<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<META NAME="Generator" CONTENT="MS Exchange Server version 6.5.7653.38">
<TITLE>NTLMv2 Support in Cyrus SASL</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/plain format -->
<BR>
<P><FONT SIZE=2>Dan,<BR>
<BR>
<BR>
Just for testing, I replaced the ntlm.c file in plugins folder with<BR>
the contents of ntlm_samba.c (Got this file from previous attempts).<BR>
Without applying the patch, I did configure and make.<BR>
<BR>
<BR>
Then I did ldapsearch -I -H ldap://ldap.example.org -b 'ou=Users,ou=readimanager'.<BR>
After entering the username,password and realm, I got an error saying that<BR>
"Unable to contact to LDAP server (-1)."<BR>
The LDAP server is at different location.<BR>
(I was able to connect using the above command by using Cyrus SASL 2.1.23<BR>
which uses NTLMv1)<BR>
<BR>
<BR>
When I observed in ethereal, the TYPE 3 NTLM message was not proper.<BR>
Ethereal showed 'Un reassembled TCP segmements' and the credentials field was absent.<BR>
I came to know that this patch uses samba's ntlm_auth tool.<BR>
I don't know how to use ntlm_auth with OpenLDAP and Cyrus SASL plugin.<BR>
<BR>
<BR>
Thanks,<BR>
Dhruva<BR>
<BR>
<BR>
</FONT>
</P>
<pre>
</pre></BODY>
</HTML>