NTLM (NT LAN Manager) is a suite of Microsoft security protocols that provides authentication, integrity, and confidentiality to users.

learn more… | top users | synonyms

1
vote
4answers
2k views

How to ensure machine is “Kerberos Domain” joined?

i've been having issues where calls to the LogonUser Windows API function is falling back to NTLM authentication, rather than using the preferred, default, Kerberos authentication. Researching the ...
3
votes
2answers
862 views

HaProxy and Windows Auth

Can I get HaProxy to forward windows auth credentials onto IIS? I have searched for a day and cannot find much information out there.
1
vote
1answer
918 views

Apache2 NTLM Authentication on specific URL

I have a problem. I'm using Legrandin's NTLM Authentication Module PyAuthenNTLM2 with my Apache2 server. It really works well and it was easy to install. I recommend it to everybody. The ...
0
votes
1answer
712 views

SOCKS proxy server chained to NTLM protected HTTP proxy on Linux

Our application can connect to Internet only directly or via SOCKS proxy. Unfortunately we can only access the Internet via HTTP proxy protected by NTLM authentication. Is there any SOCKS server that ...
3
votes
1answer
1k views

All client browsers repeatedly asking for NTLM authentication when running through local proxy server

All client browsers repeatedly asking for NTLM authentication when running through local proxy server. When pointing browsers through the local proxy to the internet, some but not all clients are ...
1
vote
0answers
261 views

Remote access to IIS 5.1 via NTLM

I'm trying to configure remote access to IIS 5.1 web server on a virtual xp machine. The web server is used to expose a ASP.NET web service. I want to access the web service using Java client by ...
1
vote
1answer
1k views

squid3 auth thru samba using ntlm to AD doesn't work

some users here are spending to much time exploring the WWW. So big boss whats to get this under control. We use a squid3 just for some security reason and chace benefits. and now i'm trying to set ...
4
votes
1answer
2k views

How can I inspect why Active Directory can't use kerberos and fallsback to NTLM?

I have been trying to get squid running with kerberos auth for a few days but I'm in some trouble. The problem has been asked and replied many times on both the squid-users list and on the web, I have ...
0
votes
2answers
527 views

Connecting to SharePoint 2010 From the Internet (Keep being prompted for my Username & Password)

I installed Sharepoint Server 2010 on a domain controller but when I want to connect to my team site or my document workspace through the internet it keeps prompting me to enter my username and ...
1
vote
1answer
287 views

Configure Apache to forward requests to proxy with NTLM2 authentication

I'm trying to call a REST API over the internet using SoapUI but I'm behind a corporate firewall that uses NTLM2 authentication which is not supported by SoapUI. Is it possible to run a local Apache ...
3
votes
1answer
158 views

Why deploy Kerberos for Exchange 2010 SP1 RU3?

The first version of Exchange 2010 to support Kerberos is SP1 RU3. It does this through the RollAlternateServiceAccountCredential.ps1 commandlet. Besides implementing "better" security, does this ...
2
votes
1answer
156 views

rules for usernames in windows domain

I'm working on a app that uses Jespa to do transparent SSO. I'm using the NtlmSecurityProvider. In my code, when I get the username looks like this: "DOMAINNAME\username" e.g. <% ...
2
votes
1answer
1k views

Apache configuration to make NTLM authentication work through a Proxy

I'm running an application server behind an Apache proxy with the following sort of thing in my Apache config: ProxyPass /app http://myapplication:8080/myapp ProxyPassReverse /app ...
2
votes
1answer
809 views

Single Sign-on for Intranet WordPress using OpenID (or OAuth), IIS, Integrated Windows Authentication, Active Directory?

Is it possible to have single sign-on for intranet WordPress sites by using OpenID (or OAuth), IIS, Integrated Windows Authentication, Active Directory? I'd like to have Active Directory users ...
1
vote
0answers
554 views

How do I tell if IIS allows for authentication to downgrade from Kerberos to NTLM v1?

