Use domain from username, not server/target when authenticating

Azure / go-ntlmssp

NTLM/Negotiate authentication over HTTP

MIT License

189 stars 67 forks source link

Open nickdannenberg opened 2 years ago

nickdannenberg commented 2 years ago

This fixes authentication problems if user and server domain are different.

Without this change, the server's domain is used to construct "authenticateMessage" and "ntlmv2Hash". This will not work in a multi-domain setup.

ghost commented 2 years ago

All CLA requirements met.