NTLM (NT LAN Manager) is a suite of Microsoft security protocols that provides authentication, integrity, and confidentiality to users.

learn more… | top users | synonyms

2
votes
0answers
403 views

NTLM authen not available after installing MS Exchange 2013

After installing MS Exchange Server 2013 the SMTP service is running. However when telnetting the host I get 'AUTH' after 'EHLO', rather than 'AUTH NTLM'. I have checked off "integrated Windows ...
2
votes
2answers
2k views

IE supplies wrong username for NTLM Proxy Auth

We have a managed proxy based on Squid, using NTLM "fakeauth" authentication. The system has been running well for over a year. My issue lies in the client I believe. Yesterday, a specific user on a ...
0
votes
1answer
5k views

Samba authentication of user with wbinfo -a

i setup a RedHat server with samba/kerberos/winbind. I can retrieve my user and groups with wbinfo -u and wbinfo -g. BUT in the listings, the name appears like that : wbinfo -u DOMAIN+username1 ...
0
votes
1answer
337 views

IIS 6.0 App Pool under domain service account unable to use NTLM authentication

I'm trying to move an old internal web site into its own app pool run by its own service account, so that I can get finer-grained control over its permissions and such. The site is set up to use ...
2
votes
3answers
835 views

Access internally hosted IIS with Windows authentication from Internet

I have .NET web application running on IIS behind the firewall. Application is using Windows authentication (NTLM) to authenticate users. I need to make this application accessible from Internet so ...
1
vote
1answer
895 views

IIS 7.5 selectively overwrites my error response page

Using Windows 2008r2, IIS 7.5, I have an application using Windows Integrated Authentication (WWW-Authenticate: NTLM, Negotiate). In my ASP.NET MVC code, I am overwriting the IIS error page ...
1
vote
0answers
586 views

IIS7, Kerberos, sometimes no response from browser to 401

SharePoint 2010 hosted on IIS7, Kerberos enabled. Clients log on through Citrix on several terminal servers. Kerberos is working on several clients, so SPN's are defined correctly, but on some clients ...
1
vote
1answer
2k views

IIS6/NTLM : very slow authentication with user from other domain

I have a WSS 3.0 website hosted on IIS6. It's fully configured for NTLM only. It is hosted in domain A. When users from domain A attempt to access the website, it works fine. Now we are in the ...
2
votes
0answers
2k views

Squid Logs NTLM usernames only for certain requests

Currently I have squid 3.2 setup with NTLM authentication and LDAP Group pulls. I also have MySar running to pull the reports. It seems that the way the logging works is by passing them twice, one to ...
1
vote
0answers
213 views

IIS logging one 401.5 response, followed by a 200 response

We are using pass-through authentication on our intranet. The clients are running Google Chrome Frame in IE and the server is running IIS 7. In the IIS logs, for every request we are seeing a 401.5 ...
1
vote
0answers
221 views

Transparent Proxy For Individual Web Apps?

At work, I perform automated testing of our front-end web apps that use Active Directory for authentication. One tool (Sahi) uses a local proxy to go between the web app and the user's browser, to ...
6
votes
2answers
2k views

ntlm_auth - can login in AD with both old and new passwords

I have problem with AD and ntlm_auth. I use the following command, to query the AD server for checking the user existence: ntlm_auth --use-cached-creds --username=SOME_USER --password=SOME_PASS ...
0
votes
1answer
2k views

I want ntlm auto authentication but login popup uppears [closed]

I built a php intranet web application that allow users to show their information stored in Active Directory. I want to auto authenticate the user over the Active directory using his windows ...
1
vote
1answer
194 views

Routing all outgoing http to ntlmaps [closed]

I have a linux ubuntu vm which hosts a xampp setup. Unfortunately i'm behind an NTLM proxy so i cannot get php to "communicate" with the outside world. Apt-get works fine since i have setup ntlmaps. ...
0
votes
1answer
692 views

Does Windows 7 store domain account and password in SAM

If my machine has Windows 7 and connect to domain, what happens when domain controller is unavailable ? How do I exactly log in when domain controller is unavailable ? I mean normally it should use ...
1
vote
1answer
911 views

SMTP Relay via MS Exchange

I am trying to pragmatically send e-mail to external user with Exchange. Now I know if Relay is not Enabled in Exchange Server then e-mail relay will not work. Now, if I send e-mail from my Outlook ...
6
votes
1answer
5k views

Password Authentication Fails - NTLMv2

Environment: Windows 2000 sp4 EDIT: Domain Controller with no trust setup with the Win2008 Server Windows XP machines Windows 2008 Server Netapp NAS Problem: We have a shared folder that resides ...
1
vote
0answers
427 views

LSA Cache Entries - NTLM versus Negotiate Windows Authentication Providers

We have a situation, due to a recent employee name change, where the HttpContext.Current.User.Identity.Name property of an ASP.NET web application resolves to the old username. This has been ...
7
votes
4answers
24k views

How can I check if my IIS site is using NTLM or Kerberos?

