NTLM (NT LAN Manager) is a suite of Microsoft security protocols that provides authentication, integrity, and confidentiality to users.

learn more… | top users | synonyms

2
votes
1answer
1k views

Apache mod_auth_kerb asking 2 authentication

I've configured Apache to use mod_auth_kerberos. So far everything is working nicely for client thats connected to Active Directory and have their browser to NTLM enabled. When clients are not in the ...
0
votes
0answers
7 views

Can Managed Service Accounts (MSA) work w/ NTLM?

This is sort of a Dear Lazyweb question -- haven't done a ton of research into MSA's yet, but are running into issues using them with storage that doesn't support Kerberos. I do see some mention of ...
0
votes
1answer
169 views

Vagrant behind NTLM proxy on windows - guest unable to connect to the host proxy

I'm on a Windows machine behind a corporate NTLM proxy and I need to vagrant up a VM from the given Vagrantfile. I've read a few things on this topic: http://runefs.com/2014/11/28/setting-up-...
2
votes
1answer
558 views

FreeRADIUS using Active Directory integration broken without any traces

I've a FreeBSD 10.0 server running FreeRADIUS 3 and things got broken without any apparent reason. I'm using Winbind from Samba4 to authenticate with ntlm_auth. I've done some debug to solve the ...
1
vote
1answer
1k views

How to decode traffic as NTLM protocol in Wireshark?

I'm trying to debug NTLM authentication issue. One of my ideas was to capture the network traffic and look thougth it. In my case NTLM authentication is going over non-stardart port (6901). Of course, ...
-1
votes
1answer
1k views

get Squid proxy server authentication type from local client

Just like the title is: Is there a way to get the authentication type of a squid proxyserver from a client in the local network? Im using debian UPDATE 1: HTTP/1.1 407 Proxy Authentication ...
0
votes
0answers
36 views

NTLM Authentication fails on SSRS 2008 R2 across trusted domains

I've got 2 domains that are fully trusted. SSRS is on domain1 and my users are on domain2. Can reach SSRS from D2 without an issue, and use my D1 credentials to authenticate. In SSRS\Reports I ...
1
vote
1answer
54 views

Determine usage of UPN for logon inside MS AD forest / domain

maybe somebody can give me a hint on this. I am evaluating the prerequisites for changing all (human) user's UPN in a large Microsoft AD environment to the recommended MS format (aligned with the ...
0
votes
0answers
50 views

Squid3 + HTTPS Authentication issue

I've successfully setup Squid3 to work as a transparent proxy for HTTP and HTTPS, installed the CA on the machines. Everything works OK, but there is this corporation site I work for where Squid does ...
1
vote
0answers
39 views

How to set “Negotiate Seal” in NTLMSSP_AUTH?

not sure if this is right stackexchange site to ask this, but here it goes. I have 2 servers (win 2003 and 2012) trying to do NTLM authentication with a UNIX box (with apache web server) with the ...
1
vote
0answers
30 views

NTLM authentication not working following server reboot

I have IIS 6.1 on Windows Server 2008 SP1. There is one web application which has only Windows Authentication enabled. This has just one provider: NTLM. When I works, it works fine - until the server ...
0
votes
1answer
49 views

Exchange 2007 RPC over HTTPS, basic auth, password prompt bypassed by clicking 'need password'.. desired behavior?

I can't handle the incessant password prompting anymore.. Our Outlook installations prompt for a password after the comps wake from sleep and/or when changing between wired/wireless. Outlook DOES ...
1
vote
1answer
2k views

DCOM Authentication Fails to use Kerberos, Falls back to NTLM

I have a webservice that is written in Classic ASP. In this web service it attempts to create a VirtualServer.Application object on another server via DCOM. This fails with Permission Denied. However ...
0
votes
1answer
1k views

IIS 7.5 - Authentication works with IP Adress but NOT with FQDN

I'm using an IIS Server and run into the following problem: Using Internet Explorer, I type http://1.2.3.4/mySite/ and everything works fine, it uses my Windows credentials. When I try http://name/...
0
votes
0answers
97 views

stunnel with ntlm Proxy-Authenticate: NTLM authorization request rejected

My stunnel setup doesn't work through a http proxy with ntlm authentication, the stunnel returns an error message: Proxy-Authenticate: NTLM authorization request rejected Whereas the wireshark ...
0
votes
0answers
11 views

