Bugs item #915609, was opened at 2004-03-13 06:58
Message generated for change (Comment added) made by nobody
You can respond by visiting:
https://sourceforge.net/tracker/?func=detail&atid=100976&aid=915609&group_id=976

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: http
Group: wrong behaviour
Status: Closed
Resolution: Later
Priority: 6
Submitted By: Nobody/Anonymous (nobody)
Assigned to: Daniel Stenberg (bagder)
Summary: NTLM auth failure with pwd > 14 chars

Initial Comment:
problem found on curl 7.11.0 (both win32 and linux)

NTLM authenticication via HTTP/HTTPS against an IIS5
server doesn't seem to work if given password length
exceeds 14 characters. The server rejects the given
credentials in the last (type 3) NTLM auth packet.

----------------------------------------------------------------------

Comment By: Nobody/Anonymous (nobody)
Date: 2006-02-10 07:59

Message:
Logged In: NO

test

----------------------------------------------------------------------

Comment By: Daniel Stenberg (bagder)
Date: 2004-03-16 01:06

Message:
Logged In: YES
user_id=1110

This is now mentioned in the TODO-RELEASE as issue 29 to get
fixed for the 7.11.2 release.

Thanks for telling us!

----------------------------------------------------------------------

Comment By: Daniel Stenberg (bagder)
Date: 2004-03-14 14:39

Message:
Logged In: YES
user_id=1110

It is disabled because it adds nothing extra and there is
(was) no known benefit of doing that extra stuff.

You've now found a reason to add it to the default build...

----------------------------------------------------------------------

Comment By: Nobody/Anonymous (nobody)
Date: 2004-03-13 07:27

Message:
Logged In: NO

Solution: #define USE_NTRESPONSES in http_ntlm.c does the
trick. Why is generating NT responses disabled for the NTLM
auth in the source ? This is why it works with Mozilla 1.6.

----------------------------------------------------------------------

Comment By: Nobody/Anonymous (nobody)
Date: 2004-03-13 07:00

Message:
Logged In: NO

Info: NTLM auth with the same credentials in the same
scenario works with Mozilla1.6.

----------------------------------------------------------------------

You can respond by visiting:
https://sourceforge.net/tracker/?func=detail&atid=100976&aid=915609&group_id=976
Received on 2006-02-10