Skip to content

ntlm: fix ntlmv2 authentication

Thibaut Robert requested to merge trobert/libsoup:master into master

Hi,

I wrote this patch to be able to connect to the new exchange server of my company. Note: I used curl behaviour (with which I can login successfully) and http://davenport.sourceforge.net/ntlm.html as a reference to get a working scenario.

This patch adds the NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY bit in the flags of the NTLM type 3 response when using NTLMv2. This seems to be required for some servers.

It also add 4 NULL bytes of padding at the end of the NTLM blob (as described in http://davenport.sourceforge.net/ntlm.html)

Merge request reports