Squid : different acl for different kind of authentication

I am using a 2.7 Squid stable 9 with NTLM authentication. But with some tools (like adobe cloud), the connection use Basic auth param, which is not configured in my squid.conf. So I would like to ...
0
votes
0answers
49 views

Squid with NTLM auth behind Netscaler

my task is implementing a squid proxy that allow all my authenticated (windows AD) internal users to surf internet without any credential request (pop-up). Plus, i created two squid nodes and put ...
2
votes
1answer
484 views

Improving Windows Authentication performance on IIS

We're struggling with performance issues with a ASP.NET MVC site that is using Windows Authentication. Response time is very slow on the first request to the site when the user is being ...
5
votes
2answers
4k views

March 10th Patch Tuesday appears to cause SQL Server client connection problems

Since applying the full set of patches on a Win 7.1 Pro desktop and a Windows 2012 R2 Datacenter Azure server running SQL 2014, SQL Management Studio (2008 and 2014 versions) won't connect to the SQL ...
0
votes
0answers
74 views

Is it possible to bypass NTLM authentication for server applications?

I have a client who has an on-site legacy system. The system is secured with NTLM authentication, I believe it is running within IIS. I also have an application running on AWS, also Windows Server, ...
1
vote
0answers
88 views

haproxy anonymous frontend, authorized backend with NTLM

Need to provide an anonymous readonly access to an svn repository AFAIK, haproxy cannot auth on backend by itself. There's a working configuration for haproxy with basic auth. How to migrate it to ...
0
votes
0answers
54 views

using FTP over proxy Squid with NTLM auth

I have a Squid 2.7 STABLE9 proxy on a Debian and I have allow 80, 443 & 21 port to my user (user have windows PC). When a user go throught my proxy, he have to authenticate himself with NTLM ...
1
vote
0answers
38 views

Apache NTLM not authenicating domain username/password.

I have a centos box and I am trying to setup NTLM authenication for apache. I have the linux box on the AD domain already and able to get user and group info using the wbinfo command. I have the ...
1
vote
1answer
23 views

Why is IIS asking for NTLM over and over

When running a website localy on IIS every request requires NTLM authentication over again. When running on server it's not as bad, but still requests more than once for a batch of requests all used ...
0
votes
0answers
386 views

RDP error “The function requested is not supported” after enabling NLA

I'm trying to RDP into one of my servers, which as Network Level Authentication Enabled as well as NTLMv2 being forced. This worked fine until the server had to reboot for updates. Now, I cannot RDP ...
2
votes
1answer
120 views

RDP client error - An authentication error has occured (0x609)

I have a computer named ws24 (192.168.1.168) and another named srvPPassTest2. I have written a program running on ws24 that is an "RDP proxy". It accepts connections from RDP clients on port 7070 (...
1
vote
1answer
131 views

NTLM on a Load Balanced Environment

We have a Netscaler VPX that load balances HTTP requests to 3 IIS services on 3 Windows servers. Authentication is set to "Windows Authentication" but because our environment isn't set up for Kerberos ...
0
votes
1answer
195 views

Why Squid ntlm_auth works only when “cache_effective_group root”

I have Debian 8 Jessie with Samba configured as AD member server. Samba+Winbind works perfectly: I can create shares and assign rights for AD users; getent passwd shows both local and AD users, etc. ...
0
votes
1answer
183 views

How to resolve 401 Unauthorized failures on intranet pages with IIS and Active Directory

I'm attempting allow/restrict website intranet users access based on Active Directory permissions. I thought we'd reached our objective (authentication without domain sign-on prompt) until I ...
0
votes
1answer
279 views

Active Directory / Freeradius / ntlm_auth / mail attribute

I am currently configuring a linux server with Freeradius to have our clients authenticate against our Active Directory for our WiFi-network. The goal is to have our users use the e-mail address that ...
1
vote
0answers
72 views

Squid authentication helpers

I set up squid with authentication helper following along the line the guide here http://www.freesoftwaremagazine.com/articles/authentication_with_squid the only difference is that my users together ...
6
votes
1answer
14k views

IIS7 Windows Authentication Providers

Does anyone know what the different windows authentication providers for IIS7 means. There are 3 available providers NTLM Negotiate Negotiate:Kerberos NTLM is pretty obvious I think its NTLM ...
1
vote
0answers
555 views

