You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
This repository was archived by the owner on Mar 26, 2022. It is now read-only.
I've been working on a patch to integrate cntlm with PAM. It uses shared memory for process communication and checks user's uid in /proc/net/tcp (and, eventually, /proc/net/tcp6) for authenticity (only works in Linux).
It's very simple: first user logs in, then my pam module generates all ntlm's hashes (using cntlm's functions) and saves it in the shared memory; second: cntlm is started (with a new flag: -Z) and looks for user's uid in /proc/net/tcp (through client tcp port), then copy it's credentials from shared memory and voila'!!!
Limitations: only works with Linux and cntlm runs in localhost (127.0.0.1).
PS1: I've already implemented this patch in a previous release (0.35), please check iu out in http://pamcntlm.sf.net
PS2: As far as I known, Firefox only works with a 'hack': is necessary set a Windows user-agent in cntlm.conf :(
Example:
Header User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.86 Safari/537.36
I've been working on a patch to integrate cntlm with PAM. It uses shared memory for process communication and checks user's uid in /proc/net/tcp (and, eventually, /proc/net/tcp6) for authenticity (only works in Linux).
It's very simple: first user logs in, then my pam module generates all ntlm's hashes (using cntlm's functions) and saves it in the shared memory; second: cntlm is started (with a new flag: -Z) and looks for user's uid in /proc/net/tcp (through client tcp port), then copy it's credentials from shared memory and voila'!!!
Limitations: only works with Linux and cntlm runs in localhost (127.0.0.1).
PS1: I've already implemented this patch in a previous release (0.35), please check iu out in http://pamcntlm.sf.net
PS2: As far as I known, Firefox only works with a 'hack': is necessary set a Windows user-agent in cntlm.conf :(
Example:
Header User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.86 Safari/537.36
Tested using websense and Windows 2012 domain.
cntlm-0.92.3-pam_cntlm.patch.zip