Activity for ntlmv2-auth

Balaji posted a comment on discussion General Discussion

Balaji — Thu, 02 Dec 2021 12:20:15 -0000

Microsoft released patch to block vulnerable netlogon secure channel. https://support.microsoft.com/en-us/topic/how-to-manage-the-changes-in-netlogon-secure-channel-connections-associated-with-cve-2020-1472-f7e8cc17-0309-1d6a-304e-5ba73cd1a11e Getting "Unable to authenticate user: Access is denied" error after applying microsoft patch in my DC. Event ID 5827 is logged in my Domain controller. Jespa is working fine.

Luca Cicala posted a comment on discussion General Discussion

Luca Cicala — Thu, 18 Jun 2020 14:50:31 -0000

I solved the problem, I used a wrong ntlm-dc-name. Thank you for your support.

Marcel Schoen posted a comment on discussion General Discussion

Marcel Schoen — Thu, 18 Jun 2020 14:30:18 -0000

Hm... not sure. I have a working setup where I just used the name, without domain, for the username field, e.g. ntlm-account TEST-PC$ I don' really see an obvious problem with your configuration.

Luca Cicala posted a comment on discussion General Discussion

Luca Cicala — Thu, 18 Jun 2020 10:25:28 -0000

Hi Marcel. I'm now trying to use your demo app with this configuration

ntlmv2-auth

org.ntlmv2.filter.NtlmFilter

ntlm-domain

xxx.yyy.com

ntlm-dc

192.168.9.4

ntlm-dc-name

xxx

ntlm-account...

Luca Cicala posted a comment on discussion General Discussion

Luca Cicala — Tue, 16 Jun 2020 09:58:19 -0000

On the client I'm using my personal user, the same I use to access the PC.

Marcel Schoen posted a comment on discussion General Discussion

Marcel Schoen — Tue, 16 Jun 2020 09:12:08 -0000

Not sure, but this error message "The account used is a Computer Account. Use your global user account or local user account to access this server." sounds like not actual user credentials were provided (from a real user). Instead a technical user was used for the authentication. I can't really be sure. Maybe the AD admin or logs can tell you more? What kind of username credential was used on the client for the login?

Luca Cicala posted a comment on discussion General Discussion

Luca Cicala — Tue, 16 Jun 2020 08:03:30 -0000

Hello. I'm facing this error 2020-06-16 09:46:38,383 [http-nio-8080-exec-7] ERROR org.ntlmv2.filter.NtlmFilter - [] [] NTLM authentication failed: org.ntlmv2.liferay.NtlmLogonException: Unable to authenticate due to communication failure with server org.ntlmv2.liferay.NtlmLogonException: Unable to authenticate due to communication failure with server at org.ntlmv2.liferay.Netlogon.logon(Netlogon.java:96) at org.ntlmv2.liferay.NtlmManager.authenticate(NtlmManager.java:66) at org.ntlmv2.filter.NtlmFilter.doFilter(NtlmFilter.java:236)...

Marcel Schoen posted a comment on discussion General Discussion

Marcel Schoen — Wed, 22 Apr 2020 08:10:51 -0000

Hm... I'm not sure; maybe try to enter the username together with the domain? In similar AD based setups, I sometimes have to enter my username as "\", e.g.: ACME\johndoe

Ankit Ahuja posted a comment on discussion General Discussion

Ankit Ahuja — Tue, 21 Apr 2020 12:00:32 -0000

Thanks, Marcel! I think the issue was with my machine. Tried it from a different one and communication exception got resolved. However, I'm seeing this error after entering credentials in the popup: ERROR org.ntlmv2.filter.NtlmFilter - NTLM authentication failed: org.ntlmv2.liferay.NtlmLogonException: Unable to authenticate user: Logon failure: unknown user name or bad password. org.ntlmv2.liferay.NtlmLogonException: Unable to authenticate user: Logon failure: unknown user name or bad password. at...

