cURL / Mailing Lists / curl-library / Single Mail

curl-library

Re: NTLM user name and password case sensitive or not?

From: Michael Wood <esiotrot_at_gmail.com>
Date: Tue, 14 Oct 2008 17:36:44 +0200

On Tue, Oct 14, 2008 at 5:21 PM, Joe Nardone <jnardone_at_gmail.com> wrote:
>> I seem to recall someone reporting the original case sensitive comparison
>> as a bug some time ago. I would imagine that at least the user name in
>> Windows would be case insensitive.
>>
>
> Windows usernames are not case-sensitive, but passwords are.

Passwords are converted to uppercase before hashing if the LM hash is
used, (but you should not still be using LM hashes). I believe NTLM
hashed passwords are case sensitive.

-- 
Michael Wood <esiotrot_at_gmail.com>
Received on 2008-10-14