NTLMv2 with Digital Signing

View: New views
2 Messages — Rating Filter:   Alert me  

NTLMv2 with Digital Signing

by rosed :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

I've been working on adding NTLMv2 support to JCIFS.  So far I've implemented the getNTLMv2Response in the NtlmPasswordAuthentication class using the davenport spec (http://davenport.sourceforge.net/ntlm.html).  This seems to be working (saving a file to a windows share) if I set the property jcifs.smb.lmCompatibility to 5 and set the LMCompatibilityLevel on the server to 5.  But this will only work if I also disable the following Security Option in the Local Security Policies on the server:  Microsoft network server: Digitally sign communications (always).  If I enable this setting then I'm able to authenticate but as soon an I try to save a file to the share I get an access denied error.  Any ideas on how to get this to work with Digital Signing?

Thanks,
Danny

Re: NTLMv2 with Digital Signing

by Matt Parker-3 :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

getNTLMv2Response by itself would be helpful to those who only need
the authentication part to work. Are you at a point where you could
contribute that method as a patch?

Matt

On Wed, Jul 2, 2008 at 11:04 AM, rosed wrote:

>
> I've been working on adding NTLMv2 support to JCIFS.  So far I've implemented
> the getNTLMv2Response in the NtlmPasswordAuthentication class using the
> davenport spec (http://davenport.sourceforge.net/ntlm.html).  This seems to
> be working (saving a file to a windows share) if I set the property
> jcifs.smb.lmCompatibility to 5 and set the LMCompatibilityLevel on the
> server to 5.  But this will only work if I also disable the following
> Security Option in the Local Security Policies on the server:  Microsoft
> network server: Digitally sign communications (always).  If I enable this
> setting then I'm able to authenticate but as soon an I try to save a file to
> the share I get an access denied error.  Any ideas on how to get this to
> work with Digital Signing?
>
> Thanks,
> Danny
>
> --
> View this message in context: http://www.nabble.com/NTLMv2-with-Digital-Signing-tp18242246p18242246.html
> Sent from the Samba - jcifs mailing list archive at Nabble.com.
>
>
LightInTheBox - Buy quality products at wholesale price!