NTLM (NT LAN Manager) is a suite of Microsoft security protocols that provides authentication, integrity, and confidentiality to users.

learn more… | top users | synonyms

0
votes
2answers
107 views

Apache2 authentication NTLM without prompted semi Basic auth type

I succesfully configured ntlm authentication. Unfortunately config allows semi basic authorization. For example when I'm using tortoise svn1.8.4(with serf access lib), chrome or IE web browsers, they ...
1
vote
0answers
23 views

Proxy hosted in IIS with NTLM, how can I enable single sign on?

I have a forward proxy hosted in IIS with windows authentication enabled. Firefox is set up to use the proxy. Problem is, I don't know what to do with network.automatic-ntlm-auth.trusted-uris. ...
0
votes
2answers
128 views

NTLM through proxy server

We use squid as a HTTP proxy (if needed I can modify it's configuration). We want to access a website that uses ntlm for authentication When we go on the website through squid we see a blank page ...
2
votes
1answer
123 views

Does IIS NTLM/Kerberos authentication still work with an offline domain controller?

We have multiple IIS instances spread across remote regional branches. Each IIS instance (v.7.5) is running the same application and authenticates its users with Integrated Authentication (NTLM in the ...
-1
votes
1answer
37 views

Why there are three rounds of message exchanges for integrated windows authentication for IE

According to the result monitored by fiddler, there are totally 3 handshakes for integrated windows authentication for IE. GET /home - 401 Unauthorized WWW-Authenticate: Negotiate, NTLM GET ...
0
votes
0answers
62 views

Improving Windows Authentication performance on IIS

We're struggling with performance issues with a ASP.NET MVC site that is using Windows Authentication. Response time is very slow on the first request to the site when the user is being ...
1
vote
0answers
443 views

What does AuthForwardServerList do?

A bit of context, we have several Windows 7 clients connected to an LDAP backed Samba PDC. We also have a Zimbra 8 server that authenticates off the same LDAP. When users logon to the Windows 7 ...
1
vote
0answers
40 views

NTLM Only working from some clients

I have a Windows test app, using .net4, which consumes a remote asp.net web service hosted under IIS6. The client app has hard-coded Windows credentials which it passes to the IIS box. The IIS box ...
0
votes
1answer
224 views

IIS 7.5 - Authentication works with IP Adress but NOT with FQDN

I'm using an IIS Server and run into the following problem: Using Internet Explorer, I type http://1.2.3.4/mySite/ and everything works fine, it uses my Windows credentials. When I try ...
1
vote
1answer
237 views

Squid Proxy and AD auth generating errors on Squid startup

I need some advice with an error i am getting when trying to start Squid which has integrated NTLM / AD auth setup. heres the back story: I've followed this guide word for word on the setup, ...
0
votes
0answers
100 views

Single sign on (SSO) with open-source IMAP server from desktop application?

I've been reading a lot about this topic but I could not reach a solution. I wanted to tell what I'm getting and show a little of what I've tried. In our company, our Windows users are authenticated ...
2
votes
0answers
94 views

NTLM authen not available after installing MS Exchange 2013

After installing MS Exchange Server 2013 the SMTP service is running. However when telnetting the host I get 'AUTH' after 'EHLO', rather than 'AUTH NTLM'. I have checked off "integrated Windows ...
2
votes
2answers
443 views

IE supplies wrong username for NTLM Proxy Auth

We have a managed proxy based on Squid, using NTLM "fakeauth" authentication. The system has been running well for over a year. My issue lies in the client I believe. Yesterday, a specific user on a ...
0
votes
1answer
722 views

Samba authentication of user with wbinfo -a

i setup a RedHat server with samba/kerberos/winbind. I can retrieve my user and groups with wbinfo -u and wbinfo -g. BUT in the listings, the name appears like that : wbinfo -u DOMAIN+username1 ...
0
votes
1answer
94 views

IIS 6.0 App Pool under domain service account unable to use NTLM authentication

I'm trying to move an old internal web site into its own app pool run by its own service account, so that I can get finer-grained control over its permissions and such. The site is set up to use ...
0
votes
0answers
147 views

IIS: NTLM authentication works, Negotiate does not

We develop a web application that is installed on-site on customers' servers. In the past months, we've had a curious problem occurring every now and then. We also know how to workaround it, but I'm ...
0
votes
1answer
507 views

Can download with Firefox, can't download with curl (NTLM authentication)