It is my understanding that authenticating to IIS with Kerberos will, by default, allow for the authentication to downgrade to NTLM v2 or NTLM v1 if the client cannot handle Kerberos. In my case I ...
1
vote
1answer
1k views

DCOM Authentication Fails to use Kerberos, Falls back to NTLM

I have a webservice that is written in Classic ASP. In this web service it attempts to create a VirtualServer.Application object on another server via DCOM. This fails with Permission Denied. However ...
2
votes
1answer
3k views

Apache2::AuthenNTLM connects to Domain controller but does not authenticate

I have an Apache 2.2 server running Apache2::AuthenNTLM. I have successfully Apache2::AuthenNTLM configured it to the point that it connects to the domain controller. However, valid username / ...
20
votes
5answers
15k views

Why use Kerberos instead of NTLM in IIS?

This is something that I've never really been able to answer as well as I like: What is the real advantage of using Kerberos authentication in IIS instead of NTLM? I've seen a lot of people really ...
0
votes
3answers
8k views

Sharepoint 2010 can't find domain users when granting permissions

I'm trying to grant permissions to other people to view a SharePoint site but when granting permissions it uses "Check Names" and claims any user or group that is part of a domain does not exist. It ...
0
votes
1answer
881 views

getUserPrincipal() in JCIFS / Lan-Manager authentitation level setting in Windows 2k8

I have to find out in which exact format JCIFS stores the user principal in the "getUserPrincipal()" property. Therefor i created a test Environment like this: Windows Server 2008 Domain Controller ...
2
votes
4answers
666 views

openvpn as two factor network entry point integrated to AD

I'm looking to deploy openvpn as a linux RAS server (rather than site-to-site) and i'd like to use two factor authentication, specifically the use of ssl certificates and passwords tied into an ntlm ...
0
votes
3answers
2k views

IIS7.5 Windows Authentication missing providers menu item (ntlm)

I'm trying to enable NTLM authentication on a Windows Server 2008 R2 machine with IIS 7.5 for a specific file in my web root. I've been following these instructions ...
1
vote
4answers
2k views

IIS6 site using integrated authentication (NTLM) fails when accessed with Win7 / IE8

I'm having pretty similar problems as described in case 139099, but the fix there doesn't seem to work for me. Here's the details: Server: Win2003Srv R2 SP2 Stadalone, not a member of a domain. ...
1
vote
2answers
1k views

IE does not send NTLM domain

I have a problem with NTLM single-sign-on with IE8. We've got multiple domain controllers and users from multiple domains that we try to authenticate to a web application via NTLMv1 passthru. ...
1
vote
3answers
2k views

Sharepoint asks for NTLM credentials for every unique URL. How do I stop it?

I'm tasked with troubleshooting a problem we're having with a SP2010 site. The app is external, and there are several clients that must connect. Some clients are receiving a crazy amount of credential ...
0
votes
1answer
236 views

ASP.NET MVC app on IIS7 with WebForms content is throwing NTLM authenticate box

I have an ASP.NET MVC app that also contains some WebForms content (for SSRS ReportViewer). This is deployed to IIS7 and the MVC pages of the app work fine, but when I try to browse to the aspx page I ...
4
votes
2answers
3k views

Why is squid breaking kerberos/NTLM auth?

I'm using squid 2.6.22 (Centos 5 Default) as a proxy. Squid seems to break the authentication process for web pages when they require NTLM or Kerberos Auth. I tested with sharepoint 2007 and tried all ...
2
votes
1answer
1k views

Users of Intranet site on IIS7.5 prompted for username/password

I have an intrasite from a third-party that we just transitioned from IIS 6 on Windows 2003 to a Windows 2008 R2 server with IIS 7.5. On the old system, the user would connect ot the website and be ...
0
votes
1answer
61 views

active directory setup for 2 vm for developments

I don't know much about ActiveDirectory and here is my scenario I am connected to a "real" domain, which my company's domain. I am trying to develop an NTLM authentication solution with my webapp ...
5
votes
3answers
7k views

How do I log authentication attempts with samba?

I have users authenticating with squid (NTLM) to an Active Directory server using Samba 3.5.4 and I'd like to log users' login attempts. I'd like a line showing something like: TIMESTAMP ...
6
votes
3answers
7k views

apt-get through NTLM authenticated proxy

I must be missing something... I could swear I've done this before but I've torched the VM's that I was using previously. How do you get apt-get to authenticate through a proxy that only supports ...
0
votes
3answers
7k views

Apache Reverse Proxy server and SSL NTLM SharePoint

I'm trying to set Apache as proxy server to an internal SharePoint server. I have previously configured Apache to run as a proxy server to export internal webpages and web applications. However, the ...
2
votes
1answer
884 views

Can you change Windows 7 NTML settings to be more like Windows XP?

