From: Bjoern Meier on
2010/3/7, Arkady <arkadys(a)pineapp.com>:
> Hi,guys .
> I implement HTTP Proxy running in Linux environment and my proxy have
> to support NTLM authentication.
> My proxy written in C++.
>
> I want to use samba API ,but I don't* know how and what* API can be used
> exactly.
> I would very appreciate if you can advice me some example code and any
> advice which can help me in my task.
>
> Thanks in advance,Arkady

hi,

I don't think there is a need to use an API. We use Squid3 with NTLM
authentification over an external tool which provide samba.

Just a hint: man ntlm_auth

Greetings,
Björn
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
From: Arkady on
Hi,
I apologize for bothering you but I don't really understand what should
I do when my proxy get this one

*:* C --> S GET ...
Authorization: NTLM <base64-encoded type-1-message>

How should I call to ntlm_auth ? And what then ? I just novice in this
area , so I am little confused :-[ ...

Thanks in advance ,Arkady


NTLM Handshake

When a client needs to authenticate itself to a proxy or server using
the NTLM scheme then the following 4-way handshake takes place (only
parts of the request and status line and the relevant headers are shown
here; "C" is the client, "S" the server):

1: C --> S GET ...

2: C <-- S 401 Unauthorized
WWW-Authenticate: NTLM

*3:* C --> S GET ...
Authorization: NTLM <base64-encoded type-1-message>

4: C <-- S 401 Unauthorized
WWW-Authenticate: NTLM <base64-encoded type-2-message>

5: C --> S GET ...
Authorization: NTLM <base64-encoded type-3-message>

6: C <-- S 200 Ok



Bjoern Meier wrote:
> 2010/3/7, Arkady <arkadys(a)pineapp.com>:
>
>> Hi,guys .
>> I implement HTTP Proxy running in Linux environment and my proxy have
>> to support NTLM authentication.
>> My proxy written in C++.
>>
>> I want to use samba API ,but I don't* know how and what* API can be used
>> exactly.
>> I would very appreciate if you can advice me some example code and any
>> advice which can help me in my task.
>>
>> Thanks in advance,Arkady
>>
>
> hi,
>
> I don't think there is a need to use an API. We use Squid3 with NTLM
> authentification over an external tool which provide samba.
>
> Just a hint: man ntlm_auth
>
> Greetings,
> Björn
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba
>

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
From: Bjoern Meier on
2010/3/8 Arkady <arkadys(a)pineapp.com>:
> Hi,
> I apologize for bothering you but I don't really understand what should I do
> when  my proxy  get this one
>
> : C --> S GET ...
> Authorization: NTLM <base64-encoded type-1-message>
>
> How should I call to ntlm_auth ? And what then ? I just novice in this area
> , so I am little confused  :-[ ...
>
> Thanks in advance ,Arkady
>
> NTLM Handshake
>
> When a client needs to authenticate itself to a proxy or server using the
> NTLM scheme then the following 4-way handshake takes place (only parts of
> the request and status line and the relevant headers are shown here; "C" is
> the client, "S" the server):
>
> 1: C --> S GET ...
>
> 2: C <-- S 401 Unauthorized
> WWW-Authenticate: NTLM
>
> 3: C --> S GET ...
> Authorization: NTLM <base64-encoded type-1-message>
>
> 4: C <-- S 401 Unauthorized
> WWW-Authenticate: NTLM <base64-encoded type-2-message>
>
> 5: C --> S GET ...
> Authorization: NTLM <base64-encoded type-3-message>
>
> 6: C <-- S 200 Ok

hi,

you need to specify the helper protocol.
http://www.samba.org/samba/docs/man/manpages-3/ntlm_auth.1.html

"man ntlm_auth" provide all Infos you need.

Greetings,
Björn
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba