[linux-cifs-client] Linux CIFS NTLMSSP mount failing against win2k8

[Andrew Bartlett]

On Sun, 2010-04-11 at 19:40 -0400, Jeff Layton wrote:

> I don't think that's right. CIFS_SESS_KEY_SIZE is 24 bytes. According
> to the MS-NLMP document, the session key should be 16 bytes. The
> signing key is different with NTLMSSP than with "raw" NTLM and NTLMv2.

So, with NTLMSSP the 24 byte (actually variable, it is much lager for
NTLMv2) response is not included in the MAC calculation - just use the
16 bytes session key only. 

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Cisco Inc.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 190 bytes
Desc: This is a digitally signed message part
URL: <http://lists.samba.org/pipermail/linux-cifs-client/attachments/20100413/e7168579/attachment.pgp>