curl-library
Re: NTLM user name and password case sensitive or not?
From: Michael Wood <esiotrot_at_gmail.com>
Date: Tue, 14 Oct 2008 17:36:44 +0200
Date: Tue, 14 Oct 2008 17:36:44 +0200
On Tue, Oct 14, 2008 at 5:21 PM, Joe Nardone <jnardone_at_gmail.com> wrote:
>> I seem to recall someone reporting the original case sensitive comparison
>> as a bug some time ago. I would imagine that at least the user name in
>> Windows would be case insensitive.
>>
>
> Windows usernames are not case-sensitive, but passwords are.
Passwords are converted to uppercase before hashing if the LM hash is
used, (but you should not still be using LM hashes). I believe NTLM
hashed passwords are case sensitive.
-- Michael Wood <esiotrot_at_gmail.com>Received on 2008-10-14