Skip to Content.
Sympa Menu

freetds - Re: [freetds] Backporting NTLMv2 (was: NTLMv2 support for domain logins using freetds)

freetds AT lists.ibiblio.org

Subject: FreeTDS Development Group

List archive

Chronological Thread  
  • From: Peter Deacon <peterd AT iea-software.com>
  • To: FreeTDS Development Group <freetds AT lists.ibiblio.org>
  • Subject: Re: [freetds] Backporting NTLMv2 (was: NTLMv2 support for domain logins using freetds)
  • Date: Sat, 2 Aug 2008 10:54:11 -0700 (Pacific Daylight Time)

On Sat, 2 Aug 2008, Frediano Ziglio wrote:

Well... MS client have a concept of minimun security, forced usually
with group policy. Some sort of "do not use LM" or "don't use
authentications below NTLMv2". Currently not implemented by our library
but we could do in a near future.

How does it work this sort of mutual authentication in NTLMv2 ??

Its based on client and server querying the other to make sure both sides have the same password (hash) in mind.


The server starts the authentication by sending a challenge to the client.

When responding to the server challenge the client can include its own challenge back to the server to verify the server.

take care,
Peter




Archive powered by MHonArc 2.6.24.

Top of Page