Authorization NTLM and PHP

[Lech Wilczyñski]

Hello

Does anyone ever made full authorization via NTLM using PHP?
I tried to do it but i stucked in validating nt_hash and lm_hash
received in messageType3.
I couldn't find any example of source code how to validate them.

I also tried to use mod_ntlm for apache2 but in error log I found only that:

....
send_ntlm_challenge: no conn. handle...trouble communicating with
PDC/BDC? returning internal server error

I checked the IP connectivity from the Apache host to the PDC is OK
presumably and the httpd.conf looks like this:

# used DOMAIN, pdc, bdc are here for example

AuthType NTLM
NTLMAuth on
NTLMAuthoritative on
NTLMDomain DOMAIN
NTLMServer pdc.my.domain.com
NTLMBackup bdc.my.domain.com
Require valid-user

LoadModule ntlm_module modules/mod_ntlm.so

Has anyone similar problem?

--
Lech Wilczyñski

[Manuel Lemos]

Hello,

On 11/14/2004 05:21 PM, Lech Wilczyñski wrote:

Does anyone ever made full authorization via NTLM using PHP?
Yes, but currently only for protocol client. Server side implementation
is planned. If you would like to submit server side implementation
driver for this SASL package, it would be welcomed too.

http://www.phpclasses.org/sasl

I tried to do it but i stucked in validating nt_hash and lm_hash
received in messageType3.
I couldn't find any example of source code how to validate them.
I have not looked into this in depth yet, but I think you validate it
just by forwarding back and forth to a domain controller, instead of
trying to check it yourself.

I also tried to use mod_ntlm for apache2 but in error log I found only
that:

...
send_ntlm_challenge: no conn. handle...trouble communicating with
PDC/BDC? returning internal server error

I checked the IP connectivity from the Apache host to the PDC is OK
presumably and the httpd.conf looks like this:

# used DOMAIN, pdc, bdc are here for example

AuthType NTLM
NTLMAuth on
NTLMAuthoritative on
NTLMDomain DOMAIN
NTLMServer pdc.my.domain.com
NTLMBackup bdc.my.domain.com
Require valid-user

LoadModule ntlm_module modules/mod_ntlm.so

Has anyone similar problem?

Have you tried using explicit IP addresses for the domain controllers?

--

Regards,
Manuel Lemos

PHP Classes - Free ready to use OOP components written in PHP
http://www.phpclasses.org/

PHP Reviews - Reviews of PHP books and other products
http://www.phpclasses.org/reviews/

Metastorage - Data object relational mapping layer generator
http://www.meta-language.net/metastorage.html

[Morten Dreier]

Lech Wilczy?ski <me****@poczta.onet.pl> wrote:

LoadModule ntlm_module modules/mod_ntlm.so

What version of mod_ntlm are you using?
There is a rewritten version at <URL:http://source.grep.no/>.
Works great.

--
Morten Dreier
http://morten.dreier.no/