Libntlm

Introduction

Libntlm implement the Microsoft NTLM authentication protocol.

Libntlm is licensed under the GNU Lesser General Public License version 2.1 or (at your option) any later version.

References for the NTLM protocol are:

• The NTLM Authentication Protocol, by Eric Glass.
• NTLM Authentication Scheme for HTTP, by Ronald Tschalär.

The old libntlm (note lower case) was a library that implement Microsoft's NTLM authentication. However, the packaging of libntlm lacked certain things, such as having build problems, lacking shared library support, lacking autoconf macro for use in other applications, lacking pkg-config support, and more. So this page distributes an improved version of the library; called Libntlm (note upper case L to differentiate it from the original libntlm). Compared to the original releases, the current version has been entirely re-written and only shares the same function interfaces.

Projects using Libntlm include GNU SASL.

What's new

• 2020-04-19: Version 1.6 released. Security bugfix for buffer overflow. CVE-2019-17455.
• 2018-08-24: Version 1.5 released. LTO/gcc8 support. Git repository moved to GitLab.
• 2013-07-08: Version 1.4 released. Build fixes.
• 2011-06-20: Version 1.3 released. Proving the project is still alive.
• 2009-11-06: Version 1.2 released. Fixes MinGW cross-compile bug.
• 2009-05-08: Version 1.1 released. No significant changes.
• 2008-04-12: Version 1.0 released. Declared stable.
• 2008-03-05: Version 0.4.2 released. Portability fixes for big-endian platforms.
• 2008-03-05: Development (source code and web pages) moved to savannah.
• 2007-10-29: Version 0.4.1 released. Maintainance release.
• 2007-09-23: Version 0.4.0 released. Gnulib files updated, only public API is exported in shared library. Approaching a stable v1.0.
• 2007-09-23: Developed in Git instead of CVS.
• 2007-03-27: Version 0.3.13 released. Minor portability fixes, by updating from gnulib.
• 2006-06-24: Version 0.3.12 released. Minor portability fixes, by updating from gnulib.
• 2006-05-16: Version 0.3.11 released. Now works on 64-bit platforms.
• 2006-03-24: Version 0.3.10 released. Exports the ntlm_smb_encrypt and ntlm_smb_nt_encrypt APIs.
• 2005-10-23: Version 0.3.9 released. The DES and MD4 functions are now shared with gnulib, to simplify maintenance.
• 2005-09-27: Version 0.3.8 released. APIs to build requests/responses for usernames with @ in them (earlier an @ was used to separate the username from the realm). Build fixes.
• 2005-07-15: Version 0.3.7 released. A spec file was added. Compiler warnings fixed, thanks to Frediano Ziglio. Gnulib is used, currently only for a more robust ntlm_check_version.
• 2004-09-30: Version 0.3.6 released. Various cleanups, thanks to Frediano Ziglio.
• 2004-09-23: Version 0.3.5 released. Ported to many platforms.
• 2004-09-23: Version 0.3.4 released. License changed to LGPL, thanks to rewrites by Frediano Ziglio.
• 2004-09-18: Version 0.3.3 released. Use of 'const' in function prototypes. Source code indented according to GNU Coding Standard.
• 2003-03-17: Version 0.3.2 released. Only build changes.
• 2002-10-17: Version 0.3.1 released. No code changes, but uses automake 1.7, gnits and pkg-config.
• 2002-10-04: Anonymous CVS is available via pserver.
• 2002-10-01: Version 0.3.0 released. No code changes compared to the last official 0.21 release.

Download

The releases are distributed from release directory.

Recent releases are signed with an OpenPGP key with fingerprint B1D2BD1375BECB784CF4F8C4D73CF638C53C06BE.

Older releases are signed with an OpenPGP key with fingerprint B565716F or an OpenPGP key with fingerprint 54265E8C.

Support

The Libntlm project page at GitLab provides an issue tracker and more.

A mailing list where Libntlm users may help each other exists, and you can reach it by sending e-mail to libntlm@nongnu.org. Archives of the mailing list discussions, and an interface to manage subscriptions, is available through the World Wide Web at https://lists.nongnu.org/mailman/listinfo/libntlm.

Development

There is a Savannah Libntlm project page and a GitLab Libntlm project page.

You may check out the sources as follows:

$ git clone https://gitlab.com/jas/libntlm.git