|
Posted by Richard Ward on September 7, 2005, 1:13 am
If you were Registered and logged in, you could reply and use other advanced thread options
The SMB server just calls AcceptSecurityContext, the redirector
just calls InitializeSecurityContext.
> Hi all, I'm trying to understand how the SPNEGO and SSPI security blobs
> used in the SMB protocol. The following are packet dumps illustrating
> what I"m seeing:
>
> http://www.overbored.net/temp/smb/0.png
>
> This is an SMB protocol negotiation response (sent by the server) using
> extended security. I don't understand what the security blob is supposed
> to be. I understand that it's using SPNEGO to negotiation a security
> protocol to be used subsequently (by SSPI), but is there any API in
> Windows that will let me obtain such a list? Furthermore, how would I
> encode this?
>
> http://www.overbored.net/temp/smb/1.png
> http://www.overbored.net/temp/smb/2.png
> http://www.overbored.net/temp/smb/3.png
>
> This is the corresponding SMB session setup requests/responses. Are
> these entire security blobs just the direct outputs of the SSPI calls to
> InitializeSecurityContext()/AcceptSecurityContext()? Or is there
> additional (meta-)data/encoding here that I need to be aware of?
>
> Are there any good resources out there that explain these in detail?
>
> Thanks in advance for any help!
| 
Yahoo! 
Google 
Windows Live 
del.icio.us 
digg 
Netscape 
XML site map