[jcifs] NTLM session security
Christopher R. Hertel
crh at ubiqx.mn.org
Tue Oct 11 13:04:34 MDT 2011
For a better understanding of NTLMSSP, NTLMv2 Session Security, and CIFS
signing, I recommend the following...
You might also have a look at the authentication section of
Whch should provide the base understanding necessary to interpret the rest
of those docs.
Michael B Allen wrote:
> On Mon, Oct 10, 2011 at 11:43 PM, Mohan Radhakrishnan <mohanr at fss.co.in> wrote:
>> I might have understand this wrongly. Does this mean all data
>> passing through the socket using JCIFS is signed and verified at the
>> other end ?
> If signatures are negotiated then yes.
> But if you are looking for "NTLMv2 session security" like you might
> use with the Windows NTLMSSP, CIFS does not use that. CIFS implements
> it's own message signatures that are not even based on streams. Each
> CIFS message has a designated area for a signature. It only uses the
> encryption key negotiated during NTLMv2 authentication.
"Implementing CIFS - the Common Internet FileSystem" ISBN: 013047116X
Samba Team -- http://www.samba.org/ -)----- Christopher R. Hertel
jCIFS Team -- http://jcifs.samba.org/ -)----- ubiqx development, uninq.
ubiqx Team -- http://www.ubiqx.org/ -)----- crh at ubiqx.mn.org
OnLineBook -- http://ubiqx.org/cifs/ -)----- crh at ubiqx.org
More information about the jCIFS