Marcel Schoen posted a comment on discussion General Discussion

Marcel Schoen — Tue, 21 Apr 2020 09:36:59 -0000

Hi there, I don't know what to tell you, but this here really indicates connection problems: Caused by: jcifs.smb.SmbException: Failed to connect: 0.0.0.0<00>/18.209.165.217 jcifs.util.transport.TransportException: Connection timeout Being able to ping the IP does not mean that the connection on the specific port, or with the specific protocol, is possible. It could easily be blocked by a firewall, even if ping is possible. Try to make sure that port 445 is open, and that the SMB protocol is allowed....

PArveen Kumar modified a comment on discussion General Discussion

PArveen Kumar — Tue, 03 Apr 2018 10:14:39 -0000

I am able to resolve all the issues in my Project. Thanks for Providing the Project. God bless you. If anyone else does need any help regarding the project and implementation of the code Provided by marcel. I am ready to help on parveensingla08@gmail.com

PArveen Kumar modified a comment on discussion General Discussion

PArveen Kumar — Tue, 03 Apr 2018 10:13:03 -0000

PArveen Kumar modified a comment on discussion General Discussion

PArveen Kumar — Tue, 03 Apr 2018 10:12:44 -0000

PArveen Kumar modified a comment on discussion General Discussion

PArveen Kumar — Wed, 21 Mar 2018 07:03:15 -0000

Thanks marcel for providing the project. I am able to resolve the above issue as well. In web.xml for the parameter I was using USERDNSDOMAIN rather than USERDOMAIN. We can find these values bu using SET command in Command Prompt. Now Above Project is working fine for both NTLM and NTLMv2. Now When I am using the web.xml with OC4J 10.1.3 server. Java is 1.5 I am facing the below exception : This loader has been closed and should not be in use. java.lang.IllegalStateException: ClassLoader "LPS.root:0.0.0"...

PArveen Kumar posted a comment on discussion General Discussion

PArveen Kumar — Tue, 20 Mar 2018 05:15:20 -0000

PArveen Kumar posted a comment on discussion General Discussion

PArveen Kumar — Thu, 15 Mar 2018 10:58:07 -0000

Hi Sergey, Are you able to resolve the issue.

PArveen Kumar posted a comment on discussion General Discussion

PArveen Kumar — Thu, 15 Mar 2018 10:42:41 -0000

Thanks for your help Marcel.I am able to fix the above exception issue.But I am facing the below scenario. It worked fine when group Policy settings is below : Send LM and NTLM Responses (0) Send LM and NTLM—use NTLMv2 session security if negotiated(1) Send NTLM response only(2) But It gives the error "Unable to authenticate user: Logon failure: unknown user name or bad password"* when the group policy settings is Send NTLMv2 response only(3) Send NTLMv2 response only/refuse LM(4) Send NTLMv2 response...

Marcel Schoen posted a comment on discussion General Discussion

Marcel Schoen — Thu, 15 Mar 2018 08:11:00 -0000

Hi Parveen, Unfortunately, I don't really have a clue of NTLM. As you see in my project notes, the actual NTLMv2 code (on top of JCIFS) was taken from the "Liferay" portal project. However, my experience has shown me that often when people could not get my library to work, it was because of some setup problems. Like, for example, not using a computer account for the connection to the Domain Controller. A computer account is NOT a "tech user", it is a different kind of account, that can only be properly...

PArveen Kumar modified a comment on discussion General Discussion

PArveen Kumar — Thu, 15 Mar 2018 06:21:18 -0000

Thanks Marcel for your help. I tried NTLMv2 using the library provided here. I got the error org.ntlmv2.liferay.NtlmLogonException: Session key negotiation failed. I made changes in NetlogonConnection.java file as suggested in forum. NetrServerAuthenticate3 netrServerAuthenticate3 = _negotiateFlags is defined like this : if (_negotiateFlags == 0) { String negotiateFlags = "0x600FFFFF"; // <<<=== TODO / msc: make configurable if (negotiateFlags.startsWith("0x")) { _negotiateFlags = Integer.valueOf(...

