forked from kohsuke/jcifs
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathindex.xml
2719 lines (2490 loc) · 152 KB
/
index.xml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
<?xml version="1.0"?>
<proj>
<title>JCIFS</title>
<short>The Java CIFS Client Library</short>
<desc>
JCIFS is an <a href="http://www.opensource.org/docs/definition_plain.php">Open Source</a> client library that implements the CIFS/SMB networking protocol in 100% Java. CIFS is the standard file sharing protocol on the Microsoft Windows platform (e.g. Map Network Drive ...). This client is used extensively in production on large Intranets.
</desc>
<news>
<!-- entry>
<title></title>
<sub></sub>
<desc>
</desc>
</entry-->
<entry>
<title>jcifs-1.3.17 released / SO_TIMEOUT Fixed, Connect Timeout Control Added</title>
<sub>posted by Mike, October 18, 2011</sub>
<desc>
The <code>jcifs.smb.client.soTimeout</code> property, which controls how long the client will wait to read data from a server, was broken in the previous release (1.3.16). Not only was it broken but no SO_TIMEOUT was specified at all meaning if a server became unresponive, JCIFS could hang for an uncontrollably long time. This behavior of this property has been restored.
<p/>
Additionally, a new <code>jcifs.smb.client.connTimeout</code> has been added which specifies the number of milliseconds that the client will wait to connect to a server (how long it will wait for a response to the TCP SYN). This can be very useful when trying to communicate with many servers in parallel.
</desc>
</entry>
<entry>
<title>jcifs-1.3.16 released / SO_TIMEOUT, Disconnect Improvements, copyTo() Exceptions and more</title>
<sub>posted by Mike, June 25, 2011</sub>
<desc>
This release includes the following minor fixes and improvements:
<ul>
<li>
JCIFS now uses the InetSocketAddress class to explicitly bind and set the SO_TIMEOUT on client sockets before they are connected. This makes the SO_TIMEOUT effective when the target server socket is not listening and the client OS socket implementation takes a long time for the dropped SYN to timeout. This may significantly reduce resource consumption in applications that use multiple threads to constantly query servers that may not be listening.
</li><li>
When disconnecting a transport, new clauses have been added to better reset transport state whereas previously transports could get stuck in a disconnected state for unnecessarily long periods of time.
</li><li>
A new property jcifs.smb.client.ignoreCopyToException has been added. When set to "true" (the default), the SmbFile.copyTo() method will ignore (but log) exceptions trying to copy individual files or directories (such as because of a permissions error). To maintain backward compatibility, the default value of this property is "true" (exceptions are ignored). Setting this property to "false" will cause any exception that occurs trying to copy an individual file or directory to be thrown out of copyTo and abort the copy operation at the point of failure.
</li><li>
If an authentication exception occurs trying to connect to a server that has multiple IP addresses, JCIFS will not attempt to connect to more than one IP addresses because doing so could result in an account lockout.
</li><li>
The SID resolver code incorrectly resolved SIDs of an ACE in blocks of at most 10 where it should have used a limit of 64. This performance issue has been fixed.
</li><li>
JCIFS will not throw the artifical "Access is denied" error if the special NtlmPasswordCredential.ANONYMOUS credential is used explicitly (whereas normally JCIFS will deliberately throw an SmbAuthException if a login results in a guest login or if the anonymous identity is used).
</li><li>
The NetrServerEnum2 RAP call used incorrect parameter descriptiors which could result in "SmbException: 2320" errors trying to list domains and servers from the local NetBIOS browse service.
</li><li>
The NTLMSSP AUTHENTICATE_MESSAGE (aka "Type 2 Message") encoding routine incorrectly left out the TargetName field (although this had no effect on CIFS client behavior).
</li>
</ul>
<p/>
The JCIFS Team would like to thank IOPLEX Software for contributing to this work.
</desc>
</entry>
<entry>
<title>jcifs-1.3.15 released / Minor DcerpcHandle Locking Adjustments</title>
<sub>posted by Mike, October 7</sub>
<desc>
Minor adjustments have been applied to DcerpcHandle locking routines in the SID class to fix sporadic occurances of "All pipe instances are busy" errors under high load.
<p/>
The JCIFS Team would like to thank <a href="http://vivisimo.com/">Vivísimo, Inc.</a> for supporting this work. Vivísimo provides enterprises with innovative search solutions to find, access, and manipulate all content. For consumer web searches, Vivísimo offers Clusty.com.
</desc>
</entry>
<entry>
<title>jcifs-1.3.14 released / NetBIOS Node Status Disabled and Named Pipe Errors</title>
<sub>posted by Mike, February 11, 2010</sub>
<desc>
JCIFS will no longer do a NetBIOS Node Status to determine the server hostname because it seems some servers no longer respond to it. Under high load "All pipe instances are busy" errors could occur. This has been fixed by adding a lock to ensure that the MSRPC bind and pipe open request are performed together.
</desc>
</entry>
<entry>
<title>jcifs-1.3.13 released / Deadlock Fixed, OSX Snow Leopard, and EMC</title>
<sub>posted by Mike, January 5, 2010</sub>
<desc>
Locking throughout the transport layer has been rewritten. This should fix the long standing deadlock that has been reported in the past. Note that these are significant changes to the I/O layer. The package should be tested carefully before being deployed.
<p/>The size of the transient input buffer used to read the SMB_COM_NEGOTIATE response has been doubled to accommodate a security blob (as observed with OSX Snow Leopard). A signing issue reading data from an EMC server has been fixed. NTLMSSP logging has been improved.
<p/>
The JCIFS Team would like to thank <a href="http://www.stone-ware.com/">Stoneware, Inc.</a> for supporting this work. Stoneware, Inc. provides innovative software that enables organizations to build their own 'private' cloud for simplified access to all of their web, Windows or hosted applications and services.
</desc>
</entry>
<entry>
<title>JCIFS U.S. Export Control Classification Numbers (ECCN)</title>
<sub>posted by Mike, August 27, 2009</sub>
<desc>
JCIFS uses cryptography including RC4 128 (for NTLMv2) and AES 256 (for Kerberos) for authentication, digital signatures and encryption.
Products that use cryptography and which are exported from the U.S. to other countries are supposed to obtain an export classification.
The United States Department of Commerce Bureau of Industry and Security (BIS) has issued two ECCNs for the JCIFS package:
<blockquote>
5D002.C.1 License Exception TSU<br/>
5D992.C (for binary only distribution of "mass market" software)
</blockquote>
For commercial products that ship JCIFS in binary form, you will need to reference the second ECCN in your export classification requests.
For further information such as CCATS numbers, please contact ioplex<i style="font-style: normal;">@</i>gmail.com.
<p/>
The JCIFS Team would like to thank BIS for their excellent service and patience.
</desc>
</entry>
<entry>
<title>jcifs-1.3.12 released / Two NullPointerExceptions Fixed and DFS</title>
<sub>posted by Mike, August 14, 2009</sub>
<desc>
If NtlmPasswordAuthentication.ANONYMOUS was used, CAP_EXTENDED_SECURITY could be incorrectly turned off resulting in a NullPointerException. If a DFS server did not return any referrals, a NullPointerException could occur. Both of these exceptions have been corrected. Also, JCIFS could become confused when connecting to a server that also happened to be a DFS root server. This issue has been fixed.
</desc>
</entry>
<entry>
<title>jcifs-1.3.11 released / NTLMv2 Calculation Correction</title>
<sub>posted by Mike, July 21, 2009</sub>
<desc>
The nTOWFv2 computation for NTLMv2 authentication was slightly wrong in that it upper-cased the domain. This had no effect on JCIFS but it has been corrected for technical accuracy.
</desc>
</entry>
<entry>
<title>jcifs-1.3.10 released / Bugfix for SmbException: The parameter is incorrect</title>
<sub>posted by Mike, June 4, 2009</sub>
<desc>
This release fixes a bug that could sporadically trigger a "The parameter is incorrect" error.
<p/>
The JCIFS Team would like to thank IOPLEX Software for contributing to this work.
IOPLEX Software has many years of experience with HTTP Single Sign-On, Kerberos, NTLM, Active Directory, MSRPC and related networking protocols.
</desc>
</entry>
<entry>
<title>jcifs-1.3.9 released / Robust Retry of Replicated DFS Targets, copyTo Fix, UTF-16LE, and More</title>
<sub>posted by Mike, May 30, 2009</sub>
<desc>
This package adds the following fixes:
<ul>
<li>
JCIFS will now iteratively try multiple replicated DFS targets if some are not enabled (whereas previously JCIFS would quit if the first root target was not accessible)
</li>
<li>
Fixed "Invalid operation for ????? service" error when querying DFS
</li>
<li>
SmbFile.copyTo will now copy files larger than 4GB
</li>
<li>
All instances of UnicodeLittleUnmarked have been changed to UTF-16LE (for platforms like Android)
</li>
</ul>
<p/>
The JCIFS Team would like to thank <a href="http://www.metacarta.com/">MetaCarta, Inc.</a> for supporting this work. MetaCarta, Inc., a provider of geographic intelligence solutions, offers users map-driven geographic search, geographic referencing, and data visualization capabilities.
