NTLM/Kerberous Authentication base64 Client/Server

NTLM/Kerberous Authentication base64 Client/Server

I have both a client and server process (executables written by me) that
need to use NTLM/Kerberous authentication. Because my Client/Server use a
custom text based protocol I will need to base64 responses from the NTLM
sub system back and forth to each other.

How do I go about doing this? What are the API SSPI calls involved. Any
libraries with source for this sort of thing?

I am getting my ideas from the MS document [MS-OXPOP3].pdf
It talks about all this but does not explain how.

Read the short doc here:
http://msdn.microsoft.com/en-us/library/cc433492(EXCHG.80).aspx

date: Sat, 13 Sep 2008 18:02:21 -0700 author: NA

Re: NTLM/Kerberous Authentication base64 Client/Server

Hello Stefan,

This is a quick note to let you know that I am performing research on this 
issue and will get back to you as soon as possible. I appreciate your 
patience.

Best regards,
Feng Chen
Microsoft Online Community Support

Delighting our customers is our #1 priority. We welcome your comments and
suggestions about how we can improve the support we provide to you. Please
feel free to let my manager know what you think of the level of service
provided. You can send feedback directly to my manager at:
msdnmg@microsoft.com.
==================================================
Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notif
ications .

Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 1 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at
http://msdn.microsoft.com/subscriptions/support/default.aspx .
==================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

"NA"  wrote in message 
news:eJFoLWgFJHA.3848@TK2MSFTNGP02.phx.gbl...
>I have both a client and server process (executables written by me) that
> need to use NTLM/Kerberous authentication. Because my Client/Server use a
> custom text based protocol I will need to base64 responses from the NTLM
> sub system back and forth to each other.
>
> How do I go about doing this? What are the API SSPI calls involved. Any
> libraries with source for this sort of thing?
>
> I am getting my ideas from the MS document [MS-OXPOP3].pdf
> It talks about all this but does not explain how.
>
> Read the short doc here:
> http://msdn.microsoft.com/en-us/library/cc433492(EXCHG.80).aspx

date: Mon, 15 Sep 2008 17:41:55 +0800 author: Feng Chen[MSFT]

Re: NTLM/Kerberous Authentication base64 Client/Server

Feng Chen[MSFT] wrote:

> This is a quick note to let you know that I am performing research on this issue and
> will get back to you as soon as possible. I appreciate your patience.
> 

If you could just make this sample compile using VS2005 I could step through the
source. However it gives an OS Loader error :(

http://msdn.microsoft.com/en-us/library/ms973911.aspx

date: Mon, 15 Sep 2008 13:27:18 -0700 author: NA

RE: NTLM/Kerberous Authentication base64 Client/Server

Hello Stefan,
 
This is a quick note to let you know that I am performing research on this 
issue and will get back to you as soon as possible. I appreciate your 
patience.

Best regards,
Feng Chen
Microsoft Online Community Support

Delighting our customers is our #1 priority. We welcome your comments and 
suggestions about how we can improve the support we provide to you. Please 
feel free to let my manager know what you think of the level of service 
provided. You can send feedback directly to my manager at: 
msdnmg@microsoft.com.
==================================================
Get notification to my posts through email? Please refer to 
http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notif
ications .

Note: The MSDN Managed Newsgroup support offering is for non-urgent issues 
where an initial response from the community or a Microsoft Support 
Engineer within 1 business day is acceptable. Please note that each follow 
up response may take approximately 2 business days as the support 
professional working with you may need further investigation to reach the 
most efficient resolution. The offering is not appropriate for situations 
that require urgent, real-time or phone-based interactions or complex 
project analysis and dump analysis issues. Issues of this nature are best 
handled working with a dedicated Microsoft Support Engineer by contacting 
Microsoft Customer Support Services (CSS) at 
http://msdn.microsoft.com/subscriptions/support/default.aspx .
==================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

date: Mon, 15 Sep 2008 07:53:29 GMT author: (Feng Chen[MSFT])

Re: NTLM/Kerberous Authentication base64 Client/Server

Hello NA,

I investigated the sample. Based on my understanding, that you're talking 
about the project "Microsoft.Samples.Security.SSPI" in it. It is a Managed 
C++ project written in Visual Studio 2003, and you open and try to compile 
it in VS2005. If I have misunderstood you, please let me know.

I'm not sure about the meaning of the sentence "OS Loader error", could you 
please post here the detailed error message?

Thanks.

Best regards,
Feng Chen
Microsoft Online Community Support
=========================================
Delighting our customers is our #1 priority. We welcome your comments and 
suggestions about how we can improve the support we provide to you. Please 
feel free to let my manager know what you think of the level of service 
provided. You can send feedback directly to my manager at: 
msdnmg@microsoft.com.

This posting is provided "AS IS" with no warranties, and confers no rights.

"NA"  wrote in message 
news:%23SSzzF3FJHA.2508@TK2MSFTNGP06.phx.gbl...
> Feng Chen[MSFT] wrote:
>
>> This is a quick note to let you know that I am performing research on 
>> this issue and
>> will get back to you as soon as possible. I appreciate your patience.
>>
>
> If you could just make this sample compile using VS2005 I could step 
> through the
> source. However it gives an OS Loader error :(
>
> http://msdn.microsoft.com/en-us/library/ms973911.aspx
>
>

date: Tue, 16 Sep 2008 17:35:38 +0800 author: Feng Chen[MSFT]

Re: NTLM/Kerberous Authentication base64 Client/Server

Feng Chen[MSFT] wrote:

> Hello NA,
> 
> I investigated the sample. Based on my understanding, that you're talking about the
> project "Microsoft.Samples.Security.SSPI" in it. It is a Managed C++ project written in
> Visual Studio 2003, and you open and try to compile it in VS2005. If I have
> misunderstood you, please let me know.
> 
> I'm not sure about the meaning of the sentence "OS Loader error", could you please post
> here the detailed error message?

