Menu

#18 ntlm_decode_msg failed: type: 1 ... error: 3

open
nobody
None
5
2003-12-11
2003-12-11
Jan Ploski
No

See also: http://bugzilla.mozilla.org/show_bug.cgi?id=228062

The following message is logged by mod_ntlm when trying to
authenticate using Mozilla 1.6b3:

ntlm_decode_msg failed: type: 1, host: "", user: "", domain: "", error: 3

MSIE authentication works in the same setup.

The problem is caused by mod_ntlm ignoring the flags
"Negotiate Domain Supplied" (0x00001000) and
"Negotiate Workstation Supplied" (0x00002000) and
proceeding to extract the (not provided) domain and host name
using an invalid offset. See http://davenport.sourceforge.net/ntlm.html
for a description of these flags.

As a quick workaround, one can add if (l == 0) return 0; to
ntlm_extract_string. However, a proper fix should inspect the flags
and not invoke ntlm_msg1_gethostname nor
ntlm_msg1_getdomainname when the flags indicate that neither
string was supplied by the client.

Discussion

  • Andrew Bartlett

    Andrew Bartlett - 2004-08-28

    Logged In: YES
    user_id=517

    This is fixed in mod_ntlm_winbind, because it uses Samba's
    NTLMSSP parser.

    http://download.samba.org/ftp/unpacked/mod_ntlm_winbind/

     

Log in to post a comment.

MongoDB Logo MongoDB