Unable to configure CNTLM

I am setting up a proxy server on my linux system using CNTLM. I have edited the cntlm.conf file and made the following changes- # # Cntlm Authentication Proxy Configuration # # NOTE: all values ...
3
votes
1answer
2k views

Apache configuration to make NTLM authentication work through a Proxy

I'm running an application server behind an Apache proxy with the following sort of thing in my Apache config: ProxyPass /app http://myapplication:8080/myapp ProxyPassReverse /app http://...
5
votes
3answers
3k views

Check Primary Authentication Protocol for Active Directory (NTLM or Kerberos?) [duplicate]

How can I check, from a client machine (in Global Group)(also is local admin), whether the domain controller is authenticating my login request to the domain using NTLM or Kerberos? I know that ...
2
votes
4answers
14k views

Authentication issues using NTLM, SSL, and SharePoint

I am currently experiencing problems with authentication on a SharePoint site. Routinely, user accounts(only one or so at a time) will be locked out and they will get 401 unauthorized errors. The ...
6
votes
1answer
5k views

Password Authentication Fails - NTLMv2

Environment: Windows 2000 sp4 EDIT: Domain Controller with no trust setup with the Win2008 Server Windows XP machines Windows 2008 Server Netapp NAS Problem: We have a shared folder that resides ...
0
votes
0answers
340 views

How to configure Apache NTLM in order to get REMOTE_USER?

No matter where I put %{REMOTE_USER}, I got NULL. Can you please tell me how I can configure NTLM Apache in order to get REMOTE_USER ? RewriteEngine On #RewriteCond %{LA-U:REMOTE_USER} ...
1
vote
1answer
382 views

Configure Apache to forward requests to proxy with NTLM2 authentication

I'm trying to call a REST API over the internet using SoapUI but I'm behind a corporate firewall that uses NTLM2 authentication which is not supported by SoapUI. Is it possible to run a local Apache ...
4
votes
0answers
323 views

Configure ntlm_auth for offline operations

We currently have a NAC server set up to authenticate against a Samba4 AD using the ntlm_auth utility and would like to make it more tolerant to network outages. Currently, when the NAC loses ...
1
vote
0answers
171 views

SSRS Returning 401 Unauthorised Error when calling web service

We have two web servers that call the SSRS service to query the reports held there. Both servers are set up identically but while one works the other returns a 401 unauthorised exception when trying ...
8
votes
7answers
50k views
1
vote
0answers
126 views

Each request for a NTLM authenticated page served by an Apache webservice is doing CAN transactions

I develop a TYPO3 application which runs in a companies intranet. It is build on a CENTOS 6 platform with a MySQL database (5.1.16) and an Apache webserver (Version 2.2.15). For authentication we use ...
3
votes
2answers
2k views

HaProxy and Windows Auth

Can I get HaProxy to forward windows auth credentials onto IIS? I have searched for a day and cannot find much information out there.
30
votes
5answers
29k views

Why use Kerberos instead of NTLM in IIS?

This is something that I've never really been able to answer as well as I like: What is the real advantage of using Kerberos authentication in IIS instead of NTLM? I've seen a lot of people really ...
1
vote
4answers
2k views

How to ensure machine is “Kerberos Domain” joined?

i've been having issues where calls to the LogonUser Windows API function is falling back to NTLM authentication, rather than using the preferred, default, Kerberos authentication. Researching the ...
0
votes
2answers
232 views

Change Mozilla settings globally on internal network

We have a network in our company and I want to set network.automatic-ntlm-auth.allow-non-fqdn parameter to True in Mozilla FireFox for all clients,how can I do this?
1
vote
0answers
595 views

IIS7, Kerberos, sometimes no response from browser to 401

SharePoint 2010 hosted on IIS7, Kerberos enabled. Clients log on through Citrix on several terminal servers. Kerberos is working on several clients, so SPN's are defined correctly, but on some clients ...
1
vote
1answer
802 views

Apache - Replace Apache::AuthenNTLM with Kerberos (mod_auth_kerb)

Within an intranet system on Solaris we currently use perls Apache2::AuthenNTLM module to authenticate with a Win 2k3 doman server, so we can access the user ID of the person browsing the site. ...