</desc>
</entry>
<entry>
<title>jcifs-1.3.8 released / RC4 Implemented, Java 1.4 Now Supported Again</title>
<sub>posted by Mike, Mar 29, 2009</sub>
<desc>
RC4 has been implemented and therefore JCIFS no longer requires Java 1.5 update 7 or an implementation that provides RC4. Java 1.4 should work as well as it did prior to JCIFS 1.3.
</desc>
</entry>
<entry>
<title>jcifs-1.3.7 released / Share Security Fixed</title>
<sub>posted by Mike, Mar 18, 2009</sub>
<desc>
Share security was broken in both 1.2 and 1.3. It has been fixed. Note that share security is considered deprecated and is only supported by older software like Windows 98 and Samba 3.0.
</desc>
</entry>
<entry>
<title>jcifs-1.3.5 released / Stand-alone DFS with IP Address Hostname Issue Fixed</title>
<sub>posted by Mike, Mar 12, 2009</sub>
<desc>
Stand-alone DFS did not work properly if the hostname used in the SMB URL was an IP address and not a DNS or NetBIOS hostname. This issue has been fixed.
<p/>
The JCIFS Team would like to thank Vivísimo, Inc. for supporting this work. Vivísimo provides enterprises with innovative search solutions to find, access, and manipulate all content. For consumer web searches, Vivísimo offers Clusty.com.
</desc>
</entry>
<entry>
<title>jcifs-1.3.4 released / Parameter Words, Status Codes and Minor Fixes</title>
<sub>posted by Mike, Mar 9, 2009</sub>
<desc>
This release includes some minor protocol adjustments and the addition of some more common status code text.
</desc>
</entry>
<entry>
<title>jcifs-1.3.3 released / NTLMv2 Requirements, "Invalid parameter" Error, and NetBIOS Broadcast Lookup Timeouts</title>
<sub>posted by Mike, Jan 25, 2009</sub>
<desc>
NTLMv2 support requires the RC4 cipher. Note that Sun's Java did not include RC4 until Java 1.5 update 7.
<p/>
If the above mentioned RC4 cipher was not available, an "Invalid parameter" error would occur. Logic has been corrected so that the more informative "Cannot find any provider supporting RC4" error is reported instead.
<p/>
To date, JCIFS has always tried NetBIOS broadcast lookups in favor of DNS which frequently resulted in a 6 second delay if the <tt>jcifs.resolveOrder</tt> property was not adjusted. This behavior has been changed to try DNS before NetBIOS broadcast lookups which should result in much less frequent delays when using default settings. To restore the old behavior, simply set <tt>jcifs.resolveOrder=LMHOSTS,BCAST,DNS</tt>.
<p/>
The NTLMSSP code would not fallback to ASCII if Cp850 was not available (which is the case with stock JREs). This issue has been fixed.
</desc>
</entry>
<entry>
<title>jcifs-krb5-1.3.1 released / Kerberos 5 Package Updated</title>
<sub>posted by Mike, Dec 22, 2008</sub>
<desc>
The Kerberos package been updated to 1.3.1. The KerberosAuthExample.java example has been independently verified to work. Special thanks to Mr. Shun for contributing this package.
</desc>
</entry>
<entry>
<title>jcifs-1.3.2 released / Samba DFS</title>
<sub>posted by Mike, Dec 22, 2008</sub>
<desc>
Accessing a DFS link on Samba directly could result in an error. This issue has been fixed. Samba 3.0.x does not support raw NTLMSSP and therefore the new default JCIFS settings that use NTLMSSP break JCIFS and Samba 3.0.x compatibility. To work-around, turn off extended security and use NTLMv1 by setting <tt>jcifs.smb.client.useExtendedSecurity=false</tt> and <tt>jcifs.smb.lmCompatibility=0</tt>.
</desc>
</entry>
<entry>
<title>jcifs-1.3.1 released / NTLM HTTP Filter Fixed, DFS Adjustments and More</title>
<sub>posted by Mike, Nov 30, 2008</sub>
<desc>
The NTLM HTTP Filter was broken in 1.3.0. Setting jcifs.smb.client.useExtendedSecurity to false fixes the issue. This property has been changed in the Filter init method. Some minor DFS changes have been applied that users claim prevent issues in certain DFS scenarios. The NTLMv2 code has been refined in several ways (in particular the getNTLMv2Response method has changed). The NtlmPasswordAuthentication constructor will now split the username if it appears to be composed of a domain and username.
</desc>
</entry>
<entry>
<title>jcifs-1.3.0 released / NTLMv2 Support</title>
<sub>posted by Mike, Oct 25, 2008</sub>
<desc>
NTLMv2 has been fully implemented and will be used by default.
<p/>
To emulate the old behavior you must set <tt>jcifs.lmCompatibility = 0</tt> and <tt>jcifs.smb.client.useExtendedSecurity = false</tt> (new defaults are <tt>3</tt> and <tt>true</tt> respectively).
<p/>
NTLMv2 and NTLMv1 over NTLMSSP has been fairly well tested with and without SMB signing negotiated and various NTLMSSP flags (e.g. <tt>NTLMSSP_NEGOTIATE_NTLM2</tt>).
<p/>
Note: The NTLM HTTP Filter does not and can never support NTLMv2 as it uses a main-in-the-middle technique that is broken by NTLMSSP's "target information" used in computing password hashes. However, the existing Filter should continue to work.
<p/>
The JCIFS Team would like to thank MetaCarta, Inc. for supporting this work. MetaCarta, Inc., a provider of geographic intelligence solutions, offers users map-driven geographic search, geographic referencing, and data visualization capabilities.
</desc>
</entry>
<entry>
<title>jcifs-1.2.25 released / ArrayIndexOutOfBoundsException, copyTo and IBM iSeries Fixes</title>
<sub>posted by Mike, Oct 20, 2008</sub>
<desc>
An ArrayIndexOutOfBoundsException could occur listing a large number of shares (DCERPC response larger than 65535 bytes). The <tt>copyTo</tt> method could deadlock if the server was disconnected during a copy. The IBM iSeries server can send the NativeFileSystem field in ASCII even though Unicode was negotiated and it requires the '?????' service string (and not 'A:'). These issues have been fixed.
<p/>
The JCIFS Team would like to thank MetaCarta, Inc. for supporting this work. MetaCarta, Inc., a provider of geographic intelligence solutions, offers users map-driven geographic search, geographic referencing, and data visualization capabilities.
</desc>
</entry>
<entry old="true">
<title>jcifs-1.2.24 released / Stand-Alone DFS Fixed</title>
<sub>posted by Mike, Jul 23, 2008</sub>
<desc>
The recent domain-based DFS work broke stand-alone DFS. This has been fixed. Both stand-alone and domain-based DFS should work properly now.
<p/>
Note: The 1.2.23 was a dud - it did not really contain the said fix.
</desc>
</entry>
<entry old="true">
<title>jcifs-1.2.22 released / InterruptedIOExceptions, Invalid parameter Exceptions, DFS and more</title>
<sub>posted by Mike, Jun 25, 2008</sub>
<desc>
The SmbFileInputStream methods will now throw InterruptedIOExceptions where apppropriate whereas previously they would throw SmbExceptions with a root cause of TransportException with a root cause of InterruptedException.
<p/>
If SmbSession.send() threw an exception it could trigger "Invalid parameter" exceptions on subsequent requests.
<p/>
An InterruptedException in the NameServiceClient was being caught and ignored. It will now be re-thrown as an IOException so that all threads used with/by JCIFS can be triggered to return immediately.
<p/>
A jcifs.smb.client.dfs.disabled property has been added to disable domain based DFS so that JCIFS can be configured not to try and fail to resolve paths as domain paths in non-domain environments (e.g. on the local machine).
<p/>
The getSecurity and getShareSecurity methods will now return null if no DACL is present on a file whereas previously it would return an empty array. This allows the caller to distinguish between an object that has a DACL with no elements and one that has no DACL at all.
<p/>
The JCIFS Team would like to thank MetaCarta, Inc. for supporting this work. MetaCarta, Inc., a provider of geographic intelligence solutions, offers users map-driven geographic search, geographic referencing, and data visualization capabilities.
</desc>
</entry>
<entry old="true">
<title>jcifs-1.2.21 released / DFS Cache Bugfix</title>
<sub>posted by Mike, May 28, 2008</sub>
<desc>
The DFS cache was not properly synchronized. This has been fixed.
The trusted domains are now looked up with <1C> NetBIOS lookups to speed discovery.
<p/>
Thanks to Ronny S. for reporting these issues.
<p/>
</desc>
</entry>
<entry old="true">
<title>jcifs-1.2.19 released / DFS Roots on non-Domain Controllers</title>
<sub>posted by Mike, Apr 6, 2008</sub>
<desc>
This release adds proper support for domain based DFS roots. Previously JCIFS could not see DFS roots that were not hosted on domain controllers. JCIFS will now properly discover and cache DFS topology information using a series of referrals.
The new code also eliminates the now-obsolete behavior of building a merged list of shares across hosts.
A new NetrDfsEnumEx RPC has been added.
Two new properties have been added: jcifs.smb.client.dfs.ttl and jcifs.smb.client.dfs.strictView.
Two SmbComOpenAndX parameters were incorrectly swapped which could cause failure on Windows 98.
