jIntegra and ntlmv2

Sheida — Tue, 01 Aug 2023 02:34:13 -0000

They just changed our domain controller security to accept ntlmv2 only. Our code using jIntegra is not working to authenticate anymore. Please advise.

Unable to connect COM server - Exception java.lang.ArrayIndexOutOfBoundsException: Index 16 out of bounds for length 16

prabhat — Thu, 20 Jul 2023 07:00:53 -0000

We are trying to connect COM server from linux machine using J-interop but after session is created it starts to connect to COM server. After response is sent from COM server it throws Exception occurred and ArrayIndexOutOfBoundsException. Following is error stack trace -
java.lang.ArrayIndexOutOfBoundsException: Index 16 out of bounds for length 16
at jcifs.util.Encdec.dec_uint32le(Encdec.java:90)
at ndr.NdrBuffer.dec_ndr_long(NdrBuffer.java:146)
at ndr.NetworkDataRepresentation.readUnsignedLong(NetworkDataRepresentation.java:64)
at org.jinterop.dcom.core.JIRemoteSCMActivator$RemoteCreateInstance.read(JIRemoteSCMActivator.java:642)
at ndr.NdrObject.decode(NdrObject.java:36)
at rpc.ConnectionOrientedEndpoint.call(ConnectionOrientedEndpoint.java:137)
at rpc.Stub.call(Stub.java:113)
at org.jinterop.dcom.core.JIComServer.init(JIComServer.java:645)
at org.jinterop.dcom.core.JIComServer.initialise(JIComServer.java:496)
at org.jinterop.dcom.core.JIComServer.<init>(JIComServer.java:429)
at org.jinterop.dcom.test.COMServer.<init>(wmicom.java:28)
at org.jinterop.dcom.test.COMServer.main(wmicom.java:67)
at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.base/java.lang.reflect.Method.invoke(Method.java:566)
at jdk.compiler/com.sun.tools.javac.launcher.Main.execute(Main.java:404)
at jdk.compiler/com.sun.tools.javac.launcher.Main.run(Main.java:179)
at jdk.compiler/com.sun.tools.javac.launcher.Main.main(Main.java:119)</init></init>

How to fix this? Please anyone help.

Unable to connect AS400 application with PC5250 emulator using J interop

MTR SS — Tue, 18 Apr 2023 13:35:54 -0000

We recently changed our java environment from x32 bit to x64 bit. In 32 bit environment, we used Jacob library to connect with AS400 (PC5250 Emulator) but that is not working after changing java to x64bit. I found that J-Interop is alternative library for Jacob. So could you please guide us how to connect AS400 app using J-Interop library.

How can I raise the activation authentication level to RPC_C_AUTHN_LEVEL_PKT_INTEGRITY

devaskim — Sun, 19 Mar 2023 08:28:18 -0000

First of all, thanks guys for sharing your fixes.
Could you explain me how to rebuild the project? I didn't find any build script in the source tree.
Thanks in advance

How can I raise the activation authentication level to RPC_C_AUTHN_LEVEL_PKT_INTEGRITY

Tirumala — Thu, 22 Dec 2022 09:33:19 -0000

Hi Phill, Thank you for sharing info...

We are facing issue with Windows server 2022 DC and need to resolve this as so many customers are impacting for this.

We have updated the our application with latest j-interop-ng-3.5.0.jar and able to see that auth level was increasing to packet privacy. But still WMI test connection was failing with error code 0x80010111 which says RPC_E_INVALID_HEADER: OLE received a packet with an invalid header.

The logs trace was
Error reading NetBios: Message not found for errorCode: 0x80010111
org.jinterop.dcom.common.JIException: Message not found for errorCode: 0x80010111
at org.jinterop.dcom.core.JIComServer.init(JIComServer.java:568)
at org.jinterop.dcom.core.JIComServer.initialise(JIComServer.java:485)
at org.jinterop.dcom.core.JIComServer.<init>(JIComServer.java:446)
at com.analyse.WMITest.getWMILocatorAndConnect(WMITest.java:35)
at com.analyse.WMITest.main(WMITest.java:85)
Caused by: org.jinterop.dcom.common.JIRuntimeException: Message not found for errorCode: 0x80010111
at org.jinterop.dcom.core.JIRemActivation.read(JIRemActivation.java:149)
at ndr.NdrObject.decode(NdrObject.java:32)
at rpc.ConnectionOrientedEndpoint.call(ConnectionOrientedEndpoint.java:111)
at rpc.Stub.call(Stub.java:112)
at org.jinterop.dcom.core.JIComServer.init(JIComServer.java:559)
... 4 more</init>

if anyone having idea on this to resolve/ possible solution please do the needful.
Thanks for advance!..