PArveen Kumar posted a comment on discussion General Discussion

PArveen Kumar — Thu, 15 Mar 2018 06:20:05 -0000

Marcel Schoen posted a comment on discussion General Discussion

Marcel Schoen — Wed, 14 Mar 2018 08:24:55 -0000

You can probably use either SPNEGO, which is built into Java directly, or NTLMv2, using this library here. SPNEGO is really the more modern way to go (Kerberos), but AFAIK also more complicated to set up and debug. My NTLMv2 filter here is relatively simple to set up. As you can see in the description, it basically extends JCIFS with NTLMv2 support.

PArveen Kumar posted a comment on discussion General Discussion

PArveen Kumar — Wed, 14 Mar 2018 08:15:49 -0000

My Project currently use JCISF as HTTP authentication which supports LM and NTLM authentication. Client make chnages in their Window allowing only NTLMv2 and refusing LM and NTLM authentication. I implemented Jespa for that. It works fine. But it is paid software. Can I use SPNEGO(freeware) for same purpose in my project. Server is OC4J . Please help me.

PArveen Kumar posted a comment on discussion General Discussion

PArveen Kumar — Wed, 14 Mar 2018 08:14:59 -0000

Marcel Schoen posted a comment on discussion General Discussion

Marcel Schoen — Wed, 02 Mar 2016 13:56:07 -0000

Hi Johannes, I think the documentation somewhere clearly states what you need: A...

Johannes Felten posted a comment on discussion General Discussion

Johannes Felten — Wed, 02 Mar 2016 11:15:58 -0000

Hi all, I'm not sure what to enter for the properties ntlm-account and ntlm-password...

Christoph Stocker posted a comment on discussion General Discussion

Christoph Stocker — Thu, 03 Dec 2015 07:11:05 -0000

Sorry for my late reply, but i was working on another project. The use of a computer...

Marcel Schoen posted a comment on discussion General Discussion

Marcel Schoen — Tue, 14 Jul 2015 18:08:51 -0000

A computer accound is absolutely mandatory for this NTLMv2 functionality - it does...

Christoph Stocker modified a comment on discussion General Discussion

Christoph Stocker — Tue, 14 Jul 2015 11:27:03 -0000

ok, i will check the account. i think it's not a computer account (only a system...

Christoph Stocker modified a comment on discussion General Discussion

Christoph Stocker — Tue, 14 Jul 2015 10:29:44 -0000

ok, i will check the account. i think it's not a computer account (only a system...

Christoph Stocker posted a comment on discussion General Discussion

Christoph Stocker — Tue, 14 Jul 2015 10:28:57 -0000

ok, i will check the account. i think it's not a computer account (only a system...

Marcel Schoen posted a comment on discussion General Discussion

Marcel Schoen — Tue, 14 Jul 2015 07:13:43 -0000

The "$" at the end indicates a computer account, not a user account. For NTLMv2,...

Christoph Stocker posted a comment on discussion General Discussion

Christoph Stocker — Mon, 13 Jul 2015 18:29:24 -0000

I always get "Session key negotiation failed". So it seems, that my username and...

Christoph Stocker posted a comment on discussion General Discussion

Christoph Stocker — Mon, 13 Jul 2015 18:27:13 -0000

@jitender: Waht have you done to get it to work?

jitender posted a comment on discussion General Discussion

jitender — Mon, 13 Oct 2014 22:30:57 -0000

not really . I used/using version 1.5.

Marcel Schoen posted a comment on discussion General Discussion

Marcel Schoen — Thu, 09 Oct 2014 22:47:35 -0000

Hi, That's good to hear. But can you please tell me if you needed to use the new...

jitender posted a comment on discussion General Discussion

jitender — Thu, 09 Oct 2014 17:19:35 -0000

Finally got it running, yay.Thanks Marcel

jitender posted a comment on discussion General Discussion

jitender — Fri, 03 Oct 2014 23:15:30 -0000

Thanks for the quick response.I am using internet explorer 8 (domain "a") domain...

