ec1f89217a
Full Mattermost server source with integrated Community Enterprise features. Includes vendor directory for offline/air-gapped builds. Structure: - enterprise-impl/: Enterprise feature implementations - enterprise-community/: Init files that register implementations - enterprise/: Bridge imports (community_imports.go) - vendor/: All dependencies for offline builds Build (online): go build ./cmd/mattermost Build (offline/air-gapped): go build -mod=vendor ./cmd/mattermost 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
52 lines
1.5 KiB
Go
52 lines
1.5 KiB
Go
// Package ntlmssp provides NTLM/Negotiate authentication over HTTP
|
|
//
|
|
// Protocol details from https://msdn.microsoft.com/en-us/library/cc236621.aspx,
|
|
// implementation hints from http://davenport.sourceforge.net/ntlm.html .
|
|
// This package only implements authentication, no key exchange or encryption. It
|
|
// only supports Unicode (UTF16LE) encoding of protocol strings, no OEM encoding.
|
|
// This package implements NTLMv2.
|
|
package ntlmssp
|
|
|
|
import (
|
|
"crypto/hmac"
|
|
"crypto/md5"
|
|
"golang.org/x/crypto/md4"
|
|
"strings"
|
|
)
|
|
|
|
func getNtlmV2Hash(password, username, target string) []byte {
|
|
return hmacMd5(getNtlmHash(password), toUnicode(strings.ToUpper(username)+target))
|
|
}
|
|
|
|
func getNtlmHash(password string) []byte {
|
|
hash := md4.New()
|
|
hash.Write(toUnicode(password))
|
|
return hash.Sum(nil)
|
|
}
|
|
|
|
func computeNtlmV2Response(ntlmV2Hash, serverChallenge, clientChallenge,
|
|
timestamp, targetInfo []byte) []byte {
|
|
|
|
temp := []byte{1, 1, 0, 0, 0, 0, 0, 0}
|
|
temp = append(temp, timestamp...)
|
|
temp = append(temp, clientChallenge...)
|
|
temp = append(temp, 0, 0, 0, 0)
|
|
temp = append(temp, targetInfo...)
|
|
temp = append(temp, 0, 0, 0, 0)
|
|
|
|
NTProofStr := hmacMd5(ntlmV2Hash, serverChallenge, temp)
|
|
return append(NTProofStr, temp...)
|
|
}
|
|
|
|
func computeLmV2Response(ntlmV2Hash, serverChallenge, clientChallenge []byte) []byte {
|
|
return append(hmacMd5(ntlmV2Hash, serverChallenge, clientChallenge), clientChallenge...)
|
|
}
|
|
|
|
func hmacMd5(key []byte, data ...[]byte) []byte {
|
|
mac := hmac.New(md5.New, key)
|
|
for _, d := range data {
|
|
mac.Write(d)
|
|
}
|
|
return mac.Sum(nil)
|
|
}
|