List Info

Thread: SSPI NTLM Challenge/Response over SMTP




SSPI NTLM Challenge/Response over SMTP
country flaguser name
United Kingdom
2007-05-24 12:08:19
Hi,
 
I have written a client and server that uses NTLM Challenge/Response to authenticate. We use the Microsoft SSPI NTLM provider to provide the authentication and all works fine. We use AcquireCredentialsHandle, InitializeSecurityContext, etc..
 
We are now implementing NTLM authentication over SMTP in our SMTP client but when we try and authenticate to the Microsoft Virtual SMTP Server (from a remote machine) the authentication fails. Strangely it works when both the SMTP server and the program are on the same machine.
 
The Event Log on the server shows an unusual Logon Failure entry with
Logon Failure:
  Reason:    An unexpected error occurred during logon
  User Name: 
  Domain:
  Logon Type:      3
  Logon Process:  ;(ú^
  Authentication Package: NTLM
  Workstation Name:
 
And the SMTP conversation is ...
 
AUTH NTLM
334 NTLM supported
TlRMTVNTUAABAAAAB7IIogkACQAtAAAABQAFACgAAAAFASgKAAAAD0tQREVWQ09ERVNUT05F
334 TlRMTVNTUAACAAAAEgASADAAAAAFgomgehZluoip9o8AAAAAAAAAAHwAfABCAAAAQwBPAEQARQBTAFQATwBOAEUAAgASAEMATwBEAEUAUwBUAE8ATgBFAAEAEABUAEUAUwBUAEUAWABDAEgABAAaAGMAbwBkAGUAcwB0AG8AbgBlAC4AbgBlAHQAAwAsAHQAZQBzAHQAZQB4AGMAaAAuAGMAbwBkAGUAcwB0AG8AbgBlAC4AbgBlAHQAAAAAAA==
TlRMTVNTUAADAAAAGAAYAHwAAAAYABgAlAAAABIAEgBIAAAAGAAYAFoAAAAKAAoAcgAAAAAAAACs
AAAABYKIogUBKAoAAAAPQwBPAEQARQBTAFQATwBOAEUASwBlAHYAaQBuACAAUABhAGwAbQBlAHIA
SwBQAEQARQBWANUywn1Vkz3kAAAAAAAAAAAAAAAAAAAAAMwtmh/j9XPX0Kjy+mG0Foj8K8Jx+27W
iw==
535 5.7.3 Authentication unsuccessfull
 
I've compared the packets with Outlook Express's which works fine and they seem very similar.
 
Has anyone experienced this problem before? Am i missing something?
 
I can send the code, packet dumps ;or any other information to assist...
 
Cheers
 
Kevin.
[1]

about | contact  Other archives ( Real Estate discussion Medical topics )