Fix smartcard offline logon and NTLM authentication

Stefan Metzmacher metze at
Mon Jun 20 20:55:42 UTC 2016


here're some patches to fix smartcard offline logons
and related bugs.

The key part is adding PAC_CREDENTIAL with the NTHASH.

In order to avoid an NTHASH based on a password,
I also implemented the UF_SMARTCARD_REQUIRED feature,
that generates a random NTHASH value, that is only
known to the KDC and the private key of the smartcard.

I may need to add some more BUG: markers, but you can start
with the review now:-)

it's based on;a=shortlog;h=refs/heads/master4-smart-base


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: OpenPGP digital signature
URL: <>

More information about the samba-technical mailing list