Re: Bugzilla #610 and NTLM in Squid 2.5

On Mon, 2003-05-12 at 18:46, Henrik Nordstrom wrote:
> On Monday 12 May 2003 09.48, Serassio Guido wrote:
>
> > OK, this means a bug in wb_ntlmauth: now it expects only 24 bytes.
> >
> > >However, if you are getting more then 24 bytes for an NTLM
> > > response (check with ethereal), then squid's NTLMSSP parsing is
> > > broken.
>
> Squid just sends what it got from the browser as far as I know.

Sorry, I mean squid's NTLMSSP parsing lib, as used in wb_ntlmauth.

However, it appears that this is just an issue of not knowing what the
client is sending when analyzing the results :-).

The correct fix is to simply allow any size between 24 and
sizeof(fstring) bytes.

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet@pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet@samba.org
Student Network Administrator, Hawker College   abartlet@hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net