On Sun, 2005-10-09 at 11:27 +0200, Serassio Guido wrote:
> Hi Henrik,
> 
> I'm trying to test SPNEGO on native Windows, but I have still some 
> open questions:
> 
> - In the response message ' NA blob message', what should be the blob content 
> ?

The last leg from client to server is an SPNEGO reject token in this
case, and should be supplied to you by SSPI.

> - What client to use for testing it ? I have tried to play with the 
> network.negotiate-auth options of Firefox and Mozilla, but without any result.

That's what I've used in the past.  I think I made it work...  You need
the 1.5 betas for HTTP proxy stuff.  

> - I'have found a bug in the NTLM code of the negotiate branch: into 
> authenticateNTLMHandleReplay(), blob must be incremented before using 
> it, something like this should be good:
> @@ -434,6 +434,8 @@ authenticateNTLMHandleReply(void *data,
> 
>       /* seperate out the useful data */
>       blob = strchr(reply, ' ');
> +    if (blob != NULL)
> +        blob++;
> 
> 
> Regards
> 
> Guido
> 
> 
> 
> -
> ========================================================
> Guido Serassio
> Acme Consulting S.r.l. - Microsoft Certified Partner
> Via Lucia Savarino, 1           10098 - Rivoli (TO) - ITALY
> Tel. : +39.011.9530135  Fax. : +39.011.9781115
> Email: [EMAIL PROTECTED]
> WWW: http://www.acmeconsulting.it/
> 
-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Samba Developer, SuSE Labs, Novell Inc.        http://suse.de
Authentication Developer, Samba Team           http://samba.org
Student Network Administrator, Hawker College  http://hawkerc.net

Attachment: signature.asc
Description: This is a digitally signed message part

Reply via email to