Marcel Schoen posted a comment on discussion General Discussion

Marcel Schoen — Fri, 03 Oct 2014 09:29:55 -0000

The fact that you can log in indicates that the NTLM setup is correct. My guess is...

jitender posted a comment on discussion General Discussion

jitender — Fri, 03 Oct 2014 01:26:19 -0000

When I type in the demo url in browser it opens up username and password box . I...

Marcel Schoen posted a comment on discussion General Discussion

Marcel Schoen — Thu, 28 Aug 2014 19:25:58 -0000

Hi, I have prepared a new experimental release (version 1.0.6-RC1). Maybe you would...

ntlmv2-auth released /exp-patched/ntlmv2-lib-1.0.6-RC1-project.tar.gz

ntlmv2-auth — Thu, 28 Aug 2014 19:24:05 -0000

ntlmv2-auth released /exp-patched/ntlmv2-lib-1.0.6-RC1.jar

ntlmv2-auth — Thu, 28 Aug 2014 19:24:05 -0000

Marcel Schoen committed [eb6472]

Marcel Schoen — Sat, 23 Aug 2014 10:41:22 -0000

Updated to newest Liferay code version

Marcel Schoen committed [c8c1a6]

Marcel Schoen — Fri, 22 Aug 2014 19:10:08 -0000

Fixed invalid Eclipse classpath

jitender posted a comment on discussion General Discussion

jitender — Wed, 20 Aug 2014 19:04:35 -0000

kewl let me know I can help.

Marcel Schoen posted a comment on discussion General Discussion

Marcel Schoen — Wed, 20 Aug 2014 12:37:43 -0000

Hi, Well, following the discussion in that topic, I might have to patch some of the...

jitender posted a comment on discussion General Discussion

jitender — Tue, 19 Aug 2014 23:52:16 -0000

I googled the error and found this http://issues.liferay.com/browse/LPS-15380 But...

jitender posted a comment on discussion General Discussion

jitender — Tue, 19 Aug 2014 23:43:56 -0000

Thanks for the reply. I gave up on realms. I followed the steps from liferay wiki...

Marcel Schoen posted a comment on discussion General Discussion

Marcel Schoen — Tue, 05 Aug 2014 13:25:41 -0000

Hi, The error message is pretty clear: "unknown user name or bad password". This...

trysir posted a comment on discussion General Discussion

trysir — Mon, 04 Aug 2014 11:24:14 -0000

I have use ntlmv2-auth in our work,but it's throw a exception when i run it. I think...

Marcel Schoen posted a comment on discussion General Discussion

Marcel Schoen — Sat, 02 Aug 2014 11:42:25 -0000

I honestly have no idea. I don't know about "realms" in a Weblogic server. I think...

jitender posted a comment on discussion General Discussion

jitender — Thu, 31 Jul 2014 21:50:17 -0000

We have our LDAP integrated with our weblogic instance as a realm.How do you think...

Mike Bean committed [ee9afe]

Mike Bean — Tue, 20 May 2014 19:38:47 -0000

provide method to retrieve negotiated flags fro...

Mike Bean committed [5152c7]

Mike Bean — Tue, 20 May 2014 19:38:47 -0000

provide getters for other fields

Marcel Schoen modified a comment on discussion General Discussion

Marcel Schoen — Mon, 12 May 2014 07:44:54 -0000

Well, it works in many places with NTLMv2. Without further details about your configuration...

Marcel Schoen posted a comment on discussion General Discussion

Marcel Schoen — Mon, 12 May 2014 07:42:45 -0000

Well, it works in many places with NTLMv2. Without further details about your configuration...

Marcel Schoen posted a comment on discussion General Discussion

Marcel Schoen — Thu, 17 Apr 2014 15:44:26 -0000

Hi Tony, Thanks for your feedback. Sorry for my late reply. For various personal...

Tony BenBrahim posted a comment on discussion General Discussion

Tony BenBrahim — Fri, 24 Jan 2014 09:19:02 -0000

I have looked at the code in preparation for implementing on a Centos server. Since...