Re: Jcifs access does not work unless the user is a local admin

Thank you Michael

I will check it out.

Really appreciate you taking the time to respond.

Kind regards

Maz

Sent from my iPhone

> On 3 Feb 2016, at 20:53, Michael B Allen <[email protected]> wrote:
>=20
>> On Tue, Feb 2, 2016 at 10:47 PM, Mazhar Lateef <[email protected]>=
 wrote:
>> Hi Michael,
>>=20
>> Thank you for your response, much appreciate it,
>>=20
>> I will double check the details and try again, but I do have one question=
,
>> even if I did get the credentials wrong, would they work just by simply
>> adding the user to the local admin group on the file server since that is=

>> the observation that I made.
>=20
> Hi Maz,
>=20
> If the user that you think has access is actually in a different
> domain then that might explain your observation. You have to really
> check the domain in the ACL and with the credentials you're using.
>=20
> I have never heard of an authentication problem like you describe that
> is specific to Jespa.
>=20
> The most likely explanation is that the credentials are just
> wr-wr-wrong as Fonzie would say.
>=20
> Or possibly it could be a group scope issue. For example, if your ACL
> is using a Domain Local Group but you are accessing a resource in a
> different domain, the Domain Local Group will not match! You would
> have to use a Global or Universal Group for the group to be in scope
> in a foreign domain. But this is a wild guess. I just thought of it
> because it's one of those strange Windows things that comes to mind
> when someone has an inexplicable problem.
>=20
> Mike
>=20
> --=20
> Michael B Allen
> Java Active Directory Integration
> http://www.ioplex.com/
>=20
>> the domain used was the windows pre 2000 domain (short domain)
>>=20
>> This was also observed at another site.
>>=20
>> Thank you
>>=20
>> Maz
>>=20
>>=20
>>> On Tue, Feb 2, 2016 at 10:17 PM, Michael B Allen <[email protected]> wrot=
e:
>>>=20
>>> On Sun, Jan 31, 2016 at 8:58 AM, Mazhar Lateef <[email protected]=
>
>>> wrote:
>>>> Hi All,
>>>>=20
>>>> I have a quick question I am hoping to get an answer for, so thank you
>>>> for
>>>> taking the time in advance  I am trying to understand the reason for th=
e
>>>> following case below.
>>>>=20
>>>> A user with FULL read/write permissions to a UNC path is denied access
>>>> when
>>>> the data is accessed using JCIFS - The only option to make it work seem=
s
>>>> to
>>>> be by making the user a local administrator or add to the local admin
>>>> group
>>>> on the target server OR IF the user has other elevated permissions on
>>>> the
>>>> remote server/domain.
>>>>=20
>>>> If the user accessed the network path on windows prior to any changes i=
n
>>>> permissions there is no issue with access and everything works as
>>>> expected,
>>>> however if the same access is tried using JCIFS a user denied error is
>>>> thrown, unless the user is made a local admin or domain level access is=

>>>> granted.
>>>>=20
>>>> Is this normal? and what could be the reason for this?
>>>=20
>>> Hi Mazhar,
>>>=20
>>> The user credentials are probably just wrong. Figuring out the right
>>> domain be deceptively easy to get wrong. Use ipconfig /all to verify
>>> the domain you *think* is correct for the user. Look at the domain of
>>> the user in the ACL. I bet $1 your domain is actually wrong in one way
>>> or another.
>>>=20
>>> Mike