812 INFO  [STDOUT]  at java.lang.Thread.run(Thread.java:534)


Ethereal packet capture (request):
No.     Time        Source                Destination           Protocol Info
     23 1.014949    209.201.33.123        209.201.33.8          SMB      Session
Setup AndX Request, User: VTIC.COM\[hidden email]; Tree Connect AndX, Path:
\\AGIL02\PUBLIC


Ethereal packet capture (response):
No.     Time        Source                Destination           Protocol Info
     24 1.016364    209.201.33.8          209.201.33.123        SMB      Session
Setup AndX Response, Error: STATUS_LOGON_FAILURE




Reply | Threaded
Open this post in threaded view
|

Re: STATUS_LOGON_FAILURE

Michael B Allen-4
On Thu, 2 Feb 2006 20:38:50 +0000 (UTC)
chris lumpkin <[hidden email]> wrote:

> I'm running NtlmHttpFilter in Windows XP, JBoss 4.0.1sp1, and NTLM login isn't
> working. The same Windows account works on Exchange Web  Access (which uses
> NTLM). Relevant config snippets below, and any help is greatly appreciated. I
> can absolutely overwhelm you with more Ethereal packet captures upon request!

Instead of setting all things that you're doing try just backing off to
a standard "production" config as described in the docs.

Mike
Reply | Threaded
Open this post in threaded view
|

Re: STATUS_LOGON_FAILURE

Chris Lumpkin
Mike,

Thanks for your response. I commented out some properties, and now instead
of "Invalid username or bad password", I'm getting "Access is denied".
Properties are:

#jcifs.http.basicRealm=VTIC.COM
#jcifs.http.insecureBasic=true
#jcifs.netbios.baddr=209.201.33.255
#jcifs.netbios.cachePolicy=1200
#jcifs.smb.client.soTimeout=300000
jcifs.http.domainController=209.201.33.8
jcifs.http.enableBasic=false
jcifs.netbios.wins=209.201.33.8
jcifs.smb.client.domain=VTIC.COM
jcifs.smb.client.password=xxxxxx
jcifs.smb.client.username=clumpkin
jcifs.util.loglevel=10

What I'm seeing in the packet captures is interesting. Apparently jCIFS
performs two authentication requests - one to establish that the app server
can do authentication by proxy, the second is the actual authentication of
the user with the NTLM token retrieved from the browser via HTTP header. I've
tried using a different account on my domain for the proxy authenticator,
using the same account that my machine is passing, and using none at all.
Nothing is working, and I'm at a loss. Whether I use the same account as the
machine I'm on, or I use another account, the initial authentication passes,
but the second one fails. I'm starting to suspect that jCIFS is not hashing
the password correctly. Any ideas or comments are appreciated.

Thanks,
Chris

Reply | Threaded
Open this post in threaded view
|

Re: Re: STATUS_LOGON_FAILURE

Michael B Allen-4
On Fri, 3 Feb 2006 15:29:29 +0000 (UTC)
chris lumpkin <[hidden email]> wrote:

> jcifs.http.domainController=209.201.33.8
> jcifs.http.enableBasic=false
> jcifs.netbios.wins=209.201.33.8
> jcifs.smb.client.domain=VTIC.COM

domainController and domain are somewhat mutually exclusive. Try removing
domainController.

Also, try the examples/ListFiles.java example on your "Public" share
with the said credentials just to verify they're good.

Does your domain really have a '.' in it? Are you sure you're not
confusing the NT domain with your Kerberos realm?

Mike
Reply | Threaded
Open this post in threaded view
|

Re: Re: STATUS_LOGON_FAILURE

Michael B Allen-4
On Fri, 3 Feb 2006 14:57:16 -0500
Chris Lumpkin <[hidden email]> wrote:

> Also... when I remove the "jcifs.smb.client.ssnLimit" property, I get this
> error:
>
> NtlmHttpFilter: VTIC.COM\clumpkin: 0xC0000022: jcifs.smb.SmbAuthException:
> Access is denied.

I think the authentication proxy you mentioned earlier is interfering
somehow.

Mike