RPC auth

[Luke Kenneth Casson Leighton]

On Mon, 28 Jun 1999, Hernan Ochoa wrote:

> 
> hi.
> 
> well, i think i found it. 
> in rpc_client/cli_pipe.c

not quite.  what you have found, here, is "NTLMSSP" over DCE/RPC.
 
> in function create_rpc_bind_resp() there the NT/LM hashes are sent.

no, they are used to generate 24-byte responses.

> it says something about a 3-way handshake, and in the same file i guess
> the RPC is negotiating the SSP (Security Service Provider) to use,

yep.

> and i
> think samba is selecting NTLM, the default. everything is fitting now, i
> think.
> 
> is there any documentation about this?

publicly available?  no, sorry!

> apart from cifsntdomain.txt?
> 
> well, i'll keep reading the code.

good for you.  keep asking the questions.  if it's a new topic, i'll
answer.  if the answers are already available, i won't (r.s.i).

luke