<p/>
The JCIFS Team would like to thank MetaCarta, Inc. for supporting this work. MetaCarta, Inc., a provider of geographic intelligence solutions, offers users map-driven geographic search, geographic referencing, and data visualization capabilities.
</desc>
</entry>
<entry>
<title>jcifs-1.2.18 released / DCERPC, Robust Recovery, URL Decoding, NPEs and Much More</title>
<sub>posted by Mike, Feb 18, 2008</sub>
<desc>
This release includes a few significant fixes for DCERPC related issues. It also includes numerous minor fixes for issues that have accumulated over time. The issues that have been fixed are as follows:
<ul>
<li>
The SID.getServerSid() method could fail with NetApp servers due to a "generic" mask values. The mask has been changed to 0x00000001 which corresponds to an LsaOpenPolicy mask of POLICY_VIEW_LOCAL_INFORMATION.
</li><li>
The LsaPolicyHandle class would not throw an error if the LsarOpenPolicy2 call failed. This has been fixed.
</li><li>
If a share was unshared while JCIFS was in the middle of reading files from it, the transport could enter an error state from which it could not immediately recover if the share was subsequently restored. A small change to SmbTransport.doRecv() fixes this problem.
</li><li>
The SmbFile constructor could inappropriately URL decode the authority component of SMB URLs.
</li><li>
The NTLM HTTP Filter documentation has been updated.
</li><li>
An Invalid state: 4 error has been fixed.
</li><li>
A NetBIOS name service issue caused by Jetdirect printers has been fixed.
</li><li>
An ArrayIndexOutOfBounds exception in the SmbException class has been fixed.
</li><li>
A NullPointerException in SmbSession.getChallengeForDomain() has been fixed.
</li><li>
A NullPointerException in NbtAddress related to hosts without adequate localhost address configuration has been fixed.
</li><li>
An ArrayIndexOutOfBounds exception could be thrown if a server requires NTLMv2. This exception has been replaced with a more informative one.
</li><li>
The SmbSessionSetup constructor will now compare the challenge and encryptionKey using Arrays.equals instead of == to satisfy unforseen use-cases that otherwise trigger an NT_STATUS_ACCESS_VIOLATION.
</li>
</ul>
The JCIFS Team would like to thank Vivísimo, Inc. for supporting this work. Vivísimo provides enterprises with innovative search solutions to find, access, and manipulate all content. For consumer web searches, Vivísimo offers Clusty.com.
<p/>
The JCIFS Team would like to thank IOPLEX Software for contributing to this work.
IOPLEX Software has many years of experience with HTTP Single Sign-On, Kerberos, NTLM, Active Directory, MSRPC and related networking protocols.
IOPLEX Software's Plexcel extension for PHP provides unmatched integration with Active Directory for PHP applications.
</desc>
</entry>
<entry>
<title>Alfresco releases Java CIFS server under GPL</title>
<sub>posted by Mike, Nov 2, 2007</sub>
<desc>
<a href="http://www.alfresco.com/">Alfresco</a> have announced the release of the <i>JLAN Shared File Drive Interface</i> under the terms of the Gnu General Public License (GPL). JLAN includes a CIFS server written in Java, as well as several other Java-based network components.
<p/>
"I am very excited about this Open Source contribution", said Chris Hertel, Samba Team member and co-founder the jCIFS project. "Every Open Source CIFS implementation adds to the community's understanding, and to the utility of the protocol itself."
<p/>Their <a href="http://www.alfresco.com/media/releases/2007/10/jlan1007/">press release</a> has a link to the source code at the bottom of the page.
</desc>
</entry>
<entry old="true">
<title>jcifs-1.2.17 released / Minor Fix</title>
<sub>posted by Mike, Aug 15, 2007</sub>
<desc>
A try / catch clause that was accidentally introduced in a previous release has been removed.
</desc>
</entry>
<entry>
<title>jcifs-1.2.16 released / Domain-Based DFS Support</title>
<sub>posted by Mike, Aug 2, 2007</sub>
<desc>
With this release, JCIFS now supports domain-based DFS. With domain-based DFS, clients access DFS roots under the DNS domain name like \\example.com\dfs\foo so that users do not need to remember server names. However, for clients to work with these DFS roots they have to be prepared to connect to each domain controller as necessary to find the target share and successfully authenticate. JCIFS now includes this retry logic. JCIFS will also do something that it seems even Windows clients do not do - if you list the shares of a domain (e.g. <tt>(new SmbFile("smb://example.com/")).listFiles()</tt>), JCIFS will build a merged list of all shares on all domain controllers.
<p/>
Note that these changes are fairly significant. Whenever JCIFS tries to connect to a server this new logic is used. So if anyone notices anything out of the ordinary please report it to the JCIFS mailing list.
<p/>
The JCIFS Team would like to thank MetaCarta, Inc. for supporting this work. MetaCarta, Inc., a provider of geographic intelligence solutions, offers users map-driven geographic search, geographic referencing, and data visualization capabilities.
</desc>
</entry>
<entry>
<title>jcifs-1.2.15 released / NetApp Compatibility, SMB signing with DFS and More</title>
<sub>posted by Mike, Jul 16, 2007</sub>
<desc>
This release includes some significant changes. Most of these changes are related to NetApp compatibility. The changes in this release include the following:
<ul>
<li>An SMB signing failure related to DFS that could result in "Access denied" errors has been fixed.</li>
<li>The DCERPC bind did not exactly mimic Windows which uses SMB_COM_{WRITE,READ}_ANDX. We were using TransactNmPipe throughout which could result in an 'Incorrect function' error when querying the LSA on a NetApp server. JCIFS now implements the bind exactly like Windows to help ensure compatibility with other servers.</li>
<li>Other changes related to NetApp compatibility include falling back to SamrConnect2 if a DCERPC_FAULT_OP_RNG_ERROR error occurs, more closely mimicking the SMB_COM_NT_CREATE_ANDX "extended" response, adjusting various RPC handle operation access masks, uncommenting some padding code that was commented out for what appeared to be a NetWare problem, disabling some logic to use port 139 if the jcifs.netbios.hostname was set and finally adding code to include LsarQosInfo structures in the MSRPC bind.</li>
<li>Some new error code information has been added.</li>
<li>Constants for common SIDs have been added to the SID class.</li>
<li>The SID.getGroupMemberSids() method will now return an empty SID array if the SID is not of type SID_TYPE_DOM_GRP or SID_TYPE_ALIAS.</li>
<li>A minor performance flaw in the DCERPC code was found and fixed.</li>
</ul>
<p/>
The JCIFS Team would like to thank <a href="http://www.simple-groupware.de/">Simple Groupware Solutions</a> and the Leibniz Computing Centre Munich (LRZ) for supporting this work.
<p/>
The JCIFS Team would like to thank Vivísimo, Inc. for supporting this work. Vivísimo provides enterprises with innovative search solutions to find, access, and manipulate all content. For consumer web searches, Vivísimo offers Clusty.com.
</desc>
</entry>
<entry old="true">
<title>jcifs-1.2.14 released / SID.getGroupMemberSids() and the SAMR Interface</title>
<sub>posted by Mike, Jun 20, 2007</sub>
<desc>
A new <tt>SID.getGroupMemberSids()</tt> method has been added that will return the local group membership of SID (aka it's aliases). The SAMR interface has been added to the dcerpc code with the <tt>SamrEnumerateAliasesInDomain</tt> RPC and numerous other calls necessary to negotiate the various handles.
<p/>
The JCIFS Team would like to thank <a href="http://vivisimo.com/">Vivísimo, Inc.</a> for supporting this work. Vivísimo provides enterprises with innovative search solutions to find, access, and manipulate all content. For consumer web searches, Vivísimo offers Clusty.com.
</desc>
</entry>
<entry>
<title>jcifs-krb5-1.2.13 released / Kerberos Authentication Support Update</title>
<sub>posted by Mike, Feb 8, 2007</sub>
<desc>
The stock jcifs-1.2.13 package has been patched by a third party to support Kerberos 5 / SPNEGO extended security authentication. Additionally, SMB signing and DFS issues that existed in jcifs-krb5-1.2.9 have been fixed.
<p/>
The JCIFS team has compiled the package and confirmed that it works with at least the one test case provided (<tt>examples/KerberosAuthExample.java</tt>) but otherwise the code should be used with caution.
<p/>
Great thanks again to Mr. Shun from Japan for contributing this work.
</desc>
</entry>
<entry old="true">
<title>jcifs-1.2.13 released / Share ACLs, DFS Fixes and NoRouteToHostException Fallback</title>
<sub>posted by Mike, Jan 22, 2007</sub>
<desc>
A new <tt>SmbFile.getShareSecurity()</tt> method that uses a new <tt>MsrpcShareGetInfo/ShareInfo502</tt> RPC has been added. This will return the ACL for a share as opposed to the ACL for the directory shared. See the API documentation for details. Several DFS issues have been identified and fixed. If JCIFS receives a <tt>NoRouteToHostException</tt> on port 445 it will now try to fallback to port 139. This code has been tested fairly well already. There have been no changes since b4.
<p/>
The JCIFS Team would like to thank <a href="http://www.metacarta.com/">MetaCarta, Inc.</a> for supporting this work. MetaCarta, Inc., a provider of geographic intelligence solutions, offers users map-driven geographic search, geographic referencing, and data visualization capabilities.
