FreeTDS Development Group

[Brian Bruns <camber AT ais.org>]

On Wed, 30 May 2001, James Cameron wrote:

> Brian Bruns wrote:
> > Well sparked by some chatter here, I (with a great deal of help from
> > Steve Langasek) have been working on getting domain logins to MS sql
> > server working.
> 
> Great!  Is any of your work likely to be applicable to the issue of
> Mozilla or other web browsers not being able to perform NTLM
> authentication?

Dunno, it looks like MS uses essential the same method for all their
products, I've looked at SMB, telnet (via a CERT advisory lambasting them
for doing it), and the SQL stuff.  They're in different wrappers but
basically the data.  I'm doing only NTLMSSP right now, the v2 stuff looks
fairly simple as well (uses a standard MD4 hash instead, and is a bit more
secure). If someone shows up needing it, we should be able to support it,
but everything I've seen is the older hash.  

> I reviewed the proposed configuration file.  It is straightforward, and
> I understood it quickly.
> 
> Minor nit.  I'm not sure "[global]" is the best name for default
> settings ... (a) FreeTDS may be used in space ;-), (b) it prevents the
> use of a database with that name, (c) "[]", "[*]" or "[defaults]" mean
> more to me.

[defaults] it is.  anyone who named their database defaults is SOL ;-)  My
concern is that [] isn't very obvious as to its function, and we can't
very well have a config setting to determine the section name, now can we?
[global] is what samba uses, so I suppose you can't have a samba share
named 'global' either...hmmm...

BTW you could have a database or server named 'global' (or defaults) but
you couldn't have the symbolic server name called that.