Skip to Content.
Sympa Menu

freetds - Re: [freetds] mission: emulate "trusted login"

freetds AT lists.ibiblio.org

Subject: FreeTDS Development Group

List archive

Chronological Thread  
  • From: "James K. Lowden" <jklowden AT freetds.org>
  • To: FreeTDS Development Group <freetds AT lists.ibiblio.org>
  • Subject: Re: [freetds] mission: emulate "trusted login"
  • Date: Tue, 3 Feb 2009 20:10:59 -0500

Peter Deacon wrote:
> Used LsaLogonUser years back to authenticate to windows by passing
> challenge/response material from a client.

Hmm. Inspection of ntwlib.dll shows a reference to security.dll and a call
to AcceptSecurityContext. Security.dll exports a tidy package of worthy
functions,

AcceptSecurityContext
AcquireCredentialsHandle
AddSecurityPackage
ApplyControlToken
CompleteAuthToken
DecryptMessage
DeleteSecurityContext
DeleteSecurityPackage
EncryptMessage
EnumerateSecurityPackages
ExportSecurityContext
FreeContextBuffer
FreeCredentialsHandle
ImpersonateSecurityContext
ImportSecurityContext
InitSecurityInterface
InitializeSecurityContext
MakeSignature
QueryContextAttributes
QueryCredentialsAttributes
QuerySecurityContextToken
QuerySecurityPackageInfo
RevertSecurityContext
SealMessage
UnsealMessage
VerifySignature

Also found:

http://alt.pluralsight.com/samplecontent/sspi_auth.cpp

This provides the usual primitive example of something you don't want and
vague hints about the possibility of doing what you do want:

http://technet.microsoft.com/en-us/library/bb742535.aspx

"It is conceivable that a TCP/IP provider could use SSPI to
encapsulate
security functionality such that it can be invoked by a WinSock
application."

Indeed.

--jkl




Archive powered by MHonArc 2.6.24.

Top of Page