Is JCIFS incompatible with windows 2008 R2 domain controllers?

Question

We are using JCIFS(1.3.15) to authenticate from a Windows 7 client which sends only NTLM v2 responses.

We are getting the following error when we use a Windows 2008 R2 domain controller

jcifs.smb.SmbException: The parameter is incorrect.
    at jcifs.smb.SmbTransport.checkStatus(SmbTransport.java:545)
    at jcifs.smb.SmbTransport.send(SmbTransport.java:645)
    at jcifs.smb.SmbSession.sessionSetup(SmbSession.java:322)
    at jcifs.smb.SmbSession.send(SmbSession.java:224)
    at jcifs.smb.SmbTree.treeConnect(SmbTree.java:176)
    at jcifs.smb.SmbSession.logon(SmbSession.java:153)
    at jcifs.smb.SmbSession.logon(SmbSession.java:146)

The authentication mechanism works fine in the following cases

1) Client supports both NTLM v1 and v2 (lmCompatibility of client is 1) and domain controller is Windows 2003

2) Client sends only NTLM v2 (lmCompatibility of client is 3) and domain controller is Windows 2003

3) Client supports both NTLM v1 and v2 (lmCompatibility of client is 1) and domain controller is Windows 2008

but we gets the above mentioned error when Client sends only NTLM v2 (lmCompatibility of client is 3) and domain controller is Windows 2008

Can some body help us here

Thanks in advance

Sajo C Mathew

Threepence

what version of JCIFS and which JVM are you using? – Extender

I think that 1.3.15 won't work with NTLMv2. You should try it out with the latest version (1.3.17) although I've been having mixed success with Windows 2008 domain controllers – Teodora

Hi, i am also getting the same error with jcifs 1.3.17. Tried a lot have you got any workaround for this – Auschwitz

Answer 1

JCifs is abandoned. If you need NTLM2, you may migrate to commercial solution for $250 (or $500 unlimited): http://www.ioplex.com/jespa.html, or free, an NTLM part taken out from Liferay: http://sourceforge.net/projects/ntlmv2auth/.

NTLM is being abandoned (mainly because of security vulnerabilities). Maybe you could migrate to Kerberos?

Leak

Answer 2

JCifs 1.3.18 properly supports NTLMv2 (I had the same problem).

Acton