Re: Challenge in NTLM authenticator

From: Henrik Nordstrom <hno@dont-contact.us>
Date: Mon, 22 Apr 2002 09:44:23 +0200

On Monday 22 April 2002 08:47, Chemolli Francesco (USI) wrote:

> Why would you want to do that?
> Generating the challenge internally is one of the keys for
> performance and reliability. The whole point in the winbindd helper
> is to be able to do that...

The situation is quite different when you are running on the NT
server.

The question here is more of:
Should the Squid helper recode everything involved in making NTLM
challenges, or should it use the official libraries provided by
Microsoft for doing the same in the way officially supported by
Microsoft?

Using the SSPI is the documented way of doing NTLMSSP over the wire,
and easily allows for full support of all the NTLMSSP options, levels
etc without having to reverse-engineer all aspects of NTLMSSP.

Regards
Henrik
Received on Mon Apr 22 2002 - 01:57:56 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:15:17 MST