Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Local account - HTTP 401 #16

Open
0x4c6565 opened this issue Jul 6, 2018 · 3 comments
Open

Local account - HTTP 401 #16

0x4c6565 opened this issue Jul 6, 2018 · 3 comments

Comments

@0x4c6565
Copy link

0x4c6565 commented Jul 6, 2018

When attempting to authenticate using a local user against a domain-joined machine, a HTTP 401 response is returned. Setting the domain appears to have no affect (.\myuser , TEST\myuser etc.)

@0x4c6565
Copy link
Author

I believe this has something to do with the target (domain) in the authenticate message being set from the challenge message:

ntlmV2Hash := getNtlmV2Hash(password, user, cm.TargetName)

if err := binary.Write(&b, binary.LittleEndian, &target); err != nil {

@gosp
Copy link

gosp commented Dec 21, 2019

I also encounter 401 error when using go-ntlmssp.
I use https://github.com/vadimi/go-http-ntlm, it works.
So I guess NTLMv2 implementation of go-ntlmssp is different from https://github.com/ThomsonReutersEikon/go-ntlm (which is used by https://github.com/vadimi/go-http-ntlm)

@Catbuttes
Copy link
Contributor

I am reasonably sure this is because the workstation that is being provided in the authenticate message is not one that the local account has permission to log into. vadimi/go-http-ntlm does not set this value, but this library sets it to "go-ntlmssp". I was seeing this issue with accounts that only had access to log into certain machines - even when running on those machines. By providing a blank workstation name int authenticate_message.go I was able to log in successfully.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants