Francois PIETTE wrote: > Maybe this link will help you: http://davenport.sourceforge.net/ntlm.html
I know this article, it's one reason for my question concerning current NTLM-implementation in the HttpClient. Arno Garrels > > -- > [EMAIL PROTECTED] > http://www.overbyte.be > > ----- Original Message ----- > From: "Arno Garrels" <[EMAIL PROTECTED]> > To: "ICS support mailing" <[email protected]> > Sent: Sunday, January 22, 2006 7:45 PM > Subject: [twsocket] NTLM AUTH > > >> Hi, >> >> I've played a bit with NTLM since I wanted to find a server-side >> solution to accept NTLM authenticated users. BTW: The key is SSPI >> on Windows systems. >> >> In current NTLM implementation, in IcsNtlmMsgs.NtlmGetMessage2 >> there's somthing I do not understand, which has to do with the >> Domain-discussion in a previous thread. >> >> As I understand it now, the server replies to the Type1 msg with >> a Type2 msg which includes the domain and host name (depending >> on the flags either as Unicode or OEM). >> However in HTTPCli-NTLM implementation Type1 msg is being sent with an >> empty DomainName as well as and empty HostName always. Later field >> Host is populated in Type3 msg with LocalhostName, why?? >> I wonder why we do not pass the Domain in Type1 msg and in function >> THttpCli.GetNTLMMessage3 we just pass the fields returned from the >> server like that: >> Result := NtlmGetMessage3(FNTLMMsg2Info.Domain, //'', >> FNTLMMsg2Info.Server, // Hostname, >> { FNTLMUsercode, FNTLMPassword, } >> FCurrUsername, FCurrPassword, >> FNTLMMsg2Info.Challenge); >> >> >> Also the flags are not checked in NtlmGetMessage2, but Type3 msg >> is always sent Unicode, what happens if the server doesn't support >> it (it mostly will support it, but who knows?). >> >> Arno Garrels >> >> >> >> >> -- >> To unsubscribe or change your settings for TWSocket mailing list >> please goto http://www.elists.org/mailman/listinfo/twsocket >> Visit our website at http://www.overbyte.be -- To unsubscribe or change your settings for TWSocket mailing list please goto http://www.elists.org/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
