Re: Status of NTLM support

On Thu, 2006-10-26 at 18:10 -0700, Herbert Pfennig wrote:

> The question is how difficult is it to implement the AddNtlmAuthHeaders() function
> in C. Is this something that is available somewhere already?

I am not an NTLM expert, but I am sure that the basic code you need does
exist. Unfortunately, last time we asked, nobody was willing to release
it.

If the situation has not changed (i.e., nobody has the code that can be
publicly released with Polygraph), and you really need it, we will have
to develop it. My understanding is that the implementation is rather
tricky because NTLM authentication is not officially documented and
because it violates a few HTTP norms.

FWIW, Squid and possibly other open-source serves have implemented the
server side of the NTLM authentication algorithm.

Alex.