Correct it is written in VS2003. I have made a 2005 version of it. When I go to
debug the .dll (Microsoft.Samples.Security.SSPI.dll) which has the source in
SSPI.h VS2005 gives me that error. Actually the GUI is what is used to lauch
the debugging of the .dll
(Microsoft.Samples.Security.SSPI.Sample.ControlPanel.Client.exe)
it causes a strange exception.

I am currenly reading the SSPI WorkBench by Keith Brown so I will probably get
this figured out. Still it would nice if you would have the sample updated to work
with VS2005.

date: Tue, 16 Sep 2008 09:24:32 -0700 author: NA

Re: NTLM/Kerberous Authentication base64 Client/Server

Hello NA,

Based on my understanding, what you mean by the OS Loader error is an 
assembly load error saying "Could not load file or assembly 
'Microsoft.Samples.Security.SSPI' ." when you're using the 
Microsoft.Samples.Security.SSPI.Sample.ControlPanel.Client.exe, if I have 
misunderstood you, please free to let me know.

To work around this issue, we can copy the 
Microsoft.Samples.Security.SSPI.dll to the same directory of the execution.

It is my pleasure to help send a wish to the author of the article internal 
channel so that he can update the sample to use latest version of Visual 
Studio. You are also welcome to submit this issue as a feature request to 
the following site in the formal way: 
https://connect.microsoft.com/VisualStudio. It will be easier for the 
product group to respond to issues logged from customer through the connect 
portal. You can also watch it and directly send any comment to the product 
team which will handle this issue. Other community members having similar 
issues can also find and vote on it.

If you have any other question or concern about this issue, feel free to let 
me know.

Thanks.

"NA"  wrote in message 
news:uFPH0iBGJHA.2072@TK2MSFTNGP04.phx.gbl...
> Feng Chen[MSFT] wrote:
>
>> Hello NA,
>>
>> I investigated the sample. Based on my understanding, that you're talking 
>> about the
>> project "Microsoft.Samples.Security.SSPI" in it. It is a Managed C++ 
>> project written in
>> Visual Studio 2003, and you open and try to compile it in VS2005. If I 
>> have
>> misunderstood you, please let me know.
>>
>> I'm not sure about the meaning of the sentence "OS Loader error", could 
>> you please post
>> here the detailed error message?
>
> Correct it is written in VS2003. I have made a 2005 version of it. When I 
> go to
> debug the .dll (Microsoft.Samples.Security.SSPI.dll) which has the source 
> in
> SSPI.h VS2005 gives me that error. Actually the GUI is what is used to 
> lauch
> the debugging of the .dll
> (Microsoft.Samples.Security.SSPI.Sample.ControlPanel.Client.exe)
> it causes a strange exception.
>
> I am currenly reading the SSPI WorkBench by Keith Brown so I will probably 
> get
> this figured out. Still it would nice if you would have the sample updated 
> to work
> with VS2005.
>
>

date: Wed, 17 Sep 2008 15:18:41 +0800 author: Feng Chen[MSFT]

Re: NTLM/Kerberous Authentication base64 Client/Server

Hello NA,

I haven't heard back from you so I wanted to follow up to find out if the 
information that I supplied has resolved your issue. If there is anything 
more I can help with, please don't hesitate to let me know.

Thanks.

Best regards,
Feng Chen
Microsoft Online Community Support
=========================================
Delighting our customers is our #1 priority. We welcome your comments and
suggestions about how we can improve the support we provide to you. Please
feel free to let my manager know what you think of the level of service
provided. You can send feedback directly to my manager at:
msdnmg@microsoft.com.

This posting is provided "AS IS" with no warranties, and confers no rights.

"NA"  wrote in message 
news:uFPH0iBGJHA.2072@TK2MSFTNGP04.phx.gbl...
> Feng Chen[MSFT] wrote:
>
>> Hello NA,
>>
>> I investigated the sample. Based on my understanding, that you're talking 
>> about the
>> project "Microsoft.Samples.Security.SSPI" in it. It is a Managed C++ 
>> project written in
>> Visual Studio 2003, and you open and try to compile it in VS2005. If I 
>> have
>> misunderstood you, please let me know.
>>
>> I'm not sure about the meaning of the sentence "OS Loader error", could 
>> you please post
>> here the detailed error message?
>
> Correct it is written in VS2003. I have made a 2005 version of it. When I 
> go to
> debug the .dll (Microsoft.Samples.Security.SSPI.dll) which has the source 
> in
> SSPI.h VS2005 gives me that error. Actually the GUI is what is used to 
> lauch
> the debugging of the .dll
> (Microsoft.Samples.Security.SSPI.Sample.ControlPanel.Client.exe)
> it causes a strange exception.
>
> I am currenly reading the SSPI WorkBench by Keith Brown so I will probably 
> get
> this figured out. Still it would nice if you would have the sample updated 
> to work
> with VS2005.
>
>

date: Fri, 19 Sep 2008 15:55:47 +0800 author: Feng Chen[MSFT]