Re: NTLM, Windows and the sessionkey field

From: Robert Collins <robert.collins@dont-contact.us>
Date: Mon, 25 Feb 2002 08:52:53 +1100

From: "Henrik Nordstrom" <hno@marasystems.com>
> > Actually it's not. Kerberos doesn't fit in the same scheme. NTLMv2
> > though - yes.
>
> Are you positively sure that forwarding of a kerberos ticket cannot
> be done over NTLMSSP?

http://www.rfc-editor.org/internet-drafts/draft-brezak-spnego-http-02.tx
t should cover this. As for surety, the NTLMSSP structure doesn't hold a
kerberos ticket AFAIK. The NTLMSSP structure is seriously low level in
the MS SSPI.

Rob
Received on Sun Feb 24 2002 - 14:52:00 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:14:48 MST