[Samba] ntlm_auth and PEAP machine authentication

Norbert Wegener nw at sbs.de
Sun Nov 20 16:22:19 GMT 2005


Andrew Bartlett wrote:

>On Sat, 2005-11-19 at 17:18 +0100, Norbert Wegener wrote: 
>  
>
>>At
>>http://groups.google.de/group/mailing.unix.samba/browse_frm/thread/3806dd92303380d1/10f21511e488d8d0?lnk=st&q=ntlm_auth++%22machine+authentication%22&rnum=1&hl=de#10f21511e488d8d0
>>the question is discussed, whether ntlm_auth can be used for machine 
>>authentication against a Win2003/AD.
>>and the conclusion seems to be, that it is not really clear:
>>    
>>
>
>  
>
>>Which credentials do I have to supply to ntlm_auth to make it work?
>>Googling around I found something like:
>>    
>>
>
>You need Samba 3.0.21rc1 on your Samba server.
>
>Andrew Bartlett
>  
>
I have installed that version right now, but I still get Logon failure 
(0xc000006d), when trying to authenticate a machine.(user authentication 
works fine)
 What I do is:
/usr/local/samba/bin/ntlm_auth --request-nt-key 
--domain=TDE002.MYDOMAIN.NET --username=LNXAD$ --challenge=010203040
5060708 --nt-response=0102030405060708090A0B0C0D0E0F101112131415161718,
As I do not know, how to determin a valid challenge and response, I took 
those values from postings, I found.
Is this the  reason for that behaviour? If so, how do I get valid values 
for challenge and response? if not: What am I doing wrong?
Thanks
Norbert Wegener





More information about the samba mailing list