prefix->response_type = 0x01;
        prefix->max_response_type = 0x01;
        prefix->reserved1 = 0x0000;
        prefix->reserved2 = 0x00000000;
#ifdef WORDS_BIGENDIAN
        tds_swap_bytes(&nttime, 8);
#endif
        prefix->timestamp = nttime;
        tds_random_buffer(prefix->challenge, sizeof(prefix->challenge));

        prefix->unknown = 0x00000000;
}

static TDSRET
tds_ntlm_handle_next(TDSSOCKET * tds, struct tds_authentication * auth, size_t len)
{
        const int length = (int)len;
        unsigned char nonce[8];
        TDS_UINT flags;
        int where;

        int data_block_offset;

        int names_blob_len = 0;

        unsigned char *names_blob = NULL;

        TDSRET rc;

        /* at least 32 bytes (till context) */

        if (len < 32)
                return TDS_FAIL;

        tds_get_n(tds, nonce, 8);        /* NTLMSSP\0 */

        if (memcmp(nonce, ntlm_id, 8) != 0)
                return TDS_FAIL;

        if (tds_get_int(tds) != 2)        /* sequence -> 2 */
                return TDS_FAIL;
        tds_get_smallint(tds);        /* domain len */
        tds_get_smallint(tds);        /* domain len */
        data_block_offset = tds_get_int(tds);        /* domain offset */
        flags = tds_get_int(tds);        /* flags */
        tds_get_n(tds, nonce, 8);

        tdsdump_dump_buf(TDS_DBG_INFO1, "TDS_AUTH_TOKEN nonce", nonce, 8);
        where = 32;

        /*data_block_offset == 32 */
        /* Version 1 -- The Context, Target Information, and OS Version structure are all omitted */

        if (data_block_offset >= 48 && where + 16 <= length) {
                int target_info_len, target_info_offset;

                /* Version 2 -- The Context and Target Information fields are present, but the OS Version structure is not. */
                tds_get_n(tds, NULL, 8);        /* Context (two consecutive longs) */

                target_info_len = tds_get_smallint(tds);        /* Target Information len */
                target_info_len = tds_get_smallint(tds);        /* Target Information len */
                target_info_offset = tds_get_int(tds);        /* Target Information offset */

                where += 16;

                if (data_block_offset >= 56 && where + 8 <= length) {
                        /* Version 3 -- The Context, Target Information, and OS Version structure are all present. */
                        tds_get_n(tds, NULL, 8);        /* OS Version Structure */
#if 0
                        /* if we have a version server handle NTLMv2 */
                        if (target_info_len > 0)
                                flags &= ~0x80000;
#endif
                        where += 8;
                }

                /* read Target Info if possible */

                if (target_info_len > 0 && target_info_offset >= where && target_info_offset + target_info_len <= length) {
                        tds_get_n(tds, NULL, target_info_offset - where);
                        where = target_info_offset;

                        /*
                         * the + 4 came from blob structure, after Target Info 4
                         * additional reserved bytes must be present
                         * Search "davenport port"
                         * (currently http://davenport.sourceforge.net/ntlm.html)
                         */
                        names_blob_len = TDS_OFFSET(names_blob_prefix_t, target_info) + target_info_len + 4;

                        /* read Target Info */
                        names_blob = (unsigned char *) calloc(names_blob_len, 1);
                        if (!names_blob)
                                return TDS_FAIL;

                        fill_names_blob_prefix((names_blob_prefix_t *) names_blob);
                        tds_get_n(tds, names_blob + TDS_OFFSET(names_blob_prefix_t, target_info), target_info_len);
                        where += target_info_len;
                }
        }
        /* discard anything left */
        tds_get_n(tds, NULL, length - where);

        tdsdump_log(TDS_DBG_INFO1, "Draining %d bytes\n", (int) (len - where));

        rc = tds7_send_auth(tds, nonce, flags, names_blob, names_blob_len);

        free(names_blob);

        return rc;
}

/**
 * Build a NTLMSPP packet to send to server
 * @param tds     A pointer to the TDSSOCKET structure managing a client/server operation.
 * @return authentication info
 */
TDSAUTHENTICATION * 
tds_ntlm_get_auth(TDSSOCKET * tds)
{
        const char *domain;
        const char *user_name;
        const char *p;
        TDS_UCHAR *packet;
        int host_name_len;
        int domain_len;
        int auth_len;
        struct tds_ntlm_auth *auth;

        if (!tds->login)
                return NULL;