(BUG) Negotiation fails for servers where 'NTLMv2 session security' i… - Githubissues

Azure / go-ntlmssp

NTLM/Negotiate authentication over HTTP

MIT License

189 stars 67 forks source link

(BUG) Negotiation fails for servers where 'NTLMv2 session security' i… #18

Closed davejohnston closed 6 years ago

davejohnston commented 6 years ago

Negotiation fails for servers where 'NTLMv2 session security' is required.

If a server has specified that NTLMv2 session security is required, then negotiation will fail as the client does not advertise this during the handshake. The negoiate message needs to include the relevant flag 'negotiateFlagNTLMSSPNEGOTIATEEXTENDEDSESSIONSECURITY'

To test enable this on the remote server by using regedt32 to modify the key HKLM\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0\NtlmMinServerSec and set the value to 0x20080000

boumenot commented 6 years ago

/cc @paulmey

LGTM. CI is failing, but that is unrelated to this change.

davejohnston commented 6 years ago

If anyone has permissions to kick the build of again that would be great.

paulmey commented 6 years ago

kicked it

boumenot commented 6 years ago

Please rebase your PR, and re-submit. This will pick up the CI fix.

msftclas commented 6 years ago

All CLA requirements met.

davejohnston commented 6 years ago

@boumenot done. It looks good now. Cheers

boumenot commented 6 years ago

Thanks for sticking with us, and the contribution!