I come back with this subject because I still experience some difficulties.
I understand well now the principle of "sspi.py".

The problem is that the server is a Linux box, I can obviously not use pywin32 on it so how can I manage to do the same thing ?

I'm thinking about a ntlm compatible proxy which is able to do transparent win32 authentication.

Any ideas ?


Mark Hammond wrote :

On 21/01/2009 3:35 AM, le dahut wrote:

I thought using some sort of NTLM like in squid. Your example deals with
NTLM but reading "Lib/site-packages/win32/lib/sspi.py" I don't
understand everything.
 >
 > Can you enlight me ?
 >

In general, NTLM auth is tricky, but enlightenment can probably only come from reading the MSDN articles on the various functions used. But in summary, the auth-process is multi-step - generate a request token, get a response token, generate another request token from that response, then get a final response with the final auth token. At the end if this, all you get is a token which identifies the user, and depending on a number of things, the ability to impersonate that user.

Cheers,

Mark


Mark Hammond wrote :

On 20/01/2009 1:35 AM, le dahut wrote:
Hello,
I've written a python network app in which the server runs on a
Samba-PDC (NT Domain controler) and the client on the windows NTdomain
clients.

I want to authenticate the connexions to the python server using a
transparent method.

Is there a way to get a user NTdomain authentication token and give it
back to the python-server so that it can validate it against the PDC ?

Look for the 'sspi' functions and demos, particularly the
win32\demos\security\sspi directory.

Cheers,

Mark


_______________________________________________
python-win32 mailing list
python-win32@python.org
http://mail.python.org/mailman/listinfo/python-win32



_______________________________________________
python-win32 mailing list
python-win32@python.org
http://mail.python.org/mailman/listinfo/python-win32

Reply via email to