proper nt-style authentication (reactos, wine, samba tng)

Luke Kenneth Casson Leighton lkcl at lkcl.net
Fri Sep 2 19:15:05 CDT 2005


On Sat, Sep 03, 2005 at 01:09:47AM +0100, Luke Kenneth Casson Leighton wrote:

> 	 i trust that you are aware that NTLM authentication has
> 	 been provided for quite some time to external services,
> 	 in a number of ways.  as you helped design one of those
> 	 methods (the winbind_auth_crap :) and guided tim in its
> 	 implementation, i am puzzled by the fact that it was not
> 	 mentioned in your message.
> 
> 	 there is also an additional method which has been
> 	 developed in samba 3, called ntlm_auth, which has even
> 	 been utilised by a SOC Google student.
> 
> 	 both these methods avoid reimplementation of NTLMSSP:
> 	 what therefore are you proposing that is, if at all,
> 	 different from this?  i don't understand: perhaps you
> 	 could explain?

 the summary:

 ntlm_auth and winbindd are appropriate for Wine.

 due to the fact that samba cannot run on a Win32 platform, neither of
 those two programs are appropriate.

 it is therefore much more appropriate to implement the same
 stuff that's in NT _for_ ReactOS, and the closest bit of
 code to that is cli_nt_login_interactive (or similar), as
 MSRPC-based APIs.

 l.




More information about the wine-devel mailing list