Samba4 and NTLM_AUTH

Ted Salmon tass2001 at
Tue Sep 13 23:57:47 MDT 2011

Hi Kai,

Interesting. When I run ntlm_auth from the CLI, unless I'm doing something wrong, I get no output no matter what username/password I use:

root at NETW1-STATS:/# ntlm_auth --domain=NETWORK --username=tsalmon
root at NETW1-STATS:/#

root at NETW1-STATS:/# ntlm_auth -V
Version 4.0.0alpha17

Am I doing something wrong or is my build broken?

Additionally, I'll start looking into making a script as you suggested.


Ted Salmon

> Date: Wed, 14 Sep 2011 07:48:43 +0200
> From: kai at
> To: tass2001 at
> CC: samba-technical at
> Subject: Re: Samba4 and NTLM_AUTH
> Hash: SHA1
> On 2011-09-14 07:19, Ted Salmon wrote:
> Hi Ted,
> > I am in need of the ntlm_auth for use with FreeRADIUS (MsCHAP Auth
> > for Wireless M$ clients). I noticed that ntlm_auth is completely
> > broken in Samba4 and was wondering if anyone could give me any
> > pointers as to where to begin to fix it.
> While I would argue that ntlm_auth in Samba4 is not _completely_ broken,
> I'm ready to believe that the helper mode needed for RADIUS auth is.
> That's because ntlm_auth4 is a complete rewrite of the tool, and there's
> no tests proving that all parts of it work.
> An obvious first step would be to make it possible to see if ntlm_auth
> works or not without having to go through setting up the whole RADIUS
> environment (or pppd, which iirc uses the same ntlm_auth mode).
> Such a test script will significantly increase the number of people that
> can work on fixing any remaining issues.
> Cheers,
> Kai
> - -- 
> Kai Blin
> Worldforge developer
> Wine developer
> Samba team member
> Version: GnuPG v1.4.10 (GNU/Linux)
> Comment: Using GnuPG with Mozilla -
> blMAn0KSIcx5yJrVvCvhZ97NSbR3MekO
> =PUms

More information about the samba-technical mailing list