Go to file

Russ Cox 7b9c9198d5 utils: make repo safe for "go build ./..."

This directory contains two separate helper programs
that can be run with "go run". It's not possible to cd into
the directory and run "go build", because there are two
different Go source files defining main.main.

The canonical way to indicate this is to put a "// +build ignore"
build tag at the top of such helper programs.
Then they can still be run by

	go run decode_auth.go
	go run test_auth.go

but will not be considered by "cd utils; go build" nor by
commands like "go build ./..." or "go test ./..." in the
root of the repo.

2018-05-24 22:55:54 -04:00

ntlm

correct spelling mistake

2017-09-01 16:10:43 +01:00

utils

utils: make repo safe for "go build ./..."

2018-05-24 22:55:54 -04:00

.gitignore

adding License information and go format

2013-05-21 14:40:12 -04:00

License

Changed license to BSD license

2013-07-26 12:44:48 -04:00

README.md

Fix typo in README.md

2014-08-22 10:37:12 -07:00

README.md

NTLM Implementation for Go

This is a native implementation of NTLM for Go that was implemented using the Microsoft MS-NLMP documentation available at http://msdn.microsoft.com/en-us/library/cc236621.aspx. The library is currently in use and has been tested with connectionless NTLMv1 and v2 with and without extended session security.

Usage Notes

Currently the implementation only supports connectionless (datagram) oriented NTLM. We did not need connection oriented NTLM for our usage and so it is not implemented. However it should be extremely straightforward to implement connection oriented NTLM as all the operations required are present in the library. The major missing piece is the negotiation of capabilities between the client and the server, for our use we hardcoded a supported set of negotiation flags.

Sample Usage as NTLM Client

import "github.com/ThomsonReutersEikon/go-ntlm/ntlm"

session, err = ntlm.CreateClientSession(ntlm.Version2, ntlm.ConnectionlessMode)
session.SetUserInfo("someuser","somepassword","somedomain")

negotiate := session.GenerateNegotiateMessage()

<send negotiate to server>

challenge, err := ntlm.ParseChallengeMessage(challengeBytes)
session.ProcessChallengeMessage(challenge)

authenticate := session.GenerateAuthenticateMessage()

<send authenticate message to server>

Sample Usage as NTLM Server

session, err := ntlm.CreateServerSession(ntlm.Version1, ntlm.ConnectionlessMode)
session.SetUserInfo("someuser","somepassword","somedomain")

challenge := session.GenerateChallengeMessage()

<send challenge to client>

<receive authentication bytes>

auth, err := ntlm.ParseAuthenticateMessage(authenticateBytes)
session.ProcessAuthenticateMessage(auth)

Generating a message MAC

Once a session is created you can generate the Mac for a message using:

message := "this is some message to sign"
sequenceNumber := 100
signature, err := session.Mac([]byte(message), sequenceNumber)