How can I raise the activation authentication level to RPC_C_AUTHN_LEVEL_PKT_INTEGRITY

Phil Harron — Thu, 15 Dec 2022 15:46:11 -0000

Hi, I gave up trying it with Windows 2022. I've had better success with Windows Server 2019 which in my case has DCOM hardening switched on. With the changes to the j-interop (which I have made a PR for on GitHub https://github.com/skyghis/j-interop-ng) it can connect and activate my DCOM Server.
Good luck!

How can I raise the activation authentication level to RPC_C_AUTHN_LEVEL_PKT_INTEGRITY

Tirumala — Tue, 15 Nov 2022 13:10:29 -0000

Hi Everyone,

Recently Microsoft latest patch (8 Nov 2022) was released which was mentioned in the below link. https://support.microsoft.com/en-us/topic/kb5004442-manage-changes-for-windows-dcom-server-security-feature-bypass-cve-2021-26414-f1400b52-c141-43d2-941e-37ed901c769c.

This patch automatically raises the authentication level RPC_C_AUTHN_LEVEL_PKT_INTEGRITY. Most Windows DCOM client applications will automatically work with DCOM hardening change on server side without any modification to the DCOM client applications.

We have installed this latest patch in windows server 2022(in DC) and still WMI test connection was failed and 10036 error events in DC event viewer.

Anyone having any idea and update on this?

How can I raise the activation authentication level to RPC_C_AUTHN_LEVEL_PKT_INTEGRITY

Phil Harron — Fri, 04 Nov 2022 14:12:29 -0000

Hi Tirumala, As mentioned, I'm experiencing exactly the same issue. I've asked the creators of the COM object we use to try it out on Windows server 2022 and am awaiting their reply. Maybe they need to provide an software update.

Failing that I guess it could be a question that needs to raised with someone at Microsoft?

How can I raise the activation authentication level to RPC_C_AUTHN_LEVEL_PKT_INTEGRITY

Tirumala — Tue, 01 Nov 2022 08:28:58 -0000

Hello everyone,
We also facing similar problem with windows server 2022 and set the sign and seal flags to true before init() as mentioned above and raise the auth level to packet privacy (6). Now didn't get the error events 10036 in windows event log. but still we are getting access denied error [dcerpc.cn_status: nca_s_access_denied (0x00000005)]. Anyone please help to resolve this issue.

Catching JIException in initialise()...5 Exception message --> Access is denied, please make sure that the domain/username/password are correct. [0x00000005]
Error reading NetBios: Access is denied, please make sure that the domain/username/password are correct. [0x00000005]
org.jinterop.dcom.common.JIException: Access is denied, please make sure that the domain/username/password are correct. [0x00000005]
at org.jinterop.dcom.core.JIComServer.init(JIComServer.java:564)
at org.jinterop.dcom.core.JIComServer.initialise(JIComServer.java:483)
at org.jinterop.dcom.core.JIComServer.<init>(JIComServer.java:450)
at com.analyse.WMITest.getWMILocatorAndConnect(WMITest.java:35)
at com.analyse.WMITest.main(WMITest.java:85)
Caused by: rpc.FaultException: Received fault. (unknown)
at rpc.ConnectionOrientedEndpoint.call(ConnectionOrientedEndpoint.java:136)
at rpc.Stub.call(Stub.java:117)
at org.jinterop.dcom.core.JIComServer.init(JIComServer.java:560)
... 4 more</init>

How can I raise the activation authentication level to RPC_C_AUTHN_LEVEL_PKT_INTEGRITY

Phil Harron — Wed, 19 Oct 2022 13:02:19 -0000

Hi Tobias, did you ever find a solution - I am facing a similar problem.
Many thanks
Phil

Recent posts to Discussion

jIntegra and ntlmv2

Unable to connect COM server - Exception java.lang.ArrayIndexOutOfBoundsException: Index 16 out of bounds for length 16

Unable to connect AS400 application with PC5250 emulator using J interop

How can I raise the activation authentication level to RPC_C_AUTHN_LEVEL_PKT_INTEGRITY

How can I raise the activation authentication level to RPC_C_AUTHN_LEVEL_PKT_INTEGRITY

How can I raise the activation authentication level to RPC_C_AUTHN_LEVEL_PKT_INTEGRITY

How can I raise the activation authentication level to RPC_C_AUTHN_LEVEL_PKT_INTEGRITY

How can I raise the activation authentication level to RPC_C_AUTHN_LEVEL_PKT_INTEGRITY

How can I raise the activation authentication level to RPC_C_AUTHN_LEVEL_PKT_INTEGRITY

How can I raise the activation authentication level to RPC_C_AUTHN_LEVEL_PKT_INTEGRITY