简体   繁体   English

JCIFS与Windows 2008 R2域控制器不兼容吗?

[英]Is JCIFS incompatible with windows 2008 R2 domain controllers?

We are using JCIFS(1.3.15) to authenticate from a Windows 7 client which sends only NTLM v2 responses. 我们正在使用JCIFS(1.3.15)从仅发送NTLM v2响应的Windows 7客户端进行身份验证。

We are getting the following error when we use a Windows 2008 R2 domain controller 当我们使用Windows 2008 R2域控制器时,我们收到以下错误

jcifs.smb.SmbException: The parameter is incorrect.
    at jcifs.smb.SmbTransport.checkStatus(SmbTransport.java:545)
    at jcifs.smb.SmbTransport.send(SmbTransport.java:645)
    at jcifs.smb.SmbSession.sessionSetup(SmbSession.java:322)
    at jcifs.smb.SmbSession.send(SmbSession.java:224)
    at jcifs.smb.SmbTree.treeConnect(SmbTree.java:176)
    at jcifs.smb.SmbSession.logon(SmbSession.java:153)
    at jcifs.smb.SmbSession.logon(SmbSession.java:146)

The authentication mechanism works fine in the following cases 在以下情况下,身份验证机制可以正常工作

1) Client supports both NTLM v1 and v2 (lmCompatibility of client is 1) and domain controller is Windows 2003 1)客户端支持NTLM v1和v2(客户端的lmCompatibility为1),域控制器为Windows 2003

2) Client sends only NTLM v2 (lmCompatibility of client is 3) and domain controller is Windows 2003 2)客户端仅发送NTLM v2(客户端的lmCompatibility为3),域控制器为Windows 2003

3) Client supports both NTLM v1 and v2 (lmCompatibility of client is 1) and domain controller is Windows 2008 3)客户端支持NTLM v1和v2(客户端的lmCompatibility为1),域控制器为Windows 2008

but we gets the above mentioned error when Client sends only NTLM v2 (lmCompatibility of client is 3) and domain controller is Windows 2008 但是当客户端仅发送NTLM v2(客户端的lmCompatibility为3)且域控制器为Windows 2008时,我们会收到上述错误

Can some body help us here 有些人可以帮助我们

Thanks in advance 提前致谢

Sajo C Mathew Sajo C Mathew

JCifs is abandoned. JCifs被遗弃了。 If you need NTLM2, you may migrate to commercial solution for $250 (or $500 unlimited): http://www.ioplex.com/jespa.html , or free, an NTLM part taken out from Liferay: http://sourceforge.net/projects/ntlmv2auth/ . 如果您需要NTLM2,您可以250美元(或500美元无限制)迁移到商业解决方案: http//www.ioplex.com/jespa.html ,或免费,从Liferay取出的NTLM部分: http:// sourceforge。 net / projects / ntlmv2auth /

NTLM is being abandoned (mainly because of security vulnerabilities). NTLM被放弃(主要是因为安全漏洞)。 Maybe you could migrate to Kerberos? 也许你可以迁移到Kerberos?

JCifs 1.3.18正确支持NTLMv2(我有同样的问题)。

声明:本站的技术帖子网页,遵循CC BY-SA 4.0协议,如果您需要转载,请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.

 
粤ICP备18138465号  © 2020-2024 STACKOOM.COM