Re: [twsocket] Is there any way to force NTLM to authenticateagainst agiven AD domain?

[Arno Garrels]

Maurizio Lotauro wrote:
> Scrive Arno Garrels :
> 
>> Looks like it's not possible with current THttpCli:
> 
> [...]
> 
> Have you tried adding the domain to the name as dom...@user?
> Sometime I need to do so to get it working.

That doesn't work currently with the THttpCli, since a valid target 
domain is never sent with NTLM message #1. There was also a bug in the 
NtlmGetMessage1() that produced a nonsense domain offset (fixed in SVN
ref # 643 (today)). I also added procedure NtlmParseUserCode to 
OverbyteIcsNtlmMsgs to be used in future THttpCli.
 
-- 
Arno Garrels
--
To unsubscribe or change your settings for TWSocket mailing list
please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be

Re: [twsocket] Is there any way to force NTLM to authenticateagainst agiven AD domain?

[Arno Garrels]

Arno Garrels wrote:
> BTW: In the meanwhile (2007) MS published their NTLM specs. they have
> been updated yesterday:

Updated November 2010, not yesterday.

-- 
Arno Garrels

> "NT LAN Manager (NTLM) Authentication Protocol Specification":
> http://msdn.microsoft.com/en-us/library/cc236621
> So if anybody wants to improve ICS's implementation it's much easier
> now. 
> 
> --
> Arno Garrels
--
To unsubscribe or change your settings for TWSocket mailing list
please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be