Hello,
I spent a little more time investigating the issue. I took a look in to the source code of libsoup and I think it calls winbind's ntlm_auth binary without password with the --use-cached-creds option only. And if that does not work, it makes some own computations. I am no programmer, so I might be wrong. Nevertheless, I tried to join the domain and login with pam_winbind to be able to use the cached credentials. I tried to call ntlm_auth manually and it worked and so did login in Evolution. I think that libsoup itself might not actually support NTLMv2, maybe just NTLM2, or the implementation is broken. Anyway, I post it for information. If there would be anyone willing to take a look on this, I would appreciate. Using Thunderbird with EWS plugin for calendars is rather difficult.
Regards
j2ev
______________________________________________________________
> Od: <j2ev centrum cz>
> Komu: <evolution-list gnome org>
> Datum: 21.10.2017 16:47
> Předmět: Re: [Evolution] EWS NTLM auth not working
>
Hello,
in case some other desperate soul crosses over this topic, I still wasn't able to resolve this issue. It just looks Evolution / libsoup / ntlm_auth is not for some reason sending NTLMv2, but just NTLMv1. I asked in libsoup mailing list as well, but it is rather dead or had no luck.
j2ev
______________________________________________________________
> Od: <j2ev centrum cz>
> Komu: <evolution-list gnome org>
> Datum: 03.07.2017 19:22
> Předmět: Re: [Evolution] EWS NTLM auth not working
>
Hi Milan,
thanks for your input. Yes, I do have ntlm_auth binary. But I've already tried to rename it, even purge winbind from the system, which provides it. The behavior was still the same. Well, I will try libsoup list then.
Thanks
> Hi, > does your system contain > /usr/bin/ntlm_auth > binary, please? libsoup uses it when it's available, otherwise it does > some NTLM computation on its own. I would try to either move it away > (rename it is enough) or install it, depending on the current system > state, whether it'll change anything. > > Otherwise this is a question on libsoup, eventually the Samba folks > (whom provide that ntlm_auth binary). > Bye, > Milan