import jcifs.smb1.util.Base64;

/**
 * This class is used internally by <tt>NtlmHttpFilter</tt>,
 * <tt>NtlmServlet</tt>, and <tt>NetworkExplorer</tt> to negiotiate password
 * hashes via NTLM SSP with MSIE. It might also be used directly by servlet
 * containers to incorporate similar functionality.
 * <p>
 * How NTLMSSP is used in conjunction with HTTP and MSIE clients is

 * </blockquote>
 * <p>
 * The hostname of this machine is <code>JMORRIS2</code>. It is
 * a member of the group(a.k.a workgroup and domain) <code>BILLING-NY</code>. To
 * obtain an {@link java.net.InetAddress} for a host one might do:
 *
 * <pre>
 * 
 * InetAddress addr = NbtAddress.getByName("jmorris2").getInetAddress();
 * </pre>
 * <p>
 * From a UNIX platform with Samba installed you can perform similar

        verifyArcfourHMAC(17, expect, data, key);
    }



    @Test
    public void testAES128Checksum () throws GeneralSecurityException {
        String data = "eight nine ten eleven twelve thirteen";
        String key = "9062430C8CDA3388922E6D6A509F5B7A";
        String expect = "01A4B088D45628F6946614E3";
        verifyAESHMAC(3, expect, key, data.getBytes(StandardCharsets.US_ASCII));

                    return Arrays.equals( ansiHash, ntlm.ansiHash ) &&
                                Arrays.equals( unicodeHash, ntlm.unicodeHash );
                    /* This still isn't quite right. If one npa object does not have external
                     * hashes and the other does then they will not be considered equal even
                     * though they may be.
                     */

        }

        if ( dr != null && domain.equals(dr.getServer()) && root.equals(dr.getShare()) ) {
            // If we do cache these we never get to the properly cached
            // standalone referral we might have.
            log.warn("Dropping self-referential referral " + dr);
            dr = null;
        }
        return dr;
    }


    /**
     * @param tf
     * @param domain

        background-color: #d0d0d0;
        border-top-color: #ffffff;
        border-bottom-color: #707070;
        border-right-color: #707070;
        border-left-color: #ffffff;
        border-style: solid solid;
        border-top-width: 1px;
        border-bottom-width: 2px;
        border-right-width: 2px;
        border-left-width: 1px;
    }
    a:visited {
        color: #333897;
    }
    a.sort:hover {

import jcifs.smb.NtlmPasswordAuthentication;


/**
 * This class is used internally by <tt>NtlmHttpFilter</tt>,
 * <tt>NtlmServlet</tt>, and <tt>NetworkExplorer</tt> to negotiate password
 * hashes via NTLM SSP with MSIE. It might also be used directly by servlet
 * containers to incorporate similar functionality.
 * <p>
 * How NTLMSSP is used in conjunction with HTTP and MSIE clients is

            try {
                setupWatch(w);
                found = checkInResult(action, name, infos);
            }
            catch ( TimeoutException e ) {
                // might not recieve another notification
            }
        }
        if ( !found ) {
            log.info("Notifications " + infos);
        }
        assertTrue("No notification found", found);
    }

            }
            catch ( SmbException e ) {
                if ( e.getNtStatus() == NtStatus.NT_STATUS_ACCESS_DENIED || e.getNtStatus() == WinError.ERROR_ACCESS_DENIED ) {
                    // we might not have permissions for that
                    Assume.assumeTrue("No permission for share security accesss", false);
                }
                throw e;
            }
        }
    }

            // use a KDC of our choice.
            // A potential workaround would be to try to get the server FQDN by reverse lookup, but this might have
            // security implications and also is not how Microsoft does it.
            throw new SmbUnsupportedOperationException("Cannot use netbios/short names with kerberos authentication, have " + host);
        }