{"categories":[{"label":"Security","url":"https://skillfed.io/packages/category/security"}],"enrichment":{"capability":"Constructs and parses NTLM authentication messages (LM, NTLMv1, NTLMv2) for HTTP authentication, handling message signing and sealing with support for channel binding tokens.","skillfed_tags":["authentication","windows-legacy","abandoned"],"use_cases":["Authenticate HTTP requests to legacy Windows/Active Directory services that require NTLM when requests-ntlm is unavailable","Implement custom NTLM authentication in a non-HTTP protocol or specialized client where a standard wrapper does not fit","Sign and seal message content for integrity and confidentiality in NTLM-protected communication channels","Integrate NTLM support into a proxy, gateway, or middleware that cannot use requests-ntlm directly"],"what_it_does":"ntlm-auth is a low-level library that handles the cryptographic and message-parsing details of NTLM (NT LAN Manager) authentication, a Windows-based authentication protocol used by some enterprise HTTP services. It constructs the three-message NTLM handshake, encodes them as base64 for HTTP headers, and can optionally sign and seal message content for integrity and confidentiality. It supports multiple NTLM variants (LM, NTLMv1, NTLMv2) and extended session security, plus channel binding tokens for additional security.\n\nThe library is designed as a building block rather than a user-facing tool. The documentation explicitly recommends that most users install requests-ntlm instead, which provides a simpler interface for HTTP authentication. Direct use of ntlm-auth requires manual message exchange with a server and careful handling of the authentication state machine. The package depends only on ordereddict, keeping installation friction minimal.","worth_installing":"No\u2014not for new projects. The package is abandoned (last release June 2020, last commit July 2020) and most users should use requests-ntlm instead, which provides the same NTLM support with a simpler API. Install only if you have an existing codebase already using ntlm-auth and cannot migrate, or if you need direct low-level NTLM message construction for a non-HTTP use case and accept the maintenance risk."},"id":"ntlm-auth","links":{"html":"https://skillfed.io/packages/ntlm-auth","md":"https://skillfed.io/packages/ntlm-auth.md","pypi":"https://pypi.org/project/ntlm-auth/"},"maintenance":{"status":"abandoned"},"meta":{"latest_release":"2020-06-16","license_spdx":null,"license_treatment":"permissive","name":"ntlm-auth","python_support":"supports_current","summary":"Creates NTLM authentication structures"},"popularity":{"monthly_downloads":1135075,"position":4312,"tier":"top_5000"},"security":{"n_vulnerabilities":0},"version":"1.5.0"}
