Re: NTLMv2 support for domain logins using freetds

Freddy,

I have the 'snoop' output - how can I send it to you privately?
Regards,
=Alek


On 7/25/08, ZIGLIO, Frediano, VF-IT <[email protected]> wrote:
>
> >
> > Freddy,
> >
> > Thanks a lot for quick response. I was working all day today
> > upgrading to
> > FreeTDS 0.82 (I had 0.63 before) and reinstalled DBD::Sybase
> > Unfortunately I am getting the same error message even after
> > this updrade si
> > looks like I am missing something here, Hope you can point me on this.
> > Please take a look at details below:
> >
> >  1. All Windows servers in our network configured with: "Send ntlm v2
> > response only"
> > 2. Platforms and settings
> >
> > Was FreeTDS 0.63 On Solaris 10 (SunOS 5.10) before today but I have
> > recompiled now with FreeTDS 0.82  (and re-installed DBD:Sybase
> >
> > echo $SYBASE
> > /usr/local/freetds
> >
> > freetds.conf:
> > ======================================
> >
> >       tds version = 8.0
> >
> >       dump file = /tmp/freetds.log
> >       debug flags = 0xffff
> >
> >       timeout = 10
> >       connect timeout = 10
> >
> >        text size = 64512
> >
> > [NYCITASD0060]
> >       host = NYCITASD0060.us.db.com <http://nycitasd0060.us.db.com/>
> >       port = 1433
> >
> > ========================================
> >
> > 3. I can successfully login using database level
> > authentication (database
> > level user ID):
> >
> >  $ /usr/local/freetds/bin/tsql -SNYCITASD0060  -Udb_tools
> > -P<...pwd...>
> > locale is
> > "/en_US.ISO8859-1/en_US.ISO8859-1/C/en_US.ISO8859-1/en_US.ISO8859-1/C"
> > locale charset is "ISO8859-1"
> > 1> select @@servername
> > 2> go
> >
> > NYCITASD0060
> > (1 row affected)
> >
> > 4. Now I tried to connect as user 'FIAKHAL' which belongs to
> > domain 'DBG'
> >
> > /usr/local/freetds/bin/tsql -SNYCITASD0060  -U'DBG\FIAKHAL' <domain
> > password>' -I./interf.conf
> > locale is
> > "/en_US.ISO8859-1/en_US.ISO8859-1/C/en_US.ISO8859-1/en_US.ISO8859-1/C"
> > locale charset is "ISO8859-1"
> > Msg 18452, Level 14, State 1, Server , Line 0
> > Login failed for user '(null)'. Reason: Not associated with a
> > trusted SQL
> > Server connection.
> > Msg 20002, Level 9, State -1, Server OpenClient, Line -1
> > Adaptive Server connection failed
> > There was a problem connecting to the server
> >
> > $ cat dumpconfig.log
> > ===================================================
> > log.c:190:Starting log file for FreeTDS 0.82
> >        on 2008-07-24 17:20:40 with debug flags 0x4fff.
> > config.c:172:Getting connection information for [NYCITASD0060].
> > config.c:181:Attempting to read conf files.
> > config.c:253:Found conf file './interf.conf' set programmatically.
> > config.c:398:Looking for section global.
> > config.c:455:   Found section nycitasd0060.
> > config.c:469:   Reached EOF
> > config.c:398:Looking for section NYCITASD0060.
> > config.c:455:   Found section nycitasd0060.
> > config.c:458:Got a match.
> > config.c:479:   host =
> > 'NYCITASD0060.us.db.com<http://nycitasd0060.us.db.com/>
> > '
> > config.c:508:Found host entry
> > NYCITASD0060.us.db.com<http://nycitasd0060.us.db.com/>
> > .
> > config.c:512:IP addr is 10.152.37.113.
> > config.c:479:   port = '1433'
> > config.c:469:   Reached EOF
> > config.c:257:Success: [NYCITASD0060] defined in ./interf.conf.
> > config.c:558:tds_config_login: client_charset is ISO8859-1.
> > config.c:195:Final connection parameters:
> > config.c:196:            server_name = NYCITASD0060
> > config.c:197:                   port = 1433
> > config.c:198:          major_version = 8
> > config.c:199:          minor_version = 0
> > config.c:200:             block_size = 0
> > config.c:201:               language = us_english
> > config.c:202:         server_charset =
> > config.c:203:        connect_timeout = 0
> > config.c:204:       client_host_name = nygmwsp011.us.db.com
> > config.c:205:               app_name = TSQL
> > config.c:206:              user_name = DBG\FIAKHAL
> > config.c:209:                library = TDS-Library
> > config.c:210:              bulk_copy = 0
> > config.c:211:      suppress_language = 0
> > config.c:212:          encrypt level = 0
> > config.c:213:          query_timeout = 0
> > config.c:216:         client_charset = ISO8859-1
> > config.c:217:                ip_addr = 10.152.37.113
> > config.c:218:          instance_name =
> > config.c:219:               database =
> > config.c:220:              dump_file =
> > config.c:221:            debug_flags = 0
> > config.c:222:              text_size = 0
> > config.c:223:           broken_dates = 0
> > config.c:224:           broken_money = 0
> > config.c:225:     emul_little_endian = 0
> > ===================================================
> >
> > Please help...!
> > Regards,
> > =Alek
> >
>
> Mmm... could you please send me a network trace of unsuccessful login?
> Login packets are
> disabled in libTDS code. I usually use tcpdump or wireshark. The syntax
> should be
>
> tcpdump -i interface -s 2000 -w out.dat port 1433
>
> (at least under Linux it works).
>
> Use a test account or is better to send it to me privately. Keep in mind
> that this packet
> contains username, domains, machine name and encrypted password.
>
> freddy77
>
> _______________________________________________
> FreeTDS mailing list
> [email protected]
> http://lists.ibiblio.org/mailman/listinfo/freetds
>
>
>