Node.js NTLM HTTP Authentication, how to handle the 3 types

Question

I\'m trying to get NTLM Authentication working w/ Node.js. I\'ve been reading this ( http://davenport.sourceforge.net/ntlm.html#theNtlmMessageHeaderLayout ). I send the head

Answer 1

Have a look at http://www.innovation.ch/personal/ronald/ntlm.html What you receive is a Type-2 Message. The pages explains it in a very practical way. You have to extract the server challenge (nonce) and the server flags.

I just implemented a module for node.js to do just that: https://github.com/SamDecrock/node-http-ntlm

Answer 2

Sam posted the best resource I've seen for understanding what's going on.

jclulow on GitHub seems to have implemented it in a Samba library he built.

Take a look here: https://github.com/jclulow/node-smbhash under lib\ntlm.js you can see how he's handled the responses.

Answer 3

Have you looked at NTLMAPS?

You may be able to solve your problem by using it as a proxy server, but if you really want to implement NTLM auth in Javascript, then NTLMAPS provides lots of working code to study.

Answer 4

I've built client a couple of months ago using javascript, ntlm.js. Maybe that can help you get along. It was based on the documentation @ innovation.ch and Microsofts own official documentation (see the references on the github page).