NTLM (NT LAN Manager) is a suite of Microsoft security protocols that provides authentication, integrity, and confidentiality to users.

learn more… | top users | synonyms

0
votes
0answers
4 views

NTLM authentication using NETLOGON_NETWORK_INFO

I'm working on a NTLM-implementation for node.js and struggling with different documentations from Microsoft. I've already implemented the Microsoft NT LAN Manager Authentication Protocol [MS-NLMP]. ...
2
votes
2answers
810 views

HaProxy and Windows Auth

Can I get HaProxy to forward windows auth credentials onto IIS? I have searched for a day and cannot find much information out there.
2
votes
1answer
1k views

Apache configuration to make NTLM authentication work through a Proxy

I'm running an application server behind an Apache proxy with the following sort of thing in my Apache config: ProxyPass /app http://myapplication:8080/myapp ProxyPassReverse /app ...
0
votes
1answer
867 views

Can download with Firefox, can't download with curl (NTLM authentication)

I want to download a file from a SharePoint server (url). I manage to download it using Firefox. I can't manage to download it using curl. Sounds surprising, but the same URL works on Firefox, fails ...
1
vote
1answer
1k views

DCOM Authentication Fails to use Kerberos, Falls back to NTLM

I have a webservice that is written in Classic ASP. In this web service it attempts to create a VirtualServer.Application object on another server via DCOM. This fails with Permission Denied. However ...
0
votes
0answers
15 views

Disable ‘Authentication Required’ login modal upon failed ntlm authentication on apache

I'm trying to disable the Authentication Required login modal that appears when the NTLM authentication fails and simply redirect the users to a login page.
20
votes
5answers
14k views

Why use Kerberos instead of NTLM in IIS?

This is something that I've never really been able to answer as well as I like: What is the real advantage of using Kerberos authentication in IIS instead of NTLM? I've seen a lot of people really ...
3
votes
0answers
78 views

Configure ntlm_auth for offline operations

We currently have a NAC server set up to authenticate against a Samba4 AD using the ntlm_auth utility and would like to make it more tolerant to network outages. Currently, when the NAC loses ...
1
vote
4answers
2k views

How to ensure machine is “Kerberos Domain” joined?

i've been having issues where calls to the LogonUser Windows API function is falling back to NTLM authentication, rather than using the preferred, default, Kerberos authentication. Researching the ...
0
votes
2answers
92 views

Change Mozilla settings globally on internal network

We have a network in our company and I want to set network.automatic-ntlm-auth.allow-non-fqdn parameter to True in Mozilla FireFox for all clients,how can I do this?
2
votes
0answers
164 views

FreeRADIUS using Active Directory integration broken without any traces

I've a FreeBSD 10.0 server running FreeRADIUS 3 and things got broken without any apparent reason. I'm using Winbind from Samba4 to authenticate with ntlm_auth. I've done some debug to solve the ...
1
vote
0answers
361 views

IIS7, Kerberos, sometimes no response from browser to 401

SharePoint 2010 hosted on IIS7, Kerberos enabled. Clients log on through Citrix on several terminal servers. Kerberos is working on several clients, so SPN's are defined correctly, but on some clients ...
0
votes
0answers
77 views

NTLM in Chrome not working

I'm writing a web app for my work's intranet. I'm using NTLM to authenticate users automatically. The server is running on a local domain, so myServer is really myServer.MyCompanyDomain.local. IE uses ...
0
votes
0answers
23 views

IIS 6.0 reverting to NTLM authorization

This is related to my other question here. We have a .net 2.0 app hosted in IIS 6 on two different servers (the second server was setup to troubleshoot this issue) these servers are on two different ...
1
vote
1answer
62 views

Apache - Replace Apache::AuthenNTLM with Kerberos (mod_auth_kerb)

Within an intranet system on Solaris we currently use perls Apache2::AuthenNTLM module to authenticate with a Win 2k3 doman server, so we can access the user ID of the person browsing the site. ...
0
votes
0answers
172 views

Cross-server NTLM authentication failing

I think this issue has less to do with software development and more to do with general network configuration, so I'm posting the question here initially. I have an MVC4 application hosted in IIS 7.5 ...
6
votes
2answers
1k views

NetApp erroring with: STATUS_NOLOGON_WORKSTATION_TRUST_ACCOUNT

Since a sitewide upgrade to Windows 7 on desktop, I've started having a problem with virus checking. Specifically - when doing a rename operation on a (filer hosted) CIFS share. The virus checker ...
4
votes
4answers
15k views

How can I check if my IIS site is using NTLM or Kerberos?

