mod_ntlm_winbind back alive!

Andrew Bartlett abartlet at
Sat Aug 28 04:24:48 GMT 2004

On Sat, 2004-08-28 at 14:09, abartlet at wrote:
> Author: abartlet
> Date: 2004-08-28 04:09:04 +0000 (Sat, 28 Aug 2004)
> New Revision: 31
> WebSVN:
> Log:
> Initial version of the re-written mod_ntlm_winbind.

Which I should thank Tim Potter for - he did a *lot* of work cleaning up
the mod_ntlm that was available a few years ago.  It's been sitting in
our CVS for ages, now it's hosted in the lorikeet SVN repository.

> This version of the module simply calls Samba's own ntlm_auth, and does not attempt to parse the NTLMSSP in any way.
> Portions inspired by some of the various other mod_ntlm
> implementations out there.  My hope is that we can have one version of
> this module, hosted in lorikeet.
> This is a module for Apache 1.3 only, an Apache2 version will be
> required, and I've seen some examples that look promising.

I've been wanting to update this for a while, and I finally got work
time to put into it (new job ;-), and I hope to work with all the
various mod_ntlm authors to make one single, maintained version.  

Many thanks to those who have carried the can for so long!

This version uses only Samba's ntlm_auth, not smbval, and not private
hooks into winbindd.  It should therefore be stable across multiple
Samba versions, while fully supporting all the variations on NTLMSSP.

It is also a very good base to add a SPENGO (Negotiate) module, that
accepts NTLMSSP as well as kerberos.

Persons interested in a very well tested mod_ntlm_winbind could look at
the revision before this (which came out of St Bernard Software).


Andrew Bartlett

Andrew Bartlett                                 abartlet at
Authentication Developer, Samba Team  
Student Network Administrator, Hawker College   abartlet at
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url :

More information about the samba-technical mailing list