3.1.5.3.1.1 NTLM Software Returns Success

  • Article

The client MUST send an IS command to the server, and MUST set AUTH_STATE to authenticate_data_sent. The client MUST set the fields of the IS command message as follows:

  1. AuthenticationType set to 0x0F (NTLM).

  2. Modifier set to 0x00.

  3. NTLM_CommandCode set to NTLM_AUTHENTICATE.

  4. NTLM_DataSize set to the size of NTLM Data in number of bytes.

  5. NTLM_BufferType set to 0x00000002.

  6. NTLM_Data set to NTLM AUTHENTICATE_MESSAGE passed from the local NTLM software. How to get the NTLM AUTHENTICATE_MESSAGE is specified in [MS-NLMP].

If the AUTH_STATE is not equal to negotiate_data_sent, the client SHOULD treat this as an error condition, and then take an appropriate action most suitable for the implementation.<4>