Samba's base64 encoder/decoder

Andrew Bartlett abartlet at samba.org
Wed Apr 7 21:31:16 MDT 2010


On Wed, 2010-04-07 at 19:11 -0700, Mohan Narayanaswamy wrote:
> Hi Everyone,
> 
>  
> 
> I am trying to use samba3's ntlm_auth (gss-spnego helper) /winbindd
> utilities for performing NTLM pass-through authentication against a AD
> domain.  
> 
> My application uses libb64 (http://libb64.sourceforge.net/ ) and I am
> facing a problem while sending "KK base64 encoded Type1 SPNEGO blob". 
> 
>  
> 
> Libb64 breaks ( inserts "\n" ) the output line after every 76 characters
> and expects the decoder to ignore the  "\n".  ( most base64 encoders
> claims that this is a standard)
> 
> But samba's base64 decoder does not seem to ignore the "\n".  
> 
>  
> 
> Should I use only samba's encode/decode when I play with ntlm_auth ?

The ntlm_auth protocol is new-line based so you should post-process the
output from any other BASE64 encoder and take the newlines back out
before you submit them to ntlm_auth.  

This will then match the protocol that Squid and Samba use. 

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Cisco Inc.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 190 bytes
Desc: This is a digitally signed message part
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20100408/63b0e0f6/attachment.pgp>


More information about the samba-technical mailing list