How can I check if my IIS site is using NTLM or Kerberos? And how can I change authentication from Kerberos to NTLM? I'm using IIS 7.5 and I couldn't find any answer to this question, can help me a ...
5
votes
1answer
791 views

“Anonymous Logon” vs “NTLM V1” What to disable?

Working on getting rid of NTLM V1 logins all together in the AD environment; found lot of events, almost all of them from the user "Anonymous Logon"(4624 events) other 1(4624 events) percent coming ...
0
votes
0answers
161 views

Java HTTPClient Proxy Authentication

I need to setup a local dev environment behind an authenticated proxy. I'm using Squid as the proxy and have written a java program using Apache Java HTTP client to ensure I can connect outside of the ...
1
vote
0answers
189 views

Apache authentication - Exclude paths from <Directory> defined authentication

I currently use the following directives to apply NTLM authentication to our Drupal installation, but I need to exclude some paths. I've tried adding directives for the specific paths I want to ...
0
votes
2answers
1k views

Apache2 authentication NTLM without prompted semi Basic auth type

I succesfully configured ntlm authentication. Unfortunately config allows semi basic authorization. For example when I'm using tortoise svn1.8.4(with serf access lib), chrome or IE web browsers, they ...
1
vote
0answers
58 views

Proxy hosted in IIS with NTLM, how can I enable single sign on?

I have a forward proxy hosted in IIS with windows authentication enabled. Firefox is set up to use the proxy. Problem is, I don't know what to do with network.automatic-ntlm-auth.trusted-uris. ...
2
votes
2answers
978 views

IE supplies wrong username for NTLM Proxy Auth

We have a managed proxy based on Squid, using NTLM "fakeauth" authentication. The system has been running well for over a year. My issue lies in the client I believe. Yesterday, a specific user on a ...
0
votes
2answers
836 views

NTLM through proxy server

We use squid as a HTTP proxy (if needed I can modify it's configuration). We want to access a website that uses ntlm for authentication When we go on the website through squid we see a blank page ...
3
votes
1answer
275 views

Does IIS NTLM/Kerberos authentication still work with an offline domain controller?

We have multiple IIS instances spread across remote regional branches. Each IIS instance (v.7.5) is running the same application and authenticates its users with Integrated Authentication (NTLM in the ...
1
vote
1answer
508 views

IIS 7.5 selectively overwrites my error response page

Using Windows 2008r2, IIS 7.5, I have an application using Windows Integrated Authentication (WWW-Authenticate: NTLM, Negotiate). In my ASP.NET MVC code, I am overwriting the IIS error page ...
-1
votes
1answer
53 views

Why there are three rounds of message exchanges for integrated windows authentication for IE

According to the result monitored by fiddler, there are totally 3 handshakes for integrated windows authentication for IE. GET /home - 401 Unauthorized WWW-Authenticate: Negotiate, NTLM GET ...
0
votes
0answers
189 views

Improving Windows Authentication performance on IIS

We're struggling with performance issues with a ASP.NET MVC site that is using Windows Authentication. Response time is very slow on the first request to the site when the user is being ...
1
vote
0answers
1k views

What does AuthForwardServerList do?

A bit of context, we have several Windows 7 clients connected to an LDAP backed Samba PDC. We also have a Zimbra 8 server that authenticates off the same LDAP. When users logon to the Windows 7 ...
1
vote
0answers
78 views

NTLM Only working from some clients

I have a Windows test app, using .net4, which consumes a remote asp.net web service hosted under IIS6. The client app has hard-coded Windows credentials which it passes to the IIS box. The IIS box ...
0
votes
1answer
766 views

IIS 7.5 - Authentication works with IP Adress but NOT with FQDN

I'm using an IIS Server and run into the following problem: Using Internet Explorer, I type http://1.2.3.4/mySite/ and everything works fine, it uses my Windows credentials. When I try ...
1
vote
2answers
1k views

