Re: Linux CIFS NTLMSSP mount failing against win2k8
Shirish Pargaonkar <[email protected]>
| Newsgroups | gmane.linux.file-systems.cifs,gmane.network.samba.internals |
|---|---|
| Message-ID | <[email protected]> |
On Tue, Apr 13, 2010 at 6:01 PM, Andrew Bartlett <[email protected]> wrote: > On Sun, 2010-04-11 at 19:40 -0400, Jeff Layton wrote: > >> I don't think that's right. CIFS_SESS_KEY_SIZE is 24 bytes. According >> to the MS-NLMP document, the session key should be 16 bytes. The >> signing key is different with NTLMSSP than with "raw" NTLM and NTLMv2. > > So, with NTLMSSP the 24 byte (actually variable, it is much lager for > NTLMv2) response is not included in the MAC calculation - just use the > 16 bytes session key only. Does this apply to both ntlm and ntlmv2 authentications because for ntlm authentication, session key is 16 bytes but not for ntlmv2 authentication? I thought MAC key is generated by concatenating the smb session key with ntlm/ntlmv2 client response to the server challenge. confusing. > > Andrew Bartlett > > -- > Andrew Bartlett http://samba.org/~abartlet/ > Authentication Developer, Samba Team http://samba.org > Samba Developer, Cisco Inc. > >