</desc>
</entry>
<entry old="true">
<title>jcifs-1.2.12 released / NtTransQuerySecurityDesc, DFS Bugfixs and SID Adjustments</title>
<sub>posted by Mike, Dec 27, 2006</sub>
<desc>
The <tt>NtTransQuerySecurityDesc</tt> request could specify a data buffer that could be too small for the response. As a result the response was not decoded properly and an error would occur. The response will now be decoded properly if the buffer is too small and the buffer size has been increased from 4096 to 32768.
<p/>
The <tt>getSecurity()</tt> method did not work over DFS. A very small but potentially significant change has been made to the DFS code. I do not have a sophisticated DFS test environment so please pay special attention to JCIFS with DFS and report any problems to the JCIFS mailing list.
<p/>
The <tt>toString()</tt> method of the SID class has been changed back to the old behavior of returning only the numeric SID representation. This was done not only for backward compatibility with previous versions of JCIFS but because conceptually the textual representation of a SID is not it's resolved account name. A new <tt>toDisplayString</tt> method has been added to return the resolved Windows ACL editor text (as <tt>toString()</tt> did in the 1.2.11 release). The <tt>toSidString()</tt> method has been removed. The <tt>getDomainName()</tt> and <tt>getAccountName()</tt> methods have not changed.
</desc>
</entry>
<entry old="true">
<title>jcifs-1.2.11 released / SID Class Adjustments</title>
<sub>posted by Mike, Dec 9, 2006</sub>
<desc>
The 1.2.11 release is now final. No serious problems have been reported with the new SID resolution code however some minor adjustments have been made with respect to values returned when a SID has not been resolved (e.g. the associated account was deleted). The SID class API documentation has been updated accordingly.
<p/>
The JCIFS Team would like to thank <a href="http://vivisimo.com/">Vivísimo, Inc.</a> for supporting this work. Vivísimo provides enterprises with innovative search solutions to find, access, and manipulate all content. For consumer web searches, Vivísimo offers Clusty.com.
</desc>
</entry>
<entry old="true">
<title>jcifs-1.2.11b released / SID Resolution</title>
<sub>posted by Mike, Nov 30, 2006</sub>
<desc>
This release significantly expands the SID and ACE classes by using the new MSRPC infrastructure to resolve SIDs to their associated account names. A new <tt>SmbFile.getSecurity()</tt> method has been added which if called with a boolean value of <tt>true</tt> will resolve the SIDs returned within the <tt>ACE[]</tt> array such that <tt>SID.toString()/getDomainName()/getAccountName()</tt> will return text about the account associated with that SID suitable for display to users (e.g. <tt>MYDOM\alice</tt>, <tt>SYSTEM</tt>, etc). Documentation for all associated methods and classes has been added.
<p/>
A fix for a <tt>NullPointerException</tt> within <tt>DcerpcPipeHandle</tt> has been applied.
</desc>
</entry>
<entry old="true">
<title>midlc-0.6.1 released / JCIFS MSRPC Stub Support</title>
<sub>posted by Mike, Nov 30, 2006</sub>
<desc>
The midlc MIDL compatible IDL compiler has been updated to emit stubs for the new JCIFS MSRPC infrastructure. For your convenience the libmba library is included and the Makefile will build a static binary (i.e. you no longer need to install libmba separately). For JCIFS MSRPC stubs use the <tt>-t jcifs</tt> option (the behavior of <tt>-t java</tt> for Jarapac remains).
</desc>
</entry>
<entry old="true">
<title>jcifs-1.2.10 released / Minor Adjustments</title>
<sub>posted by Mike, Nov 24, 2006</sub>
<desc>
The 1.2.10 release is now final. A NetBIOS name service lookup bug has been fixed in addition to several other harmless adjustments.
<p/>
The JCIFS Team would like to thank <a href="http://www.metacarta.com/">MetaCarta, Inc.</a> for supporting this work. MetaCarta, Inc., a provider of geographic intelligence solutions, offers users map-driven geographic search, geographic referencing, and data visualization capabilities.
</desc>
</entry>
<entry old="true">
<title>jcifs-1.2.10b released / MSRPC Support, Long Unicode Share Name Enumeration and Critical Bugfixes</title>
<sub>posted by Mike, Nov 13, 2006</sub>
<desc>
This release contains the following new functionality and fixes:
<ul>
<li>Long Unicode Share Enumeration - The SmbFile.list* methods will now try to use MSRPC to enumerate shares if the target is a server. If the operation should fail for any reason, the client will fall back to trying the older RAP method. This should permit enumerating shares with names that use charsets other than the negotiated OEM "ASCII" encoding, share names that are longer than 12 characters, and arbirarily large lists of shares.</li>
<li>MSRPC Support - MSRPC support has been integrated into JCIFS directly. It should now be possible to add new RPCs (AT jobs, SID/group name resolution, service management, regedit, etc) relatively easily with little knowledge of MSRPC protocols. Look at the jcifs/dcerpc/msrpc/MsrpcShareEnum.java class for an example and ask the mailing list for further instructions.</li>
<li>Apr 24 bugfix - A NullPointerException caused by an error in logic has been fixed.</li>
<li>May 10 bugfix - The client will now detect if the JRE supports Cp850 and set the default jcifs.encoding to US-ASCII if it does not. This will eliminate some NullPointerExceptions that were occuring as a result.</li>
<li>A small update about keep-alives has been added to the NTLM HTTP Authentication document.</li>
<li>Jun 21 bugfix - CLOSE-WAIT sockets left over by read errors have been fixed.</li>
<li>Jul 19 bugfix - Errors caused by using UnicodeLittle as opposed to UnicodeLittleUnmarked have been fixed by ensuring UnicodeLittleUnmarked is used throughout the codebase.</li>
<li>Oct 3 bugfix - Invalid state errors from Transport classes have been fixed. It should be safe to interrupt() JCIFS operations now.</li>
<li>Oct 20 bugfix - Uncontrolled looping due to invalid Transport logic has been fixed.</li>
<li>Oct 25 bugfix - Logic has been added to make domain controller lookups more robust.</li>
<li>Oct 27 bugfix - Failure when using SmbFile.renameTo() with jcifs.smb.client.ssnLimit=1 has been fixed.</li>
<li>Oct 31 bugfix - Endless looping when all WINS servers in a list are unavailable has been fixed.</li>
</ul>
</desc>
</entry>
<entry old="true">
<title>jcifs-krb5-1.2.9 released / Kerberos Authentication Support</title>
<sub>posted by Mike, Sep 13, 2006</sub>
<desc>
This package is stock jcifs-1.2.9 modified to support Kerberos 5 / SPNEGO extended security authentication. Please note that this has no impact on the HTTP Filter which still only supports NTLM.
<p/>
The <tt>examples/KerberosAuthExample.java</tt> is included to demonstrate using this package however note that this example initializes a logon context from a username and password. In the steady-state it is more likely that the user will already have a credential (e.g. via kinit) in which case your application code would be different. You will need to familiarize yourself with JGSS and it's <tt>Krb5LogonModule</tt> to fully utilitize this new feature.
<p/>
WARNING: This package has been reported to work by several users however the code has not been examined carefully by jCIFS maintainers and therefore should be considered highly experimental.
<p/>
Note: This package has been compiled with Java 1.5. It may work with eariler versions of Java but you will need to recompile and experiment to determine what the precise requirements are.
<p/>
Great thanks to Mr. Shun from Japan for contributing this work. Ever notice Japan always get's new stuff first?
</desc>
</entry>
<entry old="true">
<title>jcifs-1.2.9 released / Java 1.5 Issue, jcifs.encoding Documentation</title>
<sub>posted by Mike, Apr 4, 2006</sub>
<desc>
The 1.2.8 release was compiled with Java 1.5.0_06 which under certain conditions could cause the following error: <tt>java.lang.LinkageError: ... Unsupported major.minor version 49.0</tt>. I have rebuilt the entire package using the compiler I used previously (1.4.2_08). Also, the documentation regarding the <tt>jcifs.encoding</tt> property has been updated to clarify the implications of using a non-Internationalized version of the Java runtime.
</desc>
</entry>
<entry old="true">
<title>jcifs-1.2.8 released / Deadlock Fix, ACLs, DFS, NTLM HTTP Filter, and More</title>
<sub>posted by Mike, Mar 24, 2006</sub>
<desc>
There are several significant changes in this release. These include:
<ul>
<li>A deadlock could occur if the client tried to logoff and logon at the same instant. This has been fixed.</li>
<li>It was discovered that in at least some cases "preauthentication" did not work properly. A very simple logical error would cause the wrong signing digest to be installed. This has been fixed.</li>
<li>The ACL patch has been integrated. The <tt>SmbFile.getSecurity()</tt> method is now available.</li>
<li>The <tt>jcifs.smb.client.responseTimeout</tt> and <tt>jcifs.smb.client.soTimeout</tt> values have been increased from 10000ms and 15000ms to 30000ms and 35000ms respectively. Users with crawler type applications will almost certainly want to reduce these values.</li>
<li>Several logical errors in DFS referral handling have been fixed (still no fix for the mystery preemtive behavior observed by Windows clients).</li>
<li>Documentation has been updated significantly.</li>
</ul>
</desc>
</entry>
<entry old="true">
<title>jcifs-1.2.7 released / Transport Error, Filter Changes, Integer Overflow, User Contributed Patches, and More</title>
<sub>posted by Mike, Nov 18, 2005</sub>
<desc>
This release consists of the following changes. Happy Thanksgiving.
