Re: [Dovecot] [PATCH] NTLM2 support

On Thu, 2004-09-30 at 18:41, Andrey Panin wrote:

Hello,

as pointed by Andrew Bartlett NTLM2 authentication support is missing in dovecot. Attached patch adds it. Tested and works for me.

It certainly looks correct from an NTLMSSP standpoint, except that I can't see any code to verify that there are actually 8 bytes in the LM response buffer (or likewise, that it's not a null pointer). This may also be an issue in the other codepaths.

Watch out when parsing, it's a nasty world out there :-)

Andrew Bartlett

-- Andrew Bartlett abartlet@samba.org Authentication Developer, Samba Team http://samba.org Student Network Administrator, Hawker College abartlet@hawkerc.net