Re: proper nt-style authentication (reactos, wine, samba tng)

[Luke Kenneth Casson Leighton]

On Sat, Sep 03, 2005 at 01:09:47AM +0100, Luke Kenneth Casson Leighton wrote:
> i trust that you are aware that NTLM authentication has
> been provided for quite some time to external services,
> in a number of ways.  as you helped design one of those
> methods (the winbind_auth_crap :) and guided tim in its
> implementation, i am puzzled by the fact that it was not
> mentioned in your message.
>
> there is also an additional method which has been
> developed in samba 3, called ntlm_auth, which has even
> been utilised by a SOC Google student.
>
> both these methods avoid reimplementation of NTLMSSP:
> what therefore are you proposing that is, if at all,
> different from this?  i don't understand: perhaps you
> could explain?

the summary:

ntlm_auth and winbindd are appropriate for Wine.

due to the fact that samba cannot run on a Win32 platform, neither of
 those two programs are appropriate.

it is therefore much more appropriate to implement the same
 stuff that's in NT _for_ ReactOS, and the closest bit of
 code to that is cli_nt_login_interactive (or similar), as
 MSRPC-based APIs.

l.