<ul>
<li>Some debugging printlns left over from the last release have been removed.</li>
<li>Added setContentLength(0) to two other places for the NTLM HTTP Filter. This is required for HTTP 1.0 clients (e.g. Google appliance servers).</li>
<li>The name service code will now properly resolve DNS names that begin with digits.</li>
<li>Several instances of possible integer overflow have been fixed.</li>
<li>A patch for large read and write support has been added to the patches directory. A patch for reading security descriptors has been added to the patches directory.</li>
<li>If a transport was in error due to a connection timeout it could remain in the error state indefinitely. This issue has been fixed.</li>
</ul>
</desc>
</entry>
<entry old="true">
<title>jcifs-1.2.6 released / Session Management and Filter Fix</title>
<sub>posted by Mike, Oct 7, 2005</sub>
<desc>
It was discovered that redundant sessions could be created. This problem has been fixed but the fix is to simply <i>not</i> remove sessions from the list of sessions for a transport which is a waste of memory after time (although most users should not case as the number of sessions is proportional to the number of distinct credentials used). This will probably need to be revisited in the future. It has been advised that the Filter should call <tt>setStatus()</tt> <i>before</i> <tt>setContentLength(0)</tt>. This change has been implemented.
</desc>
</entry>
<entry old="true">
<title>jcifs-1.2.5 released / Filter Exceptions, Stressing the Transport Layer, and DFS Deadlock Fixed</title>
<sub>posted by Mike, Oct 1, 2005</sub>
<desc>
This release of the JCIFS client consists of the following changes.
<ul>
<li>It was discovered that a flaw in session expiration could cause sessions to expire prematurely. This has been repaired.</li>
<li>If the <tt>jcifs.netbios.hostname</tt> property is set, the client will communicate using only NetBIOS over port 139. This is required for environments that implement a policy restricting users to logging in from certain computers.</li>
<li>Under stress the client could incorrectly attempt to use the invalid "NULL" transport. This has been fixed.</li>
<li>Filter users could experience exceptions due to using the port 0 rather than the default CIFS port.</li>
<li>The client should now handle partial reads and socket exceptions more gracefully.</li>
<li>Under stress, the DFS referral query could cause the client to deadlock. This has been fixed.</li>
</ul>
</desc>
</entry>
<entry old="true">
<title>jcifs-1.2.4 released / Timedout Waiting for Response Exception, Bogus Signature Error, and More</title>
<sub>posted by Mike, Sep 21, 2005</sub>
<desc>
A NetBIOS keep-alive message (received after ~10 minutes) would break message processesing with a <i>timedout waiting for response</i> Exception. This has been fixed.
<p/>
JCIFS would fail to validate responses with a status that is not zero. Assuming we are calculating the verfication signature correctly I can only assume the affected servers choose not to generate the correct signature for error responses (perhaps for DOS reasons). Because JCIFS checked the signature before the message status, an error response would fail with "signature verification failure". This behavior has been changed so that signatures are not verified if the status is non zero.
<p/>
It was discovered that the new transport (as of 1.2.x) could not cleanly recover from temporary server failure (e.g. a restart). This has been fixed. Methods will still throw Exceptions but the moment the server comes back online the client should gracefully recover.
</desc>
</entry>
<entry old="true">
<title>
jcifs-1.2.3 released / Port 445 Fixed</title>
<sub>posted by Mike, Aug 24, 2005</sub>
<desc>
A mistake in the 1.2.2 release broke port 445 communication entirely. It has been fixed. The exact error (with a sufficiently high loglevel) was "Invalid payload size: 1".
</desc>
</entry>
<entry old="true">
<title>jcifs-1.2.2 released / Exception "cannot assign requested address" Fixed, Clusters, NetApp Filer, and More</title>
<sub>posted by Mike, Aug 19, 2005</sub>
<desc>
There have been a number of small fixes. These are:
<ul>
<li>The "cannot assign requested address" exception caused by trying to bind the local address 127.0.0.1 has been fixed.</li>
<li>In a cluster environment the NTLM HTTP Filter could fail with "account currently disabled" or "Access denied" errors due to a deserialization issue of "preauthentication" credentials stored in the <tt>HttpSession</tt>. The initialization of default credentials has been changed however it is not clear that the change will have any effect as I do not have a clustered environment in which to test.</li>
<li>The combination of plain text passwords and Unicode (largely specific to Samba 3) has been fixed.</li>
<li>A bogus debugging statement has been discovered and removed. Who left that in there?!</li>
<li>A <tt>Socket.shutdownOutput()</tt> call has been added to <tt>doDisconnect</tt> as it is believed to reduce spurrious RST frames observed when abruptly shutting down transports. These are believed to be harmless but they have been associated with unsightly messages in Samba log files.</li>
<li>The <tt>copyTo()</tt> method will now check to see if the source path is a child, parent or equal to the destination path and if so throw a <i>Source and destination paths overlap</i> exception.</li>
<li>An additional debugging statement has been added to the NTLM HTTP Filter domain controller interrogation code.</li>
<li>The <tt>getDiskFreeSpace</tt> call could fail with NetApp Filer. It has been repaired.</li>
</ul>
</desc>
</entry>
<entry old="true">
<title>jcifs-1.2.1 released / Signing, setAttributes, getType, and More</title>
<sub>posted by Mike, Jul 4, 2005</sub>
<desc>
The SMB signing code was totally broken in the last release makeing 1.2.0 useless in many environments. It has been reparied.
The setAttributes method did not work on directories. This has been fixed and the masks used to filter attributes been optimized to allow getting and setting all possible attributes based on observed XP behavior.
The getType() method would always return TYPE_SHARE if the SmbFiles were obtained through the listFiles() method. This issue has been fixed - getType() may now also return TYPE_PRINTER and TYPE_NAMEDPIPE (this has been broken for a long time BTW). There have been a variety of other subtle fixes.
</desc>
</entry>
<entry old="true">
<title>jcifs-1.2.0 released / New Transport Layer, Port 445, getDiskFreeSpace</title>
<sub>posted by Mike, May 22, 2005</sub>
<desc>
The transport layer (the code that multiplexes requests from muliple threads over sockets) has occasionally caused trouble over the years. In general it was too complex. To remedy this problem the transport was rewritten and a forked 1.1.19 was released as the "trans" branch. This branch appears to be at stable enough that it is being released as 1.2.
<p/>
The biggest change in this release should not be visible to users (hopefully) although some new features have managed to sneak in as a result of this merger. These new features are:
<ul>
<li>The client will now attempt to connect to port 445 as opposed to port 139. If this connection fails the client will fall-back to port 139.</li>
<li>If a share was disabled while jCIFS was connected an error would occur even if the share was reenabled before the client tried to access it. This has been fixed so that the client will reconnect and complete the current operation transparently.</li>
<li>The getDiskFreeSpace() method could report the wrong value for very large volumes. This has been fixed by adding a new info-level.</li>
<li>Named pipes were broken by changes for DCE/RPC transactions. They have been repaired.</li>
<li>The NetBIOS name resolution code will now use the <i>last</i> resource record in a name query response rather than the first. This appears to be more correct (at least with WMWare adapters on my XP workstation).</li>
<li>The client is generally faster because the transport is simpler. The amount of code for the transport is less than half of what it used to be.</li>
</ul>
Developers writing Java network clients may want to look at the <tt>jcifs.util.transport.*</tt> classes.
</desc>
</entry>
<entry old="true">
<title>jcifs-1.1.11 released / File Corruption Bugfix</title>
<sub>posted by Mike, May 4, 2005</sub>
<desc>
If a file is opened with <tt>SmbFileOutputStream</tt>, written to, and then the client waits for <tt>jcifs.smb.client.soTimeout</tt> without any communication to the target, a subsequent write could zero the contents of the file before the current file index resulting in file corruption. This problem has been fixed. And alternative to upgrading is to use <tt>RandomAccessFile</tt> which does not have this problem.
<p/>
Also in the download area is the "trans" release. This version has a completely rewritten transport layer, proper port 445+139 support as well as the beginnings of new features destined for 2.0. Use with caution - it's green.
</desc>
</entry>
<entry old="true">
<title>jcifs-1.1.10 released / DC Lookup Rewrite</title>
<sub>posted by Mike, Apr 17, 2005</sub>
<desc>
The code used by the NTLM HTTP Filter to lookup and rotate through domain controllers has been considerably simplified. The <code>NtlmChallenge</code> class is now <code>Serializeable</code>, the timeout for rebuilding the filters DC list has been increased from 20 minutes to 10 hours, and the <code>jcifs.netbios.lookupRespLimit</code> default has been reduced to 3.
</desc>
</entry>
<entry old="true">
<title>jcifs-1.1.9 released / Read Error</title>
<sub>posted by Mike, Feb 28, 2005</sub>
<desc>
When multiplexing I/O, if socket buffers fill up such that packets can be read in fragments (i.e. high load), it was possible for the 4 byte NetBIOS header to be read incorrectly resulting in a bogus <code>unexpected EOF reading netbios session header</code> exception. This problem has been fixed. Also, some small javadoc updates have been applied.
