Help: OpenLdap bindRequest with NTLM authentication makes mailformed message.

[shimi]

On Tue, Mar 3, 2015 at 10:20 PM, Lev Olshvang <lolshva at 012.net.il> wrote:

>
> Hello Alll,
>
>
> Does anybody have example or can advice how to perform NTLM authentication
> of Linux client toward Microsoft AD service?
>
>
> I calledd ldap_ntlm_bind() to do the Job, but
> Wireshark can not fully recognize these message and prints "mailformed"
>
> And following
> ldap_parse_ntlm_bind_result() returns with Authentication error.
>
>
> Unfortunately these functions are not documented, perhaps I pass wrong
> parameters.
>
>
> Actually I pass
> ldap_ntlm_bind(ld, dn, LDAP_AUTH_NTLM_REQUEST, cred, NULL, NULL, msgidp);
> I put password in cred structure and user parameter as part of dn string,
> like "user=NTDOMAIN\lev, cn=myhost,dn=com"
>
>
> Many thanks and Hag Sameah,
>
>
Tried already the 'regular' way (
https://help.ubuntu.com/community/ActiveDirectoryWinbindHowto) and saw if
that works? Maybe the issue is not with your code...

Not that I am sure what are you trying to do beyond just authenticating (if
it's just login or similar, why really not with winbind through PAM?) -
maybe I got it all wrong :-)

IIRC, to use LDAP towards an AD server, it must be a GlobalCatalog - you
should make sure that is the case (as well as the right port for the job,
whether encryption is used or not, etc etc.). But this is ancient history,
so I hope I am not misleading you.

-- Shimi
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.cs.huji.ac.il/pipermail/linux-il/attachments/20150304/061bf37b/attachment-0001.html>