http://bugs.winehq.org/show_bug.cgi?id=19212
--- Comment #2 from Juan Lang juan_lang@yahoo.com 2009-07-06 13:22:06 --- (In reply to comment #1)
Yeah, looks like we'll have to implement it. That's going to be a pain, as we either need to do the ASN.1 parsing ourselves or build on top of some ASN.1 library out there. Alternatively, we could base our SSPI code on top of Heimdal GSSAPI and hope that MIT GSSAPI catches up on the NTLM support soon (I heard RedHat was working on this). We'd still have to do SSL (SCHANNEL) ourselves, but IIRC you can only Negotiate (SPNEGO, as per RFC) between NTLM and Kerberos.
What do we need to parse? crypt32 has done some asn.1 parsing for some time, the code there could be of use.