</desc>
</entry>
<entry old="true">
<title>jcifs-1.1.8 released / Blocked Threads Again, DC Lookups, Name Service, and More </title>
<sub>posted by Mike, Feb 11, 2005</sub>
<desc>
The blocked thread bug wasn't quite fixed in the last release. A lookup exception (e.g. caused by an unresponsive domain controller) could leave a thread blocked if many requests are being processed simultaneously. Similarly the fix for the DC lookup code wasn't complete enough to handle the unusual scenario where all DCs are unresponsive. Also, a malfomed NetBIOS name query response could cause the name service thread to exit incorrectly. These issues have been fixed. Finally, the URL handling of <tt>smb://@/</tt> (meaning "null" credentials) has been fixed.
</desc>
</entry>
<entry old="true">
<title>jcifs-1.1.7 released / Blocked Threads, DC Lookups, Signatures, and Other Fixes </title>
<sub>posted by Mike, Jan 16, 2005</sub>
<desc>
A bug introduced in a recent release that could cause threads to wait indefinately has been fixed. After time many threads could be blocked resulting in wasted resources. The DC lookup code has been modified to gracefully handle WINS returning an empty list (e.g. due to temporary network failure). A simple fix has been applied that premits SMB signatures to work without specifying preauthentication credentials. The <tt>getAttributes()</tt> method will now return 31 bits of attributes whereas previously it would mask the lower 6 bits that JCIFS actually uses. A bug has been fixed that under certain conditions prevented <tt>copyTo()</tt> from copying entire shares. A try/catch block has been added to <tt>copyTo()</tt> to permit the copy to continue if an error occurs.
</desc>
</entry>
<entry old="true">
<title>jcifs-1.1.6 released / Minor Adjustments</title>
<sub>posted by Mike, Dec 27, 2004</sub>
<desc>
If a variable length 8 bit encoding such as Big5 was used the NTCreateAndX command could fail. This bug has been fixed. If an <tt>SmbFile{Input,Output}Stream</tt> was closed, a subsequent operation could cause the file to be reopened. This behavior is now blocked such that operations performed on a stream after it has been closed will generate an IOException (to conform to java.io streams behavior). Some transport layer synchronization has been adjusted. A <tt>getPrincipal</tt> method has been added to <tt>SmbFile</tt> that will return the <tt>NtlmPasswordAuthentication</tt> object used as credentials for the file or pipe. An adjustment has been made to the <tt>NbtAddress.firstCalledName</tt> method that streamlines communication with domain controllers. The documentation has been updated regarding transparent NTLM authentication in Mozilla and the <tt>available()</tt> method of <tt>SmbFileInputStream</tt>.
</desc>
</entry>
<entry old="true">
<title>jcifs-1.1.5 released / ArrayIndexOutOfBoundsException</title>
<sub>posted by Santa, Dec 17, 2004</sub>
<desc>
It was discovered that an <tt>ArrayIndexOutOfBoundsException</tt> could occur if the list of domain controllers returned by <tt>NbtAddress.getAllByName</tt> was shorter than the list returned in the previous call (possibly because the WINS query timed out and switched to an alternate WINS server). All NTLM HTTP Authentication Filter users should upgrade to prevent this error. Also, the value of <tt>jcifs.netbios.cachePolicy</tt> set by the NTLM HTTP Filter if it is not specified has been doubled to 20 minutes. Finally, some log levels have been increased such that running with <tt>jcifs.util.loglevel = 3</tt> temporarily is actually reasonable in a production environment (must use loglevel > 3 to see individual SMB messages and loglevel > 5 to get hexdumps).
</desc>
</entry>
<entry old="true">
<title>jcifs-1.1.4 released / LMv2 Fix</title>
<sub>posted by Mike, Dec 7, 2004</sub>
<desc>
Two bugs regarding the upcasing of domain and username fields with LMv2 authentication (used with lmCompatibility = 3) have been fixed. Additionally the firstCalledName/nextCalledName methods changed in 1.1.0 have been changed back to the old behavior. The change was not warranted as it did not emulate Windows behavior.
</desc>
</entry>
<entry old="true">
<title>jcifs-1.1.3 released / Concurrency Error Fixed</title>
<sub>posted by Mike, Nov 30, 2004</sub>
<desc>
A concurrency error that was introduced with the <tt>getChallengeForDomain()</tt> code used by the NTLM HTTP Filter has been repaired.
</desc>
</entry>
<entry old="true">
<title>jcifs-1.1.2 released / Bogus Debugging Statement</title>
<sub>posted by Mike, Nov 2, 2004</sub>
<desc>
Opps! A harmless println statement that found it's way into the last release has been removed.
</desc>
</entry>
<entry old="true">
<title>jcifs-1.1.1 released / logonShare and DCE Pipe Fixes</title>
<sub>posted by Casper, Oct 31, 2004</sub>
<desc>
The <tt>jcifs.smb.client.logonShare</tt> (and thus the JCIFSACL NTLM HTTP Filter example) did not work. It would not restrict users to those found in the ACL and would instead permit all authenticated users. This has been fixed. A bug was discovered and fixed in the named pipe code. If a specific sequence of reads were performed the pipe could become corrupted. This fix is necessary for multi-pdu DCE requests to work. A small bug in the new <tt>NbtAddress.getAllByName()</tt> method has been repaired. It will now broadcast for a name if a WINS address was not provided.
</desc>
</entry>
<entry old="true">
<title>jcifs-1.1.0 released / NTLM HTTP Authentication Improvements</title>
<sub>posted by Mike, Oct 1, 2004</sub>
<desc>
There have been significant changes that should improve the reliability and overall behavior of JCIFS particularly for users of the <tt>NtlmHttpFilter</tt>.
<ul>
<li>NbtAddress.get<b>All</b>ByName - The <tt>NbtAddress.getAllByName()</tt> method has been implemented that will return all RDATA records for a NetBIOS name. Thus, you can now retrieve the full list of domain controllers with <tt>NbtAddress.getByName( "MYDOM", 0x1C, null, null )</tt>. The old behavior of returning a random entry from the <tt>getByName</tt> method has been eliminated.</li>
<li>SYN Timeout - The socket code has been modified to employ the transport thread when opening a new connection. This eliminates the annoying 1min+ hang that occurs trying to connect to a non-existant but routable addresss (i.e. the single threaded <tt>SmbCrawler</tt> example is relatively fast now).</li>
<li>SmbSession.getChallengeForDomain - A new method has been added to retrieve an object that encapsulates both the server session key (a.k.a. challenge) and the <tt>UniAddress</tt> from which it came. This method is used solely by the NTLM HTTP Authentication Filter to eliminate the possibility for a different domain controller to be queried in the middle of client nogotiation. Prior to this release this could result in temporary authentication failures. This code uses the new <tt>getAllByName</tt> method to build a list of domain controllers suitable for authenticating web clients. The clent will rotate evenly through the list and remove entries that are unresponsive. This makes the filter very resilent to domain controller failures.</li>
<li>Session Expiration - because of the above changes the client will now proactively close idle sessions. This is particularly pertainent to the NTLM HTTP Filter which really only touches the session when it is first created as the resulting credentials are cached in the user's HTTP session.</li>
<li>Read Bug - A read bug in JCIFS that affected EMC Celera servers has been fixed.</li>
<li>NetBIOS CalledName - The <tt>firstCalledName/nextCalledName</tt> methods have been modified to try <tt>SMBSERVER*</tt> first and fall back to other names. This should eliminate a round trip during session establishment in newer environments.</li>
</ul>
Finally, I have updated the sample <a href="view-source:http://jcifs.samba.org/src/examples/web.xml">web.xml</a>. It should be used as a stationary in all production environments.
</desc>
</entry>
<entry old="true">
<title>jcifs-1.0.1 released / Guest Account Broken</title>
<sub>posted by Mike, Sep 6, 2004</sub>
<desc>
The guest account fix released 6 hours ago broke guest access entirely. The original fix has been re-applied but with the bad test condition corrected.
</desc>
</entry>
<entry old="true">
<title>jcifs-1.0.0 released / 5 Years and Beyond</title>
<sub>posted by Mike, Sep 6, 2004</sub>
<desc>
According to the <a href="http://freshmeat.net/projects/jcifs/">freshmeat page</a>, JCIFS is 5 years old today (vote for us!). The project has come a long way in those years. Its features now include:
<ul>
<li>
The <a href="src/docs/ntlmhttpauth.html">NTLM HTTP Authentication Filter</a>, which adds easy Single Sign On (SSO) functionality to Java Servlet containers, is clearly the most popular feature of JCIFS. Eric did a great job of deciphering the details of <a href="http://davenport.sourceforge.net/ntlm.html">that protocol</a>. The filter is mind-numbingly easy to install as all it requires is the JCIFS jar and a filter section in your <a href="view-source:http://jcifs.samba.org/src/examples/web.xml">web.xml</a> with two or three init parameters [1].
</li><li>
The performance of JCIFS is one of its more surprising achievements. Consider the client can enumerate 5GB of files and directories in less than 10 seconds [2]. To reduce memory usage and increase concurrency JCIFS automatically reuses existing transports and sessions. One nice artifact of this design is that the NTLM HTTP Authentication Filter scales to thousands of active clients. And because the negotiated credentials are cached in the user's HTTP session the number of concurrent user's supported can be many times greater than that.
