masterzen/winrm

Supporting AllowUnencrypted=true

Opened this issue · 6 comments

davejohnston commented

Currently we need to disable message level encryption using AllowUnencrypted=false. Are there any plans to implement that - or thoughts on how difficult it might be?

ionut-maxim commented

Would also be curious if this is planned.

idanmantin commented

Any updates?

cruzanstx commented

What would it require to implement this?

masterzen commented

I assume the implementation requires to encrypt the individual payload with kerberos which is probably not an easy task and far away from the level of support I offer on this library/tool.
The library supports TLS transport with NTLM encryption which achieves exactly the same benefit, so I would advocate using this instead (see the README for more information).

  • 👍1
CalypsoSys commented

It's probably because the server requires NTLM authentication - I have a PR in to implement this in this repo but this seems to be not very active

you could use https://github.com/CalypsoSys/bobwinrm

see https://github.com/CalypsoSys/bobwinrmntlm for usage

masterzen commented

It's probably because the server requires NTLM authentication - I have a PR in to implement this in this repo but this seems to be not very active

Yes, I've lost track of incoming PRs this last years.
I'll go have a look to your PR and see if we can merge it.