Re: NTLM and OpenLDAP
Marc Boorshtein <[email protected]> Wed, 2 Mar 2022 11:20:22 -0500
| Newsgroups | gmane.comp.security.cyrus.sasl |
|---|---|
| Message-ID | <CAJEX5osGju=-GMu6wM6VKwaVbHoVS2fHf3SORQq0MYSTY-z4Dg@mail.gmail.com> |
--00000000000033a34e05d93ea986 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable > > > > the NTLM plugin in cyrus-sasl is an old broken custom implementation of > NTLM. It used a dirty hack to try to replay the NTLM authentication > against an SMB server (using old skeleton SMB 1 implementation which > uses a SMB dialect now disabled on most servers) as a way to support > authenticating against a separate server. This kind of authentication > hijack will not work with any modern setup. > > Let's assume for the sake of argument that SMB1 is still enabled (like I said, this is a REALLY legacy environment), would what I'm trying still not work? Thanks Marc ------------------------------------------ Cyrus: SASL Permalink: https://cyrus.topicbox.com/groups/sasl/Tac2134087a4e755f-M2359b7= 8092a2e16b326302ba Delivery options: https://cyrus.topicbox.com/groups/sasl/subscription --00000000000033a34e05d93ea986 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable <html><html><div dir=3D"ltr"><div class=3D"gmail_quote"><blockquote class= =3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rg= b(204,204,204);padding-left:1ex"><br /><br /> the NTLM plugin in cyrus-sasl is an old broken custom implementation of<br = /> NTLM. It used a dirty hack to try to replay the NTLM authentication<br /> against an SMB server (using old skeleton SMB 1 implementation which<br /> uses a SMB dialect now disabled on most servers) as a way to support<br /> authenticating against a separate server. This kind of authentication<br /> hijack will not work with any modern setup.<br /><br /></blockquote><div><b= r /></div><div>Let's assume for the sake of argument that SMB1 is still= enabled (like I said, this is a REALLY legacy environment), would what I&#= 39;m trying still not work? </div><div><br /></div><div>Thanks<= br /></div><div>Marc</div></div></div></html><div id=3D"topicbox-footer" st= yle=3D"margin:10px 0 0;border-top:1px solid #ddd;border-color:rgba(0,0,0,.1= 5);padding:7px 0;"> <strong><a href=3D"https://cyrus.topicbox.com/latest" style=3D"color:inheri= t;text-decoration:none">Cyrus</a></strong> / SASL / see <a href=3D"https://cyrus.topicbox.com/groups/sasl">discussions</a> + <a href=3D"https://cyrus.topicbox.com/groups/sasl/members">participants</a> + <a href=3D"https://cyrus.topicbox.com/groups/sasl/subscription">delivery&nb= sp;options</a> <a href=3D"https://cyrus.topicbox.com/groups/sasl/Tac2134087a4e755f-M2359b7= 8092a2e16b326302ba" style=3D"float:right">Permalink</a> </div> </html>= --00000000000033a34e05d93ea986--