NTLM (NT LAN Manager) is a suite of Microsoft security protocols that provides authentication, integrity, and confidentiality to users.

learn more… | top users | synonyms

0
votes
1answer
1k views

Can download with Firefox, can't download with curl (NTLM authentication) [on hold]

I want to download a file from a SharePoint server (url). I manage to download it using Firefox. I can't manage to download it using curl. Sounds surprising, but the same URL works on Firefox, fails ...
4
votes
2answers
2k views

March 10th Patch Tuesday appears to cause SQL Server client connection problems

Since applying the full set of patches on a Win 7.1 Pro desktop and a Windows 2012 R2 Datacenter Azure server running SQL 2014, SQL Management Studio (2008 and 2014 versions) won't connect to the SQL ...
1
vote
1answer
1k views

DCOM Authentication Fails to use Kerberos, Falls back to NTLM

I have a webservice that is written in Classic ASP. In this web service it attempts to create a VirtualServer.Application object on another server via DCOM. This fails with Permission Denied. However ...
5
votes
3answers
134 views

Check Primary Authentication Protocol for Active Directory (NTLM or Kerberos?) [duplicate]

How can I check, from a client machine (in Global Group)(also is local admin), whether the domain controller is authenticating my login request to the domain using NTLM or Kerberos? I know that ...
0
votes
0answers
14 views

What are the implications of removing Negotiate as a Windows Authentication provider?

A single user of our internal website is getting the following message when using IE9 to access one of our internal websites hosted on IIS 7.5: 401 - Unauthorized: Access is denied due to invalid ...
0
votes
1answer
1k views

IIS 7.5 - Authentication works with IP Adress but NOT with FQDN

I'm using an IIS Server and run into the following problem: Using Internet Explorer, I type http://1.2.3.4/mySite/ and everything works fine, it uses my Windows credentials. When I try ...
2
votes
1answer
1k views

Apache configuration to make NTLM authentication work through a Proxy

I'm running an application server behind an Apache proxy with the following sort of thing in my Apache config: ProxyPass /app http://myapplication:8080/myapp ProxyPassReverse /app ...
2
votes
4answers
12k views

Authentication issues using NTLM, SSL, and SharePoint

I am currently experiencing problems with authentication on a SharePoint site. Routinely, user accounts(only one or so at a time) will be locked out and they will get 401 unauthorized errors. The ...
6
votes
1answer
3k views

Password Authentication Fails - NTLMv2

Environment: Windows 2000 sp4 EDIT: Domain Controller with no trust setup with the Win2008 Server Windows XP machines Windows 2008 Server Netapp NAS Problem: We have a shared folder that resides ...
0
votes
0answers
70 views

How to configure Apache NTLM in order to get REMOTE_USER?

No matter where I put %{REMOTE_USER}, I got NULL. Can you please tell me how I can configure NTLM Apache in order to get REMOTE_USER ? RewriteEngine On #RewriteCond %{LA-U:REMOTE_USER} ...
1
vote
1answer
312 views

Configure Apache to forward requests to proxy with NTLM2 authentication

I'm trying to call a REST API over the internet using SoapUI but I'm behind a corporate firewall that uses NTLM2 authentication which is not supported by SoapUI. Is it possible to run a local Apache ...
0
votes
0answers
68 views

Squid NTLM authentication started to fail

I have a squid server authenticating against a Win2k3 AD. The authentication is failing since today and I'm sure it is something on the windows side because on the linux machine there were no ...
0
votes
0answers
44 views

[cntlm]: How to configure cntlm for multiple users?

I configure cntlm for one user and it works well (firefox, yum...) but I would like to configure cntlm for multiple users. The service cntlmd is active. # chkconfig --list cntlmd cntlmd ...
3
votes
0answers
146 views

Configure ntlm_auth for offline operations

We currently have a NAC server set up to authenticate against a Samba4 AD using the ntlm_auth utility and would like to make it more tolerant to network outages. Currently, when the NAC loses ...
1
vote
0answers
40 views

SSRS Returning 401 Unauthorised Error when calling web service

We have two web servers that call the SSRS service to query the reports held there. Both servers are set up identically but while one works the other returns a 401 unauthorised exception when trying ...
7
votes
7answers
34k views
1
vote
0answers
59 views