</li><li>
The <a href="src/docs/api/jcifs/smb/SmbFile.html#copyTo(jcifs.smb.SmbFile)">SmbFile.copyTo()</a> method is a venerable feature in itself. All file and directory attributes and timestamps are mirrored perfectly [3]. It employs an extra thread to write data while the next read operation is in progress. This optimization makes JCIFS the fastest client available for copying large trees of files and directories across hosts (neither of which needs to be the local machine).
</li><li>
Accessing DFS volumes (sub-trees of files and directories that actually reside on another host) is fully transparent to the user. The client may be redirected multiple times in the middle of any operation. After a redirection has occurred the mapping is cached but the cache is only queried for transports that indicate they host DFS volumes.
</li><li>
SMB signing is robust and negotiated automatically with servers that require it.
</li><li>
The <a href="src/docs/api/jcifs/smb/SmbRandomAccessFile.html">SmbRandomAccessFile</a> implementation is a complete drop in replacement for the standard java.io.RandomAccessFile. When opened with SmbFile.FILE_NO_SHARE share access this class is a legitimate database API.
</li><li>
Named Pipes of all types are fully supported. TransactNamedPipe, CallNamedPipe, and standard file I/O style pipes are all supported using a <a href="http://jcifs.samba.org/src/docs/pipes.html">single generic API</a> that conforms to the InputStream/OutputStream model.
</li><li>
JCIFS' <a href="src/docs/resolver.html">name resolution capability</a> is very sophisticated. WINS, DNS, NetBIOS broadcast queries, and remote lmhosts files are supported well. Which services and the order in which each service is queried is fully configurable. The name service cache policy is also adjustable.
</li><li>
JCIFS implements the <a href="http://www.ietf.org/internet-drafts/draft-crhertel-smb-url-07.txt">SMB URL Draft Specification V07</a> and processes all SMB URLs through an SMB URL proticol handler. This same handler is used to build standard java.net.URL objects which means once the protocol handler is registered SMB URLs can be used with any application that uses URLs (e.g. -Djava.rmi.server.codebase=smb://mymachine/c/download/myapp.jar).
</li>
</ul>
Other features include NTLM and LMv2 Authentication [4], optimal request batching, <a href="ntstatus.txt">NT STATUS codes</a>, full transactions, large file support, Unicode support from the ground up [5], NTLM HTTP <a href="src/docs/httpclient.html">authentication wrappers for HTTP and HTTPS clients</a>, a simple logging facility, and extensive documentation. If that's not enough, there's always <a href="http://sourceforge.net/projects/jcifs-ext/">jcifs-ext</a> where bleeding edge JCIFS extensions live.
<p/>
But the best feature of JCIFS is the simplicity of <a href="src/docs/api/">the API</a> itself. We have diligently resisted "feature creep". The SMB URL allows addressing resources with wonderful ease. The SmbFile class is a drop in replacement for java.io.File so if you know how to use that, you know how to use JCIFS.
<p/>
JCIFS is now one of the most sophisticated and powerful CIFS clients available free or otherwise. It is used in production environments by many large commercial organizations and the Open Source model has worked well for us as these users have contibuted valuable feekback that has made JCIFS rock solid.
<p/>
To commemorate these achievements we are proud to release JCIFS 1.0. Aside from fixing broken links and a few packaging tweaks it is not different from 0.9.8 and we hope it stays that way. Moving forward, the 1.0 branch will only receive critical fixes.
<p/>
In recent weeks a MIDL compatible IDL compiler was developed. Coupled with the <a href="http://sourceforge.net/projects/jarapac/">Jarapac DCE/RPC framework</a> for Java it is now practical to make <a href="http://msdn.microsoft.com/library/default.asp?url=/library/en-us/rpc/rpc/overviews.asp">MSRPC</a> calls. This means that the Microsoft network management API functions are very close to being incorporated into JCIFS. IDL files need to be written and APIs need to be devised but we will soon be able to create users, edit groups, control NT services, reboot machines, edit the registry, execute programs on a remote host, and much much more. This will open up an entirely new level of integration between Java and Microsoft environments.
<p/>
Finally, thanks goes out to Eric and Chris and everyone else that has contributed their time. JCIFS is truely a great product because we have taken full advantage of the Open Source model. We would not have made nearly as much progress without the code, bug fixes, problem reports, and solutions provided by our users.
<p/>
<small>
[1] although running through web servers that <i>also</i> try to negotiate NTLM HTTP or do not properly support keep-alives is problematic<br/>
[2] Client Host: 500MHz Debian Linux "testing" Java 1.4 JCIFS 1.0.0; Target Workstation: 2.7GHz 5.77GB Windows NT 4 sp6; Nework: 100 Mbps full-duplex switched; Test Program: examples/T2Crawler.java with println statements commented out, default properties, ran 3 times to load up target workstation cache; Results: $ time java -Djcifs.properties=../miallen.prp T2Crawler smb://myworksta/c$/ 3 1000, real 0m<b>9.929s</b> user 0m5.580s sys 0m0.600s<br/>
[3] although currently extended attributes are not copied<br/>
[4] NTLMv2 is not fully supported but LMv2 permits the client to operate in NTLMv2 environments<br/>
[5] Unicode share names are not supported but will be soon now that RPCs are underway<br/>
</small>
</desc>
</entry>
<entry old="true">
<title>jcifs-0.9.8 released / Guest Account Again and Minor Adjustments</title>
<sub>posted by Mike, Sep 3, 2004</sub>
<desc>
If the "guest" account on a server was not disabled as it normally is it would be possible for a user to use an invalid username to access an SMB resource or website protected with the NtlmHttpFilter. JCIFS will no longer successfully authenticate the "guest" account at all (even if the guest account is enabled and the user enters "guest"). A log message will now be generated for all SmbAuthExceptions in the NtlmHttpFilter if the <tt>jcifs.util.loglevel</tt> property is set to 2 or greater. Behavior regarding accessing System properties has been curbed to accomodate more restrictive environments. Finally a benign exception that could occur if the client was misconfigured has been fixed.
</desc>
</entry>
<entry old="true">
<title>jarapac-0.3.4 and idlc-0.3.6 released / DCE RPC Working</title>
<sub>posted by Mike, Aug 28, 2004</sub>
<desc>
After several weeks of hard work on our MIDL compatible IDL compiler, MS-RPC calls are now working with the Jarapac DCE framework. Currently only the ncacn_np transport in Jarapac works but other transports (e.g. TCP port 135) should work without too much trouble. The process is very easy now -- write IDL, compile with idlc, write Jarapac driver program, and go. The Jarapac examples directory has the beginnings of lsarpc, samr, and srvsvc interfaces. This should unlock a whole new set of functionality for integrating Java into Windows networks. Eat your heart out Microsoft!
</desc>
</entry>
<entry old="true">
<title>jcifs-0.9.7 released / Minor Adjustments</title>
<sub>posted by Mike, Aug 11, 2004</sub>
<desc>
The NTLM HTTP Filter will no longer set Connection: close, a new SmbFile constructor has been added and a rogue debugging statement has been removed.
</desc>
</entry>
<entry old="true">
<title>jcifs-0.9.6 released / copyTo Bug and Many Other Fixes</title>
<sub>posted by Mike, Jul 23, 2004</sub>
<desc>
A bug in <tt>copyTo()</tt> has been found and fixed that could result in the operation failing and timing out. The default <tt>jcifs.smb.client.snd_buf_size</tt> has been changed from 5000 to 16644. When copying data between larger servers with <tt>copyTo()</tt> (servers that negotiate larger buffer sizes) the result is a noticable preformance increase. Adjustments have been made regarding a null pointer exception triggered by an internal method during certain error scenarios. The client will now failover to a <tt>jcifs.smb.client.domain</tt> controller for browser information if the LMB query fails. Methods have been added to <tt>SmbSession</tt> that support the specification of alternative port. Some incorrect debugging output has been fixed. A clause has been added to <tt>SmbFile.delete()</tt> to subvert an exception caused exclusively by the Oracle FilesOnline CIFS implementation. The NTLM HTTP Authentication documentation has been slightly updated.
</desc>
</entry>
<entry old="true">
<title>SMB URL IETF Draft Version 7</title>
<sub>posted by Chris, Jul 8, 2004</sub>
<desc>
The latest <a href="http://www.ietf.org/internet-drafts/draft-crhertel-smb-url-07.txt">SMB URL Draft</a> has been posted. JCIFS tries to conform to this SMB URL specification as closely as possible.
</desc>
</entry>
<entry old="true">
<title>jcifs-0.9.5 released / Workgroup Server Enum Fix and updated NtlmHttpURLConnection</title>
<sub>posted by Mike, Jul 2, 2004</sub>
<desc>
A bug introduced in 0.9.3 could result in an infinite loop that exhausts all memory in the VM when enumerating workgroups and servers. This issue has been fixed. Also included is an updated to the NtlmHttpURLConnection (now works with org.apache.xmlrpc.XmlRpcClient).
