RE: Using Samba for HTTP-NTLM-authentication?

2002-07-15 Thread Chemolli Francesco (USI)
On Sun, Jul 14, 2002 at 07:19:46PM +0200, Johann Hanne wrote: No need for that. Just download the mod_ntlm_winbind CVS module from samba.org (CVSWEB link: http://cvs.samba.org/cgi-bin/cvsweb/mod_ntlm_winbind/ ) and fix it up for the current protocol. Oh. Didn't think this

Re: Using Samba for HTTP-NTLM-authentication?

2002-07-14 Thread Johann Hanne
No need for that. Just download the mod_ntlm_winbind CVS module from samba.org (CVSWEB link: http://cvs.samba.org/cgi-bin/cvsweb/mod_ntlm_winbind/ ) and fix it up for the current protocol. Oh. Didn't think this was even that easy. I have it already working. But the apache processes still

Re: Using Samba for HTTP-NTLM-authentication?

2002-07-13 Thread Johann Hanne
Basically there are hooks in winbindd (through the AUTH_CRAP command) to authenticate using a challenge and nt/lm responses. Wow. Thanks for that hint. I have patched rh73's samba-2.2.3a to include the winbind crap stuff and now have a wbinfo -a with both plaintext password authentication

Using Samba for HTTP-NTLM-authentication?

2002-07-12 Thread Johann Hanne
Hi folks, Short version: -- Can anybody tell me if there are hooks in Samba that make it possible to use it in conjunction with an apache module for HTTP-based NTLM-authentication? Long version: - Internet Explorer can authenticate against a Web-Server using the

Re: Using Samba for HTTP-NTLM-authentication?

2002-07-12 Thread Richard Sharpe
On Fri, 12 Jul 2002, Johann Hanne wrote: Hi folks, Short version: -- Can anybody tell me if there are hooks in Samba that make it possible to use it in conjunction with an apache module for HTTP-based NTLM-authentication? Long version: - Internet Explorer

Re: Using Samba for HTTP-NTLM-authentication?

2002-07-12 Thread Tim Potter
On Sat, Jul 13, 2002 at 04:47:17AM +0930, Richard Sharpe wrote: The whole thing is based on the authentication used by any SMB client that connects to a SMB server: - The client connects to the server - The server generates and sends some random bytes (challenge) - The client sends a

Re: Using Samba for HTTP-NTLM-authentication?

2002-07-12 Thread Steve Langasek
On Sat, Jul 13, 2002 at 04:47:17AM +0930, Richard Sharpe wrote: Short version: -- Can anybody tell me if there are hooks in Samba that make it possible to use it in conjunction with an apache module for HTTP-based NTLM-authentication? Long version: -

Re: Using Samba for HTTP-NTLM-authentication?

2002-07-12 Thread Alexander Bokovoy
On Fri, Jul 12, 2002 at 07:44:24PM +0200, Johann Hanne wrote: Short version: -- Can anybody tell me if there are hooks in Samba that make it possible to use it in conjunction with an apache module for HTTP-based NTLM-authentication? Yes, there are such hooks. You can look at

Re: Using Samba for HTTP-NTLM-authentication?

2002-07-12 Thread Richard Sharpe
On Fri, 12 Jul 2002, Tim Potter wrote: On Sat, Jul 13, 2002 at 04:47:17AM +0930, Richard Sharpe wrote: It's actually NTLMSSP base-64 encoded in http headers. There has been much discussion about this on this list and on #samba-technical and it may already be possible or close to

Re: Using Samba for HTTP-NTLM-authentication?

2002-07-12 Thread Tim Potter
On Sat, Jul 13, 2002 at 06:23:38AM +0930, Richard Sharpe wrote: Nope. There's a challenge sent by either the server and then the client produces a LM and NT response which is a hash of the challenge and the user's password. This is sent to the server (in this case winbindd) for