Re: Is the work-around also the answer?
Bret Comstock Waldow <[email protected]>
| Newsgroups | gmane.network.samba.java |
|---|---|
| Message-ID | <[email protected]> |
On 23/10/11 21:01, André Warnier wrote: > But jCIFS cannot automatically adapt, because it cannot support NTLMv2. Hello, 1) The system worked fine (or so I'm told) until June of this year. 2) The system then began rejecting some logins. 3) The pre-authentication work-around completely solves the problem since then. Completely. I'm not inquiring to find out if it might - I'm stating that it does in production. From what I read, I believe including here, that couldn't happen if the AD had switched to NTLMv2, as the entire authentication process wouldn't work, pre-authentication or not. > So it fails to authenticate. And when the primary DC is turned on > again, it will work again for a while. I can remove the pre-authentication stanzas from the xml, and the software will not authenticate, and put them back and it will - all in the space of 15 minutes. I don't think by coincidence that the AD people just happen to be switching between NTLMv1 & v2 at those same times. Am I mis-reading to think I have read that jCIFS won't authenticate at all with NTLMv2, regardless of whether I use the pre-authentication or not? Thanks, Bret