IE does not send NTLM domain

I have a problem with NTLM single-sign-on with IE8. We've got multiple domain controllers and users from multiple domains that we try to authenticate to a web application via NTLMv1 passthru. ...
1
vote
1answer
594 views

Squid Proxy and AD auth generating errors on Squid startup

I need some advice with an error i am getting when trying to start Squid which has integrated NTLM / AD auth setup. heres the back story: I've followed this guide word for word on the setup, ...
2
votes
0answers
163 views

NTLM authen not available after installing MS Exchange 2013

After installing MS Exchange Server 2013 the SMTP service is running. However when telnetting the host I get 'AUTH' after 'EHLO', rather than 'AUTH NTLM'. I have checked off "integrated Windows ...
0
votes
1answer
2k views

Samba authentication of user with wbinfo -a

i setup a RedHat server with samba/kerberos/winbind. I can retrieve my user and groups with wbinfo -u and wbinfo -g. BUT in the listings, the name appears like that : wbinfo -u DOMAIN+username1 ...
2
votes
2answers
3k views

Weird IIS with Windows Authentication + IE problem

I have a website running on IIS and using Windows Authentication. All users that are configured to get access to the site are form a AD domain (not local users). In the properties of a Website, I have ...
0
votes
1answer
222 views

IIS 6.0 App Pool under domain service account unable to use NTLM authentication

I'm trying to move an old internal web site into its own app pool run by its own service account, so that I can get finer-grained control over its permissions and such. The site is set up to use ...
2
votes
3answers
539 views

Access internally hosted IIS with Windows authentication from Internet

I have .NET web application running on IIS behind the firewall. Application is using Windows authentication (NTLM) to authenticate users. I need to make this application accessible from Internet so ...
3
votes
2answers
3k views

NTLM with cURL returns 401

Goal: connecting to an Exchange server (EWS) Method: cURL Problem: Cannot get authenticated (NTLM), request returns 401.1 There seems to be an old, well documented 2 issue that started with cURL's ...
1
vote
1answer
935 views

IIS6/NTLM : very slow authentication with user from other domain

I have a WSS 3.0 website hosted on IIS6. It's fully configured for NTLM only. It is hosted in domain A. When users from domain A attempt to access the website, it works fine. Now we are in the ...
2
votes
0answers
902 views

Squid Logs NTLM usernames only for certain requests

Currently I have squid 3.2 setup with NTLM authentication and LDAP Group pulls. I also have MySar running to pull the reports. It seems that the way the logging works is by passing them twice, one to ...
6
votes
3answers
7k views

apt-get through NTLM authenticated proxy

I must be missing something... I could swear I've done this before but I've torched the VM's that I was using previously. How do you get apt-get to authenticate through a proxy that only supports ...
6
votes
2answers
815 views

ntlm_auth - can login in AD with both old and new passwords

I have problem with AD and ntlm_auth. I use the following command, to query the AD server for checking the user existence: ntlm_auth --use-cached-creds --username=SOME_USER --password=SOME_PASS ...
5
votes
3answers
7k views

How do I log authentication attempts with samba?

I have users authenticating with squid (NTLM) to an Active Directory server using Samba 3.5.4 and I'd like to log users' login attempts. I'd like a line showing something like: TIMESTAMP ...
1
vote
0answers
128 views

IIS logging one 401.5 response, followed by a 200 response

We are using pass-through authentication on our intranet. The clients are running Google Chrome Frame in IE and the server is running IIS 7. In the IIS logs, for every request we are seeing a 401.5 ...
0
votes
0answers
119 views

How to allow all users to be 'authenticated' by winbind

I'm facing a problem with the infamous NTLM authentication implemented on RHEL5.3 server using Samba (winbind). The problem is that we have a requirement to disable the authentication in a sense to ...
3
votes
1answer
1k views

All client browsers repeatedly asking for NTLM authentication when running through local proxy server

All client browsers repeatedly asking for NTLM authentication when running through local proxy server. When pointing browsers through the local proxy to the internet, some but not all clients are ...
1
vote
0answers
166 views

Transparent Proxy For Individual Web Apps?

At work, I perform automated testing of our front-end web apps that use Active Directory for authentication. One tool (Sahi) uses a local proxy to go between the web app and the user's browser, to ...