ntlm verification

[mxz]

Hi there,
I'm looking for a good document that describes how the NTLM type3 message (of different versions) is verified by the servers? In the other word, once the server gets the type 3 message from the client, how does it talk to domain controller to verify the message without knowing the user's password?

Another question, has anyone been able to get different NTLM authentication working? What's your experience?

thanks,
Michelle

[wgonzalez]

ALthough non-Alfrescan, these are good NTML references that explain what goes on in a typical NTLM conversation. Alfresco will behave in this way.

http://davenport.sourceforge.net/ntlm.html
http://technet.microsoft.com/en-us/magazine/2006.08.securitywatch.aspx
http://www.filepie.us/?title=NTLM

In terms of your second question, NTML works well in different settings. I take it you are having issues implementing it? What OS/Authentication settings are you using?