NTLM authentication with NTLM2 session security

[eglass1 at comcast.net]

> 
> What challenge is sent to the DC over the netlogon pipe?  Is it the
> challenge that the server sent, or the result of the MD5 calculation? 
> 
> Also, does it change the session key that is generated?  (One would hope
> so, but that could be the sticking point in implementing on all of
> this).
> 

I'm not sure, unfortunately; we don't do signing/sealing, RPC, etc. yet in
jCIFS.  I got involved in all of this from the HTTP NTLM authentication angle
originally, and my background in the lower-level stuff is fairly lacking.


Eric