How is the security blob created in "Negotiate" and SessionSetupAndX SMB requests?

  • Thread starter Thread starter Borislav Marinov
  • Start date Start date
B

Borislav Marinov

How is the security blob created in "Negotiate" and
SessionSetupAndX SMB requests when Kerberos authentication is used?
1. Which function is used to produce it?
2. or What is the meaning of each of the fields there? What is the
format?
3. What is the relation between this blob and what comes as a security
blob on the subsequent SessionSetupAndX request? I have seen ethereal
trace which shows several authentication mechanisms. So I gather that
this is probably a list of the supported security protocols (through
some well known IDs) because I can see one of them used one of them
used in the next SessionSetupAndX request.
 
Back
Top