-
-
Notifications
You must be signed in to change notification settings - Fork 268
Win_sspi plugin uses NTLM #8256
Copy link
Copy link
Labels
fix-version: 4.0.6fix-version: 5.0.2fix-version: 6.0 Alpha 1qa: cannot be testedrlsnotes60: noIntentionally not added to the Firebird 6.0 release notes.Intentionally not added to the Firebird 6.0 release notes.type: improvement
Metadata
Metadata
Assignees
Labels
fix-version: 4.0.6fix-version: 5.0.2fix-version: 6.0 Alpha 1qa: cannot be testedrlsnotes60: noIntentionally not added to the Firebird 6.0 release notes.Intentionally not added to the Firebird 6.0 release notes.type: improvement
AuthSspi.cpp makes a call to AcquireCredentialsHandle in the ctor of class AuthSspi (line 112) with the security package hard-coded as "NTLM".
Consider changing this to "Negotiate" to allow Kerberos to be tried initially, falling back to NTLM if Kerberos is not available.
Also note that MS is looking to disabling NTLM in Windows 11 in the future, for info:
https://techcommunity.microsoft.com/t5/windows-it-pro-blog/the-evolution-of-windows-authentication/ba-p/3926848