</desc>
</entry>
<entry old="true">
<title>JCIFS Extensions for SPNEGO Filter and RAP Functions</title>
<sub>posted by Eric, Jul 1, 2004</sub>
<desc>
A project for jCIFS extensions called <a href="http://sourceforge.net/projects/jcifs-ext/">jcifs-ext</a> has been established on Sourceforge. Currently this project hosts the latest versions of the SPNEGO HTTP Filter and the RAP function library.
</desc>
</entry>
<entry old="true">
<title>jcifs-0.9.4 released / Credential Propagation and NTLM for HTTP Clients</title>
<sub>posted by Mike, Jun 30, 2004</sub>
<desc>
Credentials were not being propogated to files returned by <tt>listFiles()</tt> or to parent files used in <tt>mkdirs()</tt>. This could result in inappropriate authentication exceptions. Also NTLM HTTP support for HTTP <i>clients</i> (<tt>NtlmHttpURLConnection</tt>) has been updated to support NTLM negotiation using the POST method.
</desc>
</entry>
<entry old="true">
<title>jcifs-0.9.3 released / The SMB URL Port Field and Full Enumeration of Workgroups and Servers</title>
<sub>posted by Mike, Jun 29, 2004</sub>
<desc>
A bug has been fixed that will now permit jCIFS to enumerate all workgroups and servers. Also included is a fix for the SMB URL port field that was previously being ignored.
</desc>
</entry>
<entry old="true">
<title>Davenport 0.9.9 released</title>
<sub>posted by Eric, Jun 29, 2004</sub>
<desc>
This release includes some session serialization fixes as well as other minor items noted during testing.
</desc>
</entry>
<entry old="true">
<title>Davenport 0.9.9b released</title>
<sub>posted by Eric, Jun 18, 2004</sub>
<desc>
The latest version of <a href="http://davenport.sourceforge.net/">Davenport</a> adds support for URL rewriting based on a context base, per-server authentication caching, disabling closing of HTTP connections upon request for authentication, support for pluggable error handlers and logging, the ability to specify anonymous credentials, and a file filter framework. The jCIFS library bundled with Davenport has also been updated to 0.9.2.
</desc>
</entry>
<entry old="true">
<title>jcifs-0.9.2 released / Deadlock in copyTo</title>
<sub>posted by Mike, Jun 8, 2004</sub>
<desc>
An initialization race in the <tt>SmbFile.copyTo()</tt> method has been discovered and fixed. Also the documentation work continues.
</desc>
</entry>
<entry old="true">
<title>jcifs-0.9.1 released / Security Update</title>
<sub>posted by Mike, Jun 1, 2004</sub>
<desc>
If the "guest" account is enabled on a CIFS server it is possible for jCIFS to successfully authenticate even with an invalid username. Windows networks virtually always disable this account but apparently it is not difficult to enable this condition when using Samba. NTLM HTTP Filter users that are not certain the "guest" account is disabled should upgrade. This release eliminates the possability of authenticating anyone without a valid username. Specifically, a small clause has been added that throws an <tt>SmbAuthException</tt> if the server responds with the "is logged in as guest" bit on.
</desc>
</entry>
<entry old="true">
<title>jcifs-0.9.0 released / Documentation</title>
<sub>posted by Mike, May 28, 2004</sub>
<desc>
There have been no reports of problems so the aside from a very minor adjustment to the code all changes in this release are to the documentation. In particular the NTLM HTTP Authentication documentation has been significantly improved. The API documentation still needs work but it is believed to be accurate.
</desc>
</entry>
<entry old="true">
<title>jcifs-0.9.0b released / General Cleanup and Minor Enhancements</title>
<sub>posted by Mike, May 14, 2004</sub>
<desc>
And thus begins the 0.9 series. This should solidify fairly quickly although there have been some pervasive changes. The details are as follows:
<ul>
<li>PropertiesTree has been removed. Thus properties must now be specified using the full name only.</li>
<li>Multiple WINS servers may now be specified using a comma separated list of IPs (i.e. <tt>jcifs.netbios.wins=192.168.2.10,172.21.1.1,10.44.55.66</tt>).</li>
<li>The <tt>NtlmHttpFilter</tt> has been modified to support "preauthentication" such that if the <tt>jcifs.smb.client.{domain,username,password}</tt> properties are supplied as init parameters, all transports will be initialized with these credentials. This is the ideal setup for domain controllers that require SMB signatures (although it has been observed that NT 4.0 at least does not check the signatures of authentication requests).</li>
<li>NT status codes are now used in favor or DOS error codes even if DOS error codes are negotiated (mapped to NT status codes immediately after being decoded). You can <a href="ntstatus.txt">lookup NT status codes here</a>. The package used to generate this file and the jCIFS code tables is in the download area.</li>
<li>The <tt>NetServerEnum3</tt> operation has been added (thanks Gary) such that large lists of workgroups and servers may now be enumerated (doesn't help with large numbers of shares).</li>
<li>Fixed some incorrect path handling in the DFS referral code.</li>
<li>It is now NOT possible for a session setup to be transmitted if the <tt>NtlmPasswordAuthentication</tt> object's hashes were created with a server challenge that does not match the current <tt>encryptionKey</tt> of the transport. If this condition occurs and <tt>SmbAuthException</tt> with an NT status of <tt>NT_STATUS_ACCESS_VIOLATION</tt> will be thrown. The NTLM HTTP Filter and NetworkExplorer servlet have both been modified to catch this exception and issue an HTTP redirect to the original URL to reinitiate the NTLM negotiation.</li>
<li>The <tt>jcifs.smb.client.ssnLimit</tt> property will now open redundant transports if the limit is reached. The old behavior of closing 10% of the oldest sessions has been eliminated.</li>
<li>Several SMB signing fixes. The SMB signature code has been mostly moved into the <tt>SigningDigest</tt> class.</li>
<li>Additional checks in the initial connection code have been added to reduce/eliminate lingering <tt>CLOSE_WAIT</tt> sockets.</li>
<li>If <tt>PIPE_TYPE_TRANSACT</tt> and <tt>PIPE_TYPE_CALL</tt> are <i>not</i> specified a <tt>TRANS_WAIT_NAMED_PIPE</tt> will be issued before the open call to emulate <tt>WaitNamedPipe</tt> followed by <tt>CreateFile</tt> behavior.</li>
<li>All access specifiers have been reviewed and changed to private, static, final, etc wherever appropriate.</li>
<li>The queue used to manage MIDs has been removed in favor of something considerably simplier. Performance should be improved.</li>
<li>The NetBIOS socket OutputStream has been simplified to remove a potential copy of data. Performance should be improved.</li>
<li>The NBT header length is now checked after decoding an SMB to detect and skip incorrect byte counts. This should bypass the OS/400 bug reported.</li>
<li>Property defaults for <tt>jcifs.smb.client.listCount</tt> and <tt>jcifs.smb.client.listSize</tt> have changed from 15 to 200 and from 1200 to 65535 repspectively. High latency networks should set these values back to the old values.</li>
</ul>
Bare in mind the documentation has not been updated. That's next.
</desc>
</entry>
<entry old="true">
<title>jcifs-0.8.3 released / Write Corruption with HotSpot VM on Linux</title>
<sub>posted by Mike, Apr 20, 2004</sub>
<desc>
A bug in Sun's HotSpot VM can cause jCIFS to incorrectly encode file offsets in write requests resulting in massive file corruption. Once the error occurs it cannot be stopped without restarting the VM. If you are using the java <tt>-server</tt> option on Linux with a long lived multithreaded application that uses jCIFS to write files it is strongly recommended that you upgrade to 0.8.3. This release eliminates some redundent code that was ultimately triggering the bug in the HotSpot VM.
<p/>
Big thanks to Richard Heap for diagnosing and fixing this very elusive problem.
</desc>
</entry>
<entry old="true">
<title>jcifs-0.8.2 released / DST and getParent Fixes</title>
<sub>posted by Mike, Mar 15, 2004</sub>
<desc>
The daylight savings time adjustement does not appear to work correctly. Commenting out the adjustment appears to exibit the desired behavior but the issue may need further tuning. The problem regarding <tt>SmbFile.getParent()</tt> returning unexpected results has been fixed.
</desc>
</entry>
<entry old="true">
<title>jcifs-0.8.1 released / Listing Adjustments</title>
<sub>posted by Mike, Feb 26, 2004</sub>
<desc>
All list methods will now return <tt>ATTR_HIDDEN</tt> files unless specifically filtered. It was decided that hiding hidden files is the job of a UI and not the API. Several bugs have also been fixed regarding attribute caching, the <tt>createNewFile</tt> method and <tt>setLastModified</tt> invalidating the create time.
</desc>
</entry>
<entry old="true">
<title>Davenport 0.9.8 relesed</title>
<sub>posted by Eric, Feb 13, 2004</sub>
<desc>
A bug introduced in 0.9.7 (observed against Windows 2000 and Gnome Nautilus clients) has been fixed.
</desc>
</entry>
<entry old="true">
<title>Davenport 0.9.7 relesed</title>
<sub>posted by Eric, Feb 12, 2004</sub>
<desc>
A bug involving redirects for directories not ending in "/" as well as various bugs involving incorrect WebDAV properties have been fixed. Additional localization support has been added.
</desc>
</entry>
<entry old="true">
<title>jcifs-0.8.0 released</title>
<sub>posted by Mike, Feb 11, 2004</sub>