Re: NTLM Authentication Project

["Loek Maartens" <l.maartens@xxxxxxxxx>]

Hi Thomas,

Here is the link;

http://download.microsoft.com/download/a/e/6/ae6e4142-aa58-45c6-8dcf-a657e5900cd3/%5BMS-NTHT%5D.pdf

It is specificly for NTLM over HTTP.

Kind regards,

Loek Maartens.


----- Original Message ----- 
From: "Thomas Raddatz" <thomas.raddatz@xxxxxxxxxxx>
To: "HTTPAPI and FTPAPI Projects" <ftpapi@xxxxxxxxxxxxxxxxxxxxxx>
Sent: Sunday, April 22, 2012 3:38 PM
Subject: Re: NTLM Authentication Project


> Loek,
>
> Thank you for your response. Do you mean this document:
>
>    http://www.devshed.com/c/a/Administration/Authentication-in-Samba/1/
>
> The documentation that I used so far is:
>
>    http://davenport.sourceforge.net/ntlm.html#type3MessageExample
>    http://jcifs.samba.org/ (Java source code)
>    http://msdn.microsoft.com/en-us/library/cc236621%28v=prot.13%29.aspx
>
> http://mxr.mozilla.org/mozilla/source/security/manager/ssl/src/nsNTLMAuthModule.cpp
> (c++ Firefox source code)
>
> My current service program follows the "jcifs.samba.org" implementation.
>
> Actually everything seems to be simple. I do not know what I am doing
> wrong. It must be something obvious.
>
> Thomas.
>
> Am 22.04.2012 15:12, schrieb Loek Maartens:
>> Hi Thomas,
>>
>> I do not have any experience with the MS NTLM api, but just found a PDF
>> document from MS detailing the HTTP use of NTLM;
>>
>> I just googled with {NTLMv1, the actual protocol details} and found a 
>> very
>> details API specification as the second document presented.
>>
>> Hope to help,
>>
>> Loek Maartens.
>>
>> ----- Original Message -----
>> From: "Thomas Raddatz"<thomas.raddatz@xxxxxxxxxxx>
>> To: "HTTPAPI and FTPAPI Projects"<ftpapi@xxxxxxxxxxxxxxxxxxxxxx>
>> Sent: Sunday, April 22, 2012 2:22 PM
>> Subject: NTLM Authentication Project
>>
>>
>>> Hi,
>>>
>>> Is there somebody who has experiences in using the NTLM authentication
>>> mechanism? I am trying to add NTLM authentication to HTTP API with less
>>> success so far.
>>>
>>> Although all my RPGUnit test cases show "green" for all the various
>>> procedures for calculating this and that, I cannot successfully connect 
>>> to
>>> the IIS server on my local desktop PC. I always get a 401 "Access 
>>> Denied"
>>> error message.
>>>
>>> I must be doing something wrong. Most likely it is something obviously
>>> that
>>> I do not see. One thing I have in mind is the "keep-alive" header. When 
>>> I
>>> connect from my PC to the IIS on a virtual machine, I can see that both
>>> (client and server) set the "keep-alive" header and that the
>>> NTLMSSP_NEGOTIATE and NTLMSSP_AUTH messages are send through the same
>>> port.
>>> As far as I understand HTTP API, HTTP API does not support the
>>> "keep-alive"
>>> header and hence my RPG program uses different ports to send these
>>> messages.
>>>
>>> I gladly provide more details or my test library to everyone how want to
>>> join me.
>>>
>>> Regards,
>>>
>>> Thomas.
>>> -----------------------------------------------------------------------
>>> This is the FTPAPI mailing list.  To unsubscribe, please go to:
>>> http://www.scottklement.com/mailman/listinfo/ftpapi
>>> -----------------------------------------------------------------------
>>
>> -----------------------------------------------------------------------
>> This is the FTPAPI mailing list.  To unsubscribe, please go to:
>> http://www.scottklement.com/mailman/listinfo/ftpapi
>> -----------------------------------------------------------------------
>>
> -----------------------------------------------------------------------
> This is the FTPAPI mailing list.  To unsubscribe, please go to:
> http://www.scottklement.com/mailman/listinfo/ftpapi
> ----------------------------------------------------------------------- 

-----------------------------------------------------------------------
This is the FTPAPI mailing list.  To unsubscribe, please go to:
http://www.scottklement.com/mailman/listinfo/ftpapi
-----------------------------------------------------------------------