NTLM authentication with smblib against AD

[Andrew Bartlett]

Yuquan Jiang wrote:
> 
> I have been using smblib 1.0 to implement NTLM authentication to PDCs.
> Now I find it fail to authenticate with a win2k server running active
> directory.
> Is there any patch to this SMB library that can talk to AD to
> authenticate users

*Please* don't use smblib, smbval, libsmb++ etc for various hacked-up
authenticaions schemes.... 

The samba team has deveoped a quite sensible interface for this - use
pam_winbind or (but this interface changes more often) the winbind
socket interface.  

You will find that various client libs only support older dialects of
the protocol, and therefore fail when the remote server only accepts NT
authenticaion (not the LM used in older versions).

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net