Re: Linux CIFS NTLMSSP mount failing against win2k8

On Wed, 14 Apr 2010 09:01:32 +1000
Andrew Bartlett <[email protected]> wrote:

> On Sun, 2010-04-11 at 19:40 -0400, Jeff Layton wrote:
> 
> > I don't think that's right. CIFS_SESS_KEY_SIZE is 24 bytes. According
> > to the MS-NLMP document, the session key should be 16 bytes. The
> > signing key is different with NTLMSSP than with "raw" NTLM and NTLMv2.
> 
> So, with NTLMSSP the 24 byte (actually variable, it is much lager for
> NTLMv2) response is not included in the MAC calculation - just use the
> 16 bytes session key only. 
> 
> Andrew Bartlett
> 

That was it! I was putting the right key into the NTLMSSP response, but
was leaving the saved key used for signing as a 40-byte key. When I
limit the key length to 16 then signing works correctly.

I'll need to clean up the code a bit, but will post a patch to fix this
soon.

Many thanks,
-- 
Jeff Layton <[email protected]>

_______________________________________________
linux-cifs-client mailing list
[email protected]
https://lists.samba.org/mailman/listinfo/linux-cifs-client

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.14 (GNU/Linux)

iEYEARECAAYFAkvFtTsACgkQyP0gxQMdzIArdACaA42f/DWedRKM/85mpiUA1tm2
6IgAmwai2Ix/Tv2HVnZxKQg6tzB5+2+E
=La0f
-----END PGP SIGNATURE-----