How can I check if my IIS site is using NTLM or Kerberos? And how can I change authentication from Kerberos to NTLM? I'm using IIS 7.5 and I couldn't find any answer to this question, can help me a ...
3
votes
2answers
6k views

NTLM with cURL returns 401

Goal: connecting to an Exchange server (EWS) Method: cURL Problem: Cannot get authenticated (NTLM), request returns 401.1 There seems to be an old, well documented 2 issue that started with cURL's ...
1
vote
1answer
631 views

NTLM Basic authentication fails behind http apache only when load balancing

I set up an apache http reverse proxy and load balance. I already know that Reverse Proxying will break NTLM dialog, and leads to something like Basic Auth against Active Directory, which is ...
1
vote
1answer
1k views

ISA 2006 switch to kerberos causes authentication problems for some users

In our large corporate environment we have 4 ISA 2006 servers set up. The users (WinXP IE8) are configured with an automatic proxy configuration script. Recently, the PAC was modified to return FQDN ...
2
votes
2answers
673 views

NTLM Authorization using Apache NameBased VirtualHosts over SSL

I have a development environment that is fronted via an Apache server. This apache server requires SSL and Centrify-enabled NTLM authentication/authorization with the AD backend, using group access to ...
1
vote
1answer
692 views

Global NTLM authentication on linux for different applications

I'm currently attempting to use various open-source programs under centos to connect through an ISA proxy server that requires NTLM authentication. In an attempt to solve the authentication needs and ...
1
vote
4answers
2k views

How to ensure machine is “Kerberos Domain” joined?

i've been having issues where calls to the LogonUser Windows API function is falling back to NTLM authentication, rather than using the preferred, default, Kerberos authentication. Researching the ...
3
votes
2answers
2k views

HaProxy and Windows Auth

Can I get HaProxy to forward windows auth credentials onto IIS? I have searched for a day and cannot find much information out there.
1
vote
1answer
1k views

Apache2 NTLM Authentication on specific URL

I have a problem. I'm using Legrandin's NTLM Authentication Module PyAuthenNTLM2 with my Apache2 server. It really works well and it was easy to install. I recommend it to everybody. The ...
0
votes
1answer
982 views

SOCKS proxy server chained to NTLM protected HTTP proxy on Linux

Our application can connect to Internet only directly or via SOCKS proxy. Unfortunately we can only access the Internet via HTTP proxy protected by NTLM authentication. Is there any SOCKS server that ...
3
votes
1answer
2k views

All client browsers repeatedly asking for NTLM authentication when running through local proxy server

All client browsers repeatedly asking for NTLM authentication when running through local proxy server. When pointing browsers through the local proxy to the internet, some but not all clients are ...
1
vote
0answers
277 views

Remote access to IIS 5.1 via NTLM

I'm trying to configure remote access to IIS 5.1 web server on a virtual xp machine. The web server is used to expose a ASP.NET web service. I want to access the web service using Java client by ...
1
vote
1answer
2k views

squid3 auth thru samba using ntlm to AD doesn't work

some users here are spending to much time exploring the WWW. So big boss whats to get this under control. We use a squid3 just for some security reason and chace benefits. and now i'm trying to set ...
4
votes
1answer
3k views

How can I inspect why Active Directory can't use kerberos and fallsback to NTLM?

I have been trying to get squid running with kerberos auth for a few days but I'm in some trouble. The problem has been asked and replied many times on both the squid-users list and on the web, I have ...
0
votes
2answers
649 views

Connecting to SharePoint 2010 From the Internet (Keep being prompted for my Username & Password)

I installed Sharepoint Server 2010 on a domain controller but when I want to connect to my team site or my document workspace through the internet it keeps prompting me to enter my username and ...
1
vote
1answer
374 views

Configure Apache to forward requests to proxy with NTLM2 authentication

I'm trying to call a REST API over the internet using SoapUI but I'm behind a corporate firewall that uses NTLM2 authentication which is not supported by SoapUI. Is it possible to run a local Apache ...
3
votes
1answer
169 views

Why deploy Kerberos for Exchange 2010 SP1 RU3?

