Technical notes

ISSUE: How to set authentication support NTLM in lync 2010/2013 server as first choice ? SOLUTION: Step 1. Run secpol.msc on Lync Front End server Step 2. Select Local Policies  -> Security Options Step 3. Open Network Security: Minimum session security for NTLM SSP based (including secure RPC) Step 4. Tick on Require NTLMv2 session security (default Require 128-bit encryption) Step 5.  Open second Network Security: Minimum session security for NTLM SSP based (including secure RPC) Step 6. Tick on Require NTLMv2 session security (default Require 128-bit encryption) You are done!

First for one of my visitors wish...I am going to start from step 13 .I will describe the previous step later. Step 13 : gssapi-data generation .  It is the most crucial part of LYNC developement. It gives me lot of pain. I will describe it easily...for some reason I cann't give you the code. I will go to the process in straight forward way.. First take the challenge data that is gssapidata: from second 401 unauthorize response then decode it in Base64 .As you know there are three type in NTLM .... They are  >> Type1: This message contains the host name and the NT domain name of the client. Type2: This message contains the server's NTLM challenge Type3: This message contains the username, host name, NT domain name, and the two "responses". You already understand what are the we need.This is Type2 from server as challenge and Type3 which you will send.For more detail about type see the link >>> ALL about NTLM TYPE Please don't see...

First of all when I studied MS-SIP I was stuck. I don't get enough help from msdsn which is microsoft own social site for lync client developing.I post three post there and don't get any response.But after huge while with lots of efforts I was able to log in lync server by my own client.Now I will share the particular difficulties with everybody , which I have solved. So that no one stuck in this....I will write here slowly with description. The topics will be.. 1. urn:uuid generation 2. NT key generation 3. LM key generation 4. NT response generation 5. LM response generation 6. NTv2 response generation 7. LMv2 response generation 8. RC4K encryption 9. MD5 encryption 10. HMAC MD5 encryption 11. Base64 encoder/decoder 12. Binary to hexa 13. gssapi-data generation 14. Format of gssapi-data 15. response/signature generation . . . more  Developing of Lync-client is complete .Now when I get the free time I will write the procedure here. The link for Description of these part ...