Comments for Playing on the frontier

Comment on Pondering per user accounting in Linux by tomek

tomek — Thu, 19 Jan 2012 01:26:20 +0000

Hi, I am interested to, please let me know if you have some tips. Currently I am trying to do it using nethogs, but not sure it is proper way.

Comment on Compiling WebKit/Cairo on Windows with Visual C++ Express by Codekata | flaminghorns.com » Building Webkit on Windows 7 with Visual Studio 2008 Express.

Wed, 18 Jan 2012 10:26:01 +0000

[...] http://siphon9.net/loune/2009/07/compiling-webkitcairo-on-windows-with-visual-c-express/ [...]

Comment on NTLM authentication in PHP – Now with NTLMv2 hash checking by David C

David C — Mon, 09 Jan 2012 03:29:01 +0000

@Loune Thanks a lot for checking this out. I’ve enabled NTLMv2 on my WinXP machine and everything is working now.

Thanks for the great script!

Comment on NTLM authentication in PHP – Now with NTLMv2 hash checking by Loune

Loune — Fri, 06 Jan 2012 12:26:47 +0000

@David I loaded up an XP machine (was using win7) and was able to replicate your issue. Seems like XP machines send NTLM (v1) by default where as the script expects NTLMv2. You need to force NTLMv2 as per this guide: http://www.imss.caltech.edu/node/396

Not sure if there’s a way to force NTLMv2 from the server side, but I will amend the script to point that out if it gets a NTLM (v1) response from the client.

Comment on NTLM authentication in PHP – Now with NTLMv2 hash checking by David C

David C — Fri, 06 Jan 2012 06:37:28 +0000

Thanks Loune for the quick reply.
I’ve tried my Windows XP workstation: PHP 5.2.8 + IIS 5.1
And a Linux Ubuntu server: PHP 5.3.1 + Apache 2.2.14
With Firefox 8 and IE 8.
Script ntlm.php 1.2 downloaded today.

I am using the PHP framework CodeIgniter, but have tried testing outside the framework with the same problem. Popup comes up (because current Windows credentials didn’t work) and when I type in eg loune/test, the popup keeps coming up.
I will try again another time, there’s probably something obvious that I’ll see after getting some sleep..

FYI In Windows I got the following error, which I fixed by uncommenting the preceding line:
Message: iconv() [function.iconv]: Detected an incomplete multibyte character in input string
Filename: third_party/ntlm.php
Line Number: 94

Comment on NTLM authentication in PHP – Now with NTLMv2 hash checking by Loune

Loune — Fri, 06 Jan 2012 02:28:03 +0000

@David It’s been a while since I looked at this, but as far as I remember the domain doesn’t matter because the server blob hash is generated with the domain provided by the client.

What environment and what versions of software (php, firefox, ie, apache?) are you using in your test? I’ve just tried it with the ntlm.php script with apache 2 on firefox 9 / IE 9 and it works fine (prompt shows up and you enter the username/password in the userdb array).

Comment on NTLM authentication in PHP – Now with NTLMv2 hash checking by David C

David C — Fri, 06 Jan 2012 01:53:11 +0000

I must be missing something, because I simply cannot get this script to authenticate me using FireFox or IE :(
My $get_ntlm_user_hash_callback is returning the password hash, but the ntlm_verify_hash function produces a different $blobhash to the $clientblobhash.
I noticed that the $domain value is used in $blobhash, even though in an earlier comment you’ve said it shouldn’t have any effect. But every value I try hasn’t helped..
Have spent all morning trying to figure it out, any traps I should be aware of? Thanks.

Comment on List of Sandy Bridge LGA1155 H67/P67 motherboards that support VT-d by Stephen Besch

Stephen Besch — Wed, 14 Dec 2011 15:15:44 +0000

@Mark Sung:

“By the way, which kernel version are you guys using? We are using Cent 6.0 with 2.6.32-71.el6 kernel.”

That kernel version is too old. I had a look at the VBOX driver source, and there is a conditional preventing compilation of the IOMMU code if the kernel version too old (IIRC, it must be at least 2.6.35). You can’t just override the conditional either, since the names of some of the symbols were changed in the kernel sources. When I updated the Kernel to a newer version, the IOMMU was then found and I could assign the PCI card to a virtual machine. However, in my case (with the Intel DQ67SW) the virtual machine wont start because the PCI slot shares an interrupt line (see my last comment).

Comment on List of Sandy Bridge LGA1155 H67/P67 motherboards that support VT-d by Mark Sung

Mark Sung — Tue, 13 Dec 2011 11:03:47 +0000

We bought ASRock H67M but failed to make it work. The BIOS is updated with VT-d and local X2APIC enabled, but we kept having “No IOMMU found.” in KVM. The dmesg log shows “Intel IOMMU: enabled” but I see no follow-up IOMMU message. I will try to get ASRock Z68M tomorrow and see if that works.

By the way, which kernel version are you guys using? We are using Cent 6.0 with 2.6.32-71.el6 kernel.

Enabling SR-IOV/VT-d is pretty frustrated but this post sheds some light here…Thanks!!!!

Comment on Simple lightweight NTLM in PHP by Hossain

Hossain — Mon, 12 Dec 2011 12:37:02 +0000

Thanks,
Great Help.
Was looking for this for very long time.
Really appreciable.

Thanks again