The first version of Exchange 2010 to support Kerberos is SP1 RU3. It does this through the RollAlternateServiceAccountCredential.ps1 commandlet. Besides implementing "better" security, does this ...
2
votes
1answer
200 views

rules for usernames in windows domain

I'm working on a app that uses Jespa to do transparent SSO. I'm using the NtlmSecurityProvider. In my code, when I get the username looks like this: "DOMAINNAME\username" e.g. <% ...
3
votes
1answer
2k views

Apache configuration to make NTLM authentication work through a Proxy

I'm running an application server behind an Apache proxy with the following sort of thing in my Apache config: ProxyPass /app http://myapplication:8080/myapp ProxyPassReverse /app ...
2
votes
1answer
1k views

Single Sign-on for Intranet WordPress using OpenID (or OAuth), IIS, Integrated Windows Authentication, Active Directory?

Is it possible to have single sign-on for intranet WordPress sites by using OpenID (or OAuth), IIS, Integrated Windows Authentication, Active Directory? I'd like to have Active Directory users ...
1
vote
0answers
660 views

How do I tell if IIS allows for authentication to downgrade from Kerberos to NTLM v1?

It is my understanding that authenticating to IIS with Kerberos will, by default, allow for the authentication to downgrade to NTLM v2 or NTLM v1 if the client cannot handle Kerberos. In my case I ...
1
vote
1answer
2k views

DCOM Authentication Fails to use Kerberos, Falls back to NTLM

I have a webservice that is written in Classic ASP. In this web service it attempts to create a VirtualServer.Application object on another server via DCOM. This fails with Permission Denied. However ...
2
votes
1answer
4k views

Apache2::AuthenNTLM connects to Domain controller but does not authenticate

I have an Apache 2.2 server running Apache2::AuthenNTLM. I have successfully Apache2::AuthenNTLM configured it to the point that it connects to the domain controller. However, valid username / ...
30
votes
5answers
28k views

Why use Kerberos instead of NTLM in IIS?

This is something that I've never really been able to answer as well as I like: What is the real advantage of using Kerberos authentication in IIS instead of NTLM? I've seen a lot of people really ...
1
vote
3answers
12k views

Sharepoint 2010 can't find domain users when granting permissions

I'm trying to grant permissions to other people to view a SharePoint site but when granting permissions it uses "Check Names" and claims any user or group that is part of a domain does not exist. It ...
0
votes
1answer
1k views

getUserPrincipal() in JCIFS / Lan-Manager authentitation level setting in Windows 2k8

I have to find out in which exact format JCIFS stores the user principal in the "getUserPrincipal()" property. Therefor i created a test Environment like this: Windows Server 2008 Domain Controller ...
2
votes
4answers
863 views

openvpn as two factor network entry point integrated to AD

I'm looking to deploy openvpn as a linux RAS server (rather than site-to-site) and i'd like to use two factor authentication, specifically the use of ssl certificates and passwords tied into an ntlm ...
1
vote
3answers
3k views

IIS7.5 Windows Authentication missing providers menu item (ntlm)

I'm trying to enable NTLM authentication on a Windows Server 2008 R2 machine with IIS 7.5 for a specific file in my web root. I've been following these instructions ...
1
vote
4answers
3k views

IIS6 site using integrated authentication (NTLM) fails when accessed with Win7 / IE8

I'm having pretty similar problems as described in case 139099, but the fix there doesn't seem to work for me. Here's the details: Server: Win2003Srv R2 SP2 Stadalone, not a member of a domain. ...
1
vote
2answers
2k views

IE does not send NTLM domain

I have a problem with NTLM single-sign-on with IE8. We've got multiple domain controllers and users from multiple domains that we try to authenticate to a web application via NTLMv1 passthru. ...
1
vote
3answers
2k views

Sharepoint asks for NTLM credentials for every unique URL. How do I stop it?

I'm tasked with troubleshooting a problem we're having with a SP2010 site. The app is external, and there are several clients that must connect. Some clients are receiving a crazy amount of credential ...
0
votes
1answer
267 views

ASP.NET MVC app on IIS7 with WebForms content is throwing NTLM authenticate box

I have an ASP.NET MVC app that also contains some WebForms content (for SSRS ReportViewer). This is deployed to IIS7 and the MVC pages of the app work fine, but when I try to browse to the aspx page I ...