I want to download a file from a SharePoint server (url). I manage to download it using Firefox. I can't manage to download it using curl. Sounds surprising, but the same URL works on Firefox, fails ...
2
votes
3answers
420 views

Access internally hosted IIS with Windows authentication from Internet

I have .NET web application running on IIS behind the firewall. Application is using Windows authentication (NTLM) to authenticate users. I need to make this application accessible from Internet so ...
1
vote
1answer
199 views

IIS 7.5 selectively overwrites my error response page

Using Windows 2008r2, IIS 7.5, I have an application using Windows Integrated Authentication (WWW-Authenticate: NTLM, Negotiate). In my ASP.NET MVC code, I am overwriting the IIS error page ...
1
vote
0answers
191 views

IIS7, Kerberos, sometimes no response from browser to 401

SharePoint 2010 hosted on IIS7, Kerberos enabled. Clients log on through Citrix on several terminal servers. Kerberos is working on several clients, so SPN's are defined correctly, but on some clients ...
1
vote
1answer
447 views

IIS6/NTLM : very slow authentication with user from other domain

I have a WSS 3.0 website hosted on IIS6. It's fully configured for NTLM only. It is hosted in domain A. When users from domain A attempt to access the website, it works fine. Now we are in the ...
2
votes
0answers
562 views

Squid Logs NTLM usernames only for certain requests

Currently I have squid 3.2 setup with NTLM authentication and LDAP Group pulls. I also have MySar running to pull the reports. It seems that the way the logging works is by passing them twice, one to ...
1
vote
0answers
90 views

IIS logging one 401.5 response, followed by a 200 response

We are using pass-through authentication on our intranet. The clients are running Google Chrome Frame in IE and the server is running IIS 7. In the IIS logs, for every request we are seeing a 401.5 ...
0
votes
0answers
94 views

How to allow all users to be 'authenticated' by winbind

I'm facing a problem with the infamous NTLM authentication implemented on RHEL5.3 server using Samba (winbind). The problem is that we have a requirement to disable the authentication in a sense to ...
1
vote
0answers
138 views

Transparent Proxy For Individual Web Apps?

At work, I perform automated testing of our front-end web apps that use Active Directory for authentication. One tool (Sahi) uses a local proxy to go between the web app and the user's browser, to ...
6
votes
2answers
392 views

ntlm_auth - can login in AD with both old and new passwords

I have problem with AD and ntlm_auth. I use the following command, to query the AD server for checking the user existence: ntlm_auth --use-cached-creds --username=SOME_USER --password=SOME_PASS ...
0
votes
1answer
500 views

I want ntlm auto authentication but login popup uppears [closed]

I built a php intranet web application that allow users to show their information stored in Active Directory. I want to auto authenticate the user over the Active directory using his windows ...
1
vote
1answer
127 views

Routing all outgoing http to ntlmaps [closed]

I have a linux ubuntu vm which hosts a xampp setup. Unfortunately i'm behind an NTLM proxy so i cannot get php to "communicate" with the outside world. Apt-get works fine since i have setup ntlmaps. ...
0
votes
1answer
267 views

Does Windows 7 store domain account and password in SAM

If my machine has Windows 7 and connect to domain, what happens when domain controller is unavailable ? How do I exactly log in when domain controller is unavailable ? I mean normally it should use ...
1
vote
1answer
558 views

SMTP Relay via MS Exchange

I am trying to pragmatically send e-mail to external user with Exchange. Now I know if Relay is not Enabled in Exchange Server then e-mail relay will not work. Now, if I send e-mail from my Outlook ...
5
votes
2answers
2k views

Password Authentication Fails - NTLMv2

Environment: Windows 2000 sp4 EDIT: Domain Controller with no trust setup with the Win2008 Server Windows XP machines Windows 2008 Server Netapp NAS Problem: We have a shared folder that resides ...
1
vote
0answers
230 views

LSA Cache Entries - NTLM versus Negotiate Windows Authentication Providers

We have a situation, due to a recent employee name change, where the HttpContext.Current.User.Identity.Name property of an ASP.NET web application resolves to the old username. This has been ...
3
votes
4answers
10k views

How can I check if my IIS site is using NTLM or Kerberos?

