[Evolution] EWS NTLM auth not working

j2ev at centrum.cz j2ev at centrum.cz
Tue Feb 6 21:06:32 UTC 2018


Hello,
 
I spent a little more time investigating the issue. I took a look in to the source code of libsoup and I think it calls winbind's ntlm_auth binary without password with the --use-cached-creds option only. And if that does not work, it makes some own computations. I am no programmer, so I might be wrong. Nevertheless, I tried to join the domain and login with pam_winbind to be able to use the cached credentials. I tried to call ntlm_auth manually and it worked and so did login in Evolution. I think that libsoup itself might not actually support NTLMv2, maybe just NTLM2, or the implementation is broken. Anyway, I post it for information. If there would be anyone willing to take a look on this, I would appreciate. Using Thunderbird with EWS plugin for calendars is rather difficult.
 
Regards
j2ev
 
______________________________________________________________
> Od: <j2ev at centrum.cz>
> Komu: <evolution-list at gnome.org>
> Datum: 21.10.2017 16:47
> Předmět: Re: [Evolution] EWS NTLM auth not working
>
Hello,
 
in case some other desperate soul crosses over this topic, I still wasn't able to resolve this issue. It just looks Evolution / libsoup / ntlm_auth is not for some reason sending NTLMv2, but just NTLMv1. I asked in libsoup mailing list as well, but it is rather dead or had no luck.
 
j2ev
 
 
______________________________________________________________
 > Od: <j2ev at centrum.cz>
 > Komu: <evolution-list at gnome.org>
 > Datum: 03.07.2017 19:22
 > Předmět: Re: [Evolution] EWS NTLM auth not working
 >
Hi Milan,
 
thanks for your input. Yes, I do have ntlm_auth binary. But I've already tried to rename it, even purge winbind from the system, which provides it. The behavior was still the same. Well, I will try libsoup list then.
 
Thanks
 
 
>  Hi,> does your system contain>    /usr/bin/ntlm_auth> binary, please? libsoup uses it when it's available, otherwise it does> some NTLM computation on its own. I would try to either move it away> (rename it is enough) or install it, depending on the current system> state, whether it'll change anything.> > Otherwise this is a question on libsoup, eventually the Samba folks> (whom provide that ntlm_auth binary).>         Bye,>         Milan
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.osuosl.org/pipermail/evolution-users/attachments/20180206/ca5e0daa/attachment.html>


More information about the evolution-users mailing list