SSPI
lazarus / 38-Networking and Web Programming

----------------------------------------------------------------------
Mastropiero · 2014-07-22 21:21

Hi,

I need to connect to an application via TCP. The problem is that the
application requires SSPI.

Is it possible by using Synapse or any other networking package?

I can't find any information or examples of it.

Thank you in advance.

----------------------------------------------------------------------
Mastropiero · 2014-07-24 20:01

Is there anybody... out there?

----------------------------------------------------------------------
skalogryz · 2014-07-24 20:30

the silence suggests that you should probably try using windows API
for this.

----------------------------------------------------------------------
Leledumbo · 2014-07-24 22:12

My first google result points to MSDN and a wikipedia entry with
"Microsoft Windows" in it. That's enough showstopper for me.

----------------------------------------------------------------------
Mastropiero · 2014-07-25 12:17

I see. :-/

So if I use the Windows API for the SSPI stuff, can I still use
Synapse for the pure TCP/IP handling, or I'm forced to do everything
through the API?


Thank you for your responses.

----------------------------------------------------------------------
marcov · 2014-07-25 12:29

Seems that SSPI is the plugin architecture for various
authentications, not the wireprotocol.

Are you sure it needs SSPI, and not e.g. NTLM ? IIRC Indy supports
NTLM. (though there are several diffeernt levels)

----------------------------------------------------------------------
skalogryz · 2014-07-25 12:32

Quote from: Mastropiero on July 25, 2014, 02:17:07 pmSo if I use the
Windows API for the SSPI stuff, can I still use Synapse for the pure
TCP/IP handling, or I'm forced to do everything through the API?
I've later on my mind.
But since I lack knowledge of what SSPI is, and how you're going to
use it, it might be that I'm wrong.

Looking at the NTLM authentication chart here. It appears to me, that
SSPI is used in parallel with HTTP protocol (rather than a wrapper
over it). That actually suggests that using of Synapse HTTP/HTTPS
implementation with SSPI APIs is possible (to some extent).

----------------------------------------------------------------------
skalogryz · 2014-07-25 12:34

I presume the next step is to create a header for API, if not
available.

----------------------------------------------------------------------
marcov · 2014-07-25 12:40

(If I read that picture, I see SSPI as a kind of socket api for
authentication. It is an API that maintains connections, not a
protocol. Note that the arrows mention NTLM as the protocol. Only
protocols can be emulated using socket suites)

Jedi API lib has a crypto/security subproject. Jswcl or something.
That would be a good start I guess.

----------------------------------------------------------------------
Mastropiero · 2014-07-25 13:09

Quote from: marcov on July 25, 2014, 02:29:26 pmSeems that SSPI is the
plugin architecture for various authentications, not the wireprotocol.

Are you sure it needs SSPI, and not e.g. NTLM ? IIRC Indy supports
NTLM. (though there are several diffeernt levels)

Yes I'm sure. The application uses a custom protocol (based on XML-
formatted commands and responses) and, according the developer, it
uses SSPI security.

----------------------------------------------------------------------
Mastropiero · 2014-07-25 13:11

Quote from: marcov on July 25, 2014, 02:40:44 pm(If I read that
picture, I see SSPI as a kind of socket api for authentication. It is
an API that maintains connections, not a protocol. Note that the
arrows mention NTLM as the protocol. Only protocols can be emulated
using socket suites)

Jedi API lib has a crypto/security subproject. Jswcl or something.
That would be a good start I guess.

Thank you. I'll take a look into it.