Our organisation officially only supports Windows XP and IE6. I do like progress, so I installed Windows 7 anyway. Most of our internal applications work fine, but whenever I need to go through our ...
2
votes
1answer
436 views

Windows service running as network service - how does it authenticate? Breaking change in W2K8?

A Windows service running as "Network Service" talks to services on other machines (here: SQL Server and Analysis Services), using Windows authentication. For authentication, we have to grant ...
2
votes
2answers
318 views

Can I set up Samba shares that are authenticated against a domain *without* being joined to a domain?

I'd like to create a Samba server with some shares that have access controlled via accounts on the domain, but without joining the machine to the domain? Is this possible?
1
vote
4answers
3k views

Can we have Linked Servers when using NTLM?

I don't have access to the Active Directory settings, nor do I have access to change anything on the linked server. From everything I've read, it seems like this means I cannot use Kerberos - which ...
0
votes
1answer
186 views

LDAP NTLM interop

Our company uses NTLM to authenticate users. But there are a bunch of softwares with LDAP authentication support. So, is there a way to setup an LDAP server (preferably under WinNT), which can ...
3
votes
4answers
18k views

Which ports are needed for NTLM (Windows Authentication) to connect to SQL Server?

I've got SQL server running on a machine which is not in a domain, and which is not operating in mixed mode (it's running with "Windows Authentication"). I'm trying to connect to it from a Linux web ...
2
votes
1answer
419 views

How to configure NTLM security on Apache http server on windows?

How to configure NTLM security on Apache http server on windows? Abdul khaliq
0
votes
1answer
563 views

How to configure NTLM security on Apache http server? [duplicate]

Possible Duplicate: How to configure NTLM security on Apache http server on windows? How to configure NTLM security on Apache http server?
0
votes
1answer
1k views

Couldn't upload files to Sharepoint site while passing through Squid Proxy

we have this issue: one of our employees is collaborating with a supplier and he needs to upload documents on a Sharepoint site hosted on the supplier's main site. In our environment we use Squid ...
0
votes
2answers
121 views

Vista machine not broadcasting DHCP device name on network

When I look on my router at 'attached devices' - I see the names of my XP machine and my Ubuntu box - but the Vista name is not there (despite seeing the IP addresses of all three connected - ie the ...
2
votes
2answers
1k views

Apache mod_auth_kerb asking 2 authentication

I've configured Apache to use mod_auth_kerberos. So far everything is working nicely for client thats connected to Active Directory and have their browser to ntlm enabled. When clients are not in the ...
2
votes
2answers
2k views

Optional NTLM authentication in Apache

I have a site set up to authenticate users using NTLM in Apache on Linux using perl's Apache2::AuthenNTLM module. This works great when I require the authentication, but I want this to bypass the ...
0
votes
1answer
437 views

Apache, mod_proxy_ajp and IE

I have an Apache 2.2 using mod_proxy_ajp as a reverse proxy for a Tomcat 6, running on RHEL5. On tomcat runs an application that does NTLM authentication. Using Firefox, everything works ok, but IE7 ...
2
votes
1answer
3k views

Squid proxy authentication - most painless way

Ok, the title says it all, really. The end goal is to implement proxy-authentication for end users. Users' systems are mostly (95%) windows-based, the proxy is a Debian Lenny running squid 2.7. I've ...
2
votes
2answers
3k views

Weird IIS with Windows Authentication + IE problem

I have a website running on IIS and using Windows Authentication. All users that are configured to get access to the site are form a AD domain (not local users). In the properties of a Website, I have ...
0
votes
1answer
1k views

firefox fails to pass ntlm to apache2 running authenntlm on Centos 5.1

We are trying to get an application server that is running apache2 on centos 5.1 to use NTLM to provide SSO to a number of applications. We can get SSO to work with IE, however SSO fails with ...
1
vote
1answer
868 views

mod_ntlm for RHEL 5.3

I tried to compile mod_ntlm for Oracle HTTP Server but got all sorts of errors, can someone point me to a pre-compiled binary? Tried everything at ...
2
votes
4answers
644 views

Web based remote administration of Windows user accounts? [closed]

We're looking for a simple web based admin tool to allow trusted users to create windows user accounts via a web based interface. It should also give regular users the ability to change their ...