Skip to Content.
Sympa Menu

freetds - Re: [freetds] Multiple server challenge packets during NTLM authentication

freetds AT lists.ibiblio.org

Subject: FreeTDS Development Group

List archive

Chronological Thread  
  • From: Frediano Ziglio <freddy77 AT gmail.com>
  • To: FreeTDS Development Group <freetds AT lists.ibiblio.org>
  • Subject: Re: [freetds] Multiple server challenge packets during NTLM authentication
  • Date: Tue, 7 Jan 2014 21:32:24 +0000

2014/1/7 Vipul Sharma <vipsharma.sharma AT gmail.com>:
> Hello,
>
> While running my tests using tsql client, i found that if server sends
> multiple NTLM Challenge packets, then tsql generates a new NTLM AUTH packet
> for every Challenge packet. The sequence is as follows :
>
> Client -> Server (NTLM Negotiate packet)
> Server -> Client (NTLM Challenge packet)
> Client -> Server (NTLM AUTH packet)
> Server -> Client (NTLM Challenge packet)
> Client -> Server (NTLM AUTH packet)
>

Are you sure is not Kerberos ?? For Kerberos (or gssapi) is normal.
SSPI support both NTLM and Kerberos so perhaps it's using Kerberos. If
server connected it definitively is.

> Is this supported by NTLM protocol ? I tested the same sequence with other
> TDS clients(SQL Server Studio) and it threw an error.
>
> Is this a bug ? Can somebody please shed some light on this ?
>
> Thanks,
> Vipul

Frediano




Archive powered by MHonArc 2.6.24.

Top of Page