Re: NetApp access denied

This fix for this issue can be found in Google=E2=80=99s
fork of jCIFS here:

=
https://github.com/googlegsa/filesystem.v3/commit/da4e5a3360dfe6d9a064ffd0=
f95d17fc133649f1?diff=3Dsplit

=E2=80=94
Brett M. Johnson

> On Dec 18, 2015, at 4:00 AM, [email protected] wrote:
>=20
> Send jCIFS mailing list submissions to
> 	[email protected]
>=20
> To subscribe or unsubscribe via the World Wide Web, visit
> 	https://lists.samba.org/mailman/listinfo/jcifs
> or, via email, send a message with subject or body 'help' to
> 	[email protected]
>=20
> You can reach the person managing the list at
> 	[email protected]
>=20
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of jCIFS digest..."
>=20
>=20
> Today's Topics:
>=20
>   1. NetApp access denied ([email protected])
>=20
>=20
> ----------------------------------------------------------------------
>=20
> Message: 1
> Date: Thu, 17 Dec 2015 17:23:28 +0000
> From: <[email protected]>
> To: <[email protected]>
> Subject: [jcifs] NetApp access denied
> Message-ID:
> 	<[email protected]>
> Content-Type: text/plain; charset=3D"utf-8"
>=20
> Dell - Internal Use - Confidential
>=20
> Using NetApp Release 8.3RC1
>=20
>=20
>=20
> Running the jcifs 1.3.18 example code SmbShell to browse a NetApp cifs =
share, I receive 'Access denied'.
>=20
>=20
>=20
> The cifs share has packet signing enabled.
>=20
>=20
>=20
> I have debugged this to line ~150 of NtlmContext.java in jcifs source, =
which is:
>=20
>=20
>=20
> ntlmsspFlags &=3D msg2.getFlags();
>=20
>=20
>=20
> If I comment out this line, then browsing works.   That is because:
>=20
>=20
>=20
> ntlmsspFlags=3D0x60088014
>=20
>=20
>=20
> and,
>=20
>=20
>=20
> ms2.getFlags() returns: 0x60088004
>=20
>=20
>=20
> So the bitwise & turns off the 0x00000010 flag which is =
(NtlmFlags.java)
>=20
>=20
>=20
> public static final int NTLMSSP_NEGOTIATE_SIGN =3D 0x00000010;
>=20
>=20
>=20
> So, for some reason the NetApp seems to be disabling packet signing =
during the negotiation.
>=20
>=20
>=20
> This may be a bug in NetApp.   On the other hand, perhaps it is a
>=20
> configuration problem or a misunderstanding of the protocol that =
someone already knows about.
>=20
>=20
>=20
> Any information appreciated,
>=20
> Russell
>=20
>=20
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL: =
<http://lists.samba.org/pipermail/jcifs/attachments/20151217/407a2f20/atta=
chment-0001.html>
>=20
> ------------------------------
>=20
> Subject: Digest Footer
>=20
> _______________________________________________
> jCIFS mailing list
> [email protected]
> https://lists.samba.org/mailman/listinfo/jcifs
>=20
>=20
> ------------------------------
>=20
> End of jCIFS Digest, Vol 154, Issue 1
> *************************************