Function authenticate_ntlmssp 

pub fn authenticate_ntlmssp(
    users: &HashMap<String, String>,
    allow_guest: bool,
    challenge: &[u8; 8],
    t3: &Type3,
) -> AuthOutcome

Verify NTLMv2 (preferred), NTLMv1-with-ESS or LM responses.

server.users empty + allow_guest accepts any principal; otherwise only configured accounts (or explicit anonymous) succeed.