How can I check if my IIS site is using NTLM or Kerberos? And how can I change authentication from Kerberos to NTLM? I'm using IIS 7.5 and I couldn't find any answer to this question, can help me a ...
3
votes
2answers
2k views

NTLM with cURL returns 401

Goal: connecting to an Exchange server (EWS) Method: cURL Problem: Cannot get authenticated (NTLM), request returns 401.1 There seems to be an old, well documented 2 issue that started with cURL's ...
1
vote
1answer
353 views

NTLM Basic authentication fails behind http apache only when load balancing

I set up an apache http reverse proxy and load balance. I already know that Reverse Proxying will break NTLM dialog, and leads to something like Basic Auth against Active Directory, which is ...
1
vote
1answer
959 views

ISA 2006 switch to kerberos causes authentication problems for some users

In our large corporate environment we have 4 ISA 2006 servers set up. The users (WinXP IE8) are configured with an automatic proxy configuration script. Recently, the PAC was modified to return FQDN ...
2
votes
2answers
361 views

NTLM Authorization using Apache NameBased VirtualHosts over SSL

I have a development environment that is fronted via an Apache server. This apache server requires SSL and Centrify-enabled NTLM authentication/authorization with the AD backend, using group access to ...
1
vote
1answer
371 views

Global NTLM authentication on linux for different applications

I'm currently attempting to use various open-source programs under centos to connect through an ISA proxy server that requires NTLM authentication. In an attempt to solve the authentication needs and ...
0
votes
3answers
1k views

How to ensure machine is “Kerberos Domain” joined?

i've been having issues where calls to the LogonUser Windows API function is falling back to NTLM authentication, rather than using the preferred, default, Kerberos authentication. Researching the ...
0
votes
1answer
497 views

HaProxy and Windows Auth

Can I get HaProxy to forward windows auth credentials onto IIS? I have searched for a day and cannot find much information out there.
1
vote
1answer
732 views

Apache2 NTLM Authentication on specific URL

I have a problem. I'm using Legrandin's NTLM Authentication Module PyAuthenNTLM2 with my Apache2 server. It really works well and it was easy to install. I recommend it to everybody. The ...
0
votes
1answer
553 views

SOCKS proxy server chained to NTLM protected HTTP proxy on Linux

Our application can connect to Internet only directly or via SOCKS proxy. Unfortunately we can only access the Internet via HTTP proxy protected by NTLM authentication. Is there any SOCKS server that ...
3
votes
1answer
1k views

All client browsers repeatedly asking for NTLM authentication when running through local proxy server

All client browsers repeatedly asking for NTLM authentication when running through local proxy server. When pointing browsers through the local proxy to the internet, some but not all clients are ...
1
vote
0answers
244 views

Remote access to IIS 5.1 via NTLM

I'm trying to configure remote access to IIS 5.1 web server on a virtual xp machine. The web server is used to expose a ASP.NET web service. I want to access the web service using Java client by ...
1
vote
1answer
946 views

squid3 auth thru samba using ntlm to AD doesn't work

some users here are spending to much time exploring the WWW. So big boss whats to get this under control. We use a squid3 just for some security reason and chace benefits. and now i'm trying to set ...
4
votes
1answer
2k views

How can I inspect why Active Directory can't use kerberos and fallsback to NTLM?

I have been trying to get squid running with kerberos auth for a few days but I'm in some trouble. The problem has been asked and replied many times on both the squid-users list and on the web, I have ...
0
votes
2answers
425 views

Connecting to SharePoint 2010 From the Internet (Keep being prompted for my Username & Password)

I installed Sharepoint Server 2010 on a domain controller but when I want to connect to my team site or my document workspace through the internet it keeps prompting me to enter my username and ...
1
vote
1answer
240 views

Configure Apache to forward requests to proxy with NTLM2 authentication

I'm trying to call a REST API over the internet using SoapUI but I'm behind a corporate firewall that uses NTLM2 authentication which is not supported by SoapUI. Is it possible to run a local Apache ...
3
votes
1answer
146 views

Why deploy Kerberos for Exchange 2010 SP1 RU3?

The first version of Exchange 2010 to support Kerberos is SP1 RU3. It does this through the RollAlternateServiceAccountCredential.ps1 commandlet. Besides implementing "better" security, does this ...
2
votes
1answer
132 views

rules for usernames in windows domain

I'm working on a app that uses Jespa to do transparent SSO. I'm using the NtlmSecurityProvider. In my code, when I get the username looks like this: "DOMAINNAME\username" e.g. <% ...