Kerberos 5 and NTLMv2 without SPNEGO?

Luke Howard lukeh at
Wed Jul 2 00:58:49 GMT 2008

On 02/07/2008, at 1:49 AM, Gerald (Jerry) Carter wrote:

> Hash: SHA1
> Michael B Allen wrote:
>> Dear Cousin,
>> Does anyone know if it's ok to do Kerberos 5 and / or NTLMSSP without
>> I'm 95% sure the answer is "yes" but it would be nice if someone gave
>> me assuring pat on the head.
> Pretty sure.  Been a while since I looked but I think this is how
> Steve previously did NTLMSSP in the cifs fs.

I think Windows still does raw NTLMSSP too... never seen raw Kerberos  
though, but SSPI is sufficiently well layered that I would expect it  
to work.

-- Luke

More information about the samba-technical mailing list