FYI. Authentication of Nag/Netsaint web pages _without_ password challeng for MS IE browsers ..

[Stanley Hopcroft]

Dear Sir,

On Mon, Feb 10, 2003 at 08:26:58AM +0100, Thomas Nilsen wrote:


> Stanley,
> 
> Could you post some more details on this? I've tried unsuccessfully to
> get Apache::AuthenNTLM to work. which patches do you use,

I am a litle reluctant to talk more about this for various reasons, most
particuarly 

1 Authen::AuthenSmb is based on _old_ technology. I would like to
provide a better basis for modules like this.

2 There is another list member who has been devoting some time to this
matter and he indicated a wish to provide the list with a blow by blow
description of how setup Domain authentication of Nag CGIs.

I apologise for preempting his work but suggest that there is ample
scope for what he intends.

> and from where do you get them?

>From me. Caveat Emptor.

> Regards, Thomas

Here are the patches.

tsitc> diff -U3 smbval/smbencrypt.c.orig smbval/smbencrypt.c
--- smbval/smbencrypt.c.orig    Sat Jul 14 19:53:56 2001
+++ smbval/smbencrypt.c Sat Jul 14 19:54:11 2001
@@ -24,7 +24,7 @@
 #include <arpa/inet.h>
 #include <dirent.h>
 #include <string.h>
-#include <sys/vfs.h>
+/* #include <sys/vfs.h> */
 #include <netinet/in.h>
 #include <ctype.h>
 #include "smblib-priv.h"
tsitc> 

# Note, this is known to work _only_ on FreeBSD 4.x

# Don't even think about hacking Mr Sharpes 'portable SMB library'.
# Samba now provides a portable client library 'libsmbclient.so'.

tsitc> diff -U3 AuthenNTLM.pm.dist AuthenNTLM.pm
--- AuthenNTLM.pm.dist  Fri Feb  7 19:30:20 2003
+++ AuthenNTLM.pm       Fri Feb  7 19:31:25 2003
@@ -232,7 +232,8 @@
     {
     my ($self, $r) = @_ ;
 
-    return lc("$self->{userdomain}\\$self->{username}") ;
+    return lc("$self->{username}") ;
+    # return lc("$self->{userdomain}\\$self->{username}") ;
     }
 
 
tsitc> 

# Note 1 You almost certainly need this patch unless your Nag users are
#        of the form Domain\UserName

# Note 2 Unless your Nag usernames and Domain Account names are #
#        _identical_, _none_ of these means of Authentication methods 
#        are going to be useful.


Yours sincerely.


-- 
------------------------------------------------------------------------
Stanley Hopcroft
------------------------------------------------------------------------

'...No man is an island, entire of itself; every man is a piece of the
continent, a part of the main. If a clod be washed away by the sea,
Europe is the less, as well as if a promontory were, as well as if a
manor of thy friend's or of thine own were. Any man's death diminishes
me, because I am involved in mankind; and therefore never send to know
for whom the bell tolls; it tolls for thee...'

from Meditation 17, J Donne.


-------------------------------------------------------
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
http://www.vasoftware.com