Each request for a NTLM authenticated page served by an Apache webservice is doing CAN transactions

I develop a TYPO3 application which runs in a companies intranet. It is build on a CENTOS 6 platform with a MySQL database (5.1.16) and an Apache webserver (Version 2.2.15). For authentication we use ...
3
votes
2answers
1k views

HaProxy and Windows Auth

Can I get HaProxy to forward windows auth credentials onto IIS? I have searched for a day and cannot find much information out there.
0
votes
0answers
40 views

Disable ‘Authentication Required’ login modal upon failed ntlm authentication on apache

I'm trying to disable the Authentication Required login modal that appears when the NTLM authentication fails and simply redirect the users to a login page.
24
votes
5answers
17k views

Why use Kerberos instead of NTLM in IIS?

This is something that I've never really been able to answer as well as I like: What is the real advantage of using Kerberos authentication in IIS instead of NTLM? I've seen a lot of people really ...
1
vote
4answers
2k views

How to ensure machine is “Kerberos Domain” joined?

i've been having issues where calls to the LogonUser Windows API function is falling back to NTLM authentication, rather than using the preferred, default, Kerberos authentication. Researching the ...
0
votes
2answers
122 views

Change Mozilla settings globally on internal network

We have a network in our company and I want to set network.automatic-ntlm-auth.allow-non-fqdn parameter to True in Mozilla FireFox for all clients,how can I do this?
2
votes
0answers
298 views

FreeRADIUS using Active Directory integration broken without any traces

I've a FreeBSD 10.0 server running FreeRADIUS 3 and things got broken without any apparent reason. I'm using Winbind from Samba4 to authenticate with ntlm_auth. I've done some debug to solve the ...
1
vote
0answers
448 views

IIS7, Kerberos, sometimes no response from browser to 401

SharePoint 2010 hosted on IIS7, Kerberos enabled. Clients log on through Citrix on several terminal servers. Kerberos is working on several clients, so SPN's are defined correctly, but on some clients ...
0
votes
0answers
168 views

NTLM in Chrome not working

I'm writing a web app for my work's intranet. I'm using NTLM to authenticate users automatically. The server is running on a local domain, so myServer is really myServer.MyCompanyDomain.local. IE uses ...
0
votes
0answers
38 views

IIS 6.0 reverting to NTLM authorization

This is related to my other question here. We have a .net 2.0 app hosted in IIS 6 on two different servers (the second server was setup to troubleshoot this issue) these servers are on two different ...
1
vote
1answer
287 views

Apache - Replace Apache::AuthenNTLM with Kerberos (mod_auth_kerb)

Within an intranet system on Solaris we currently use perls Apache2::AuthenNTLM module to authenticate with a Win 2k3 doman server, so we can access the user ID of the person browsing the site. ...
0
votes
0answers
450 views

Cross-server NTLM authentication failing

I think this issue has less to do with software development and more to do with general network configuration, so I'm posting the question here initially. I have an MVC4 application hosted in IIS 7.5 ...
6
votes
2answers
2k views

NetApp erroring with: STATUS_NOLOGON_WORKSTATION_TRUST_ACCOUNT

Since a sitewide upgrade to Windows 7 on desktop, I've started having a problem with virus checking. Specifically - when doing a rename operation on a (filer hosted) CIFS share. The virus checker ...
5
votes
4answers
18k views

How can I check if my IIS site is using NTLM or Kerberos?

How can I check if my IIS site is using NTLM or Kerberos? And how can I change authentication from Kerberos to NTLM? I'm using IIS 7.5 and I couldn't find any answer to this question, can help me a ...
5
votes
1answer
2k views

“Anonymous Logon” vs “NTLM V1” What to disable?

Working on getting rid of NTLM V1 logins all together in the AD environment; found lot of events, almost all of them from the user "Anonymous Logon"(4624 events) other 1(4624 events) percent coming ...
0
votes
0answers
175 views

Java HTTPClient Proxy Authentication

I need to setup a local dev environment behind an authenticated proxy. I'm using Squid as the proxy and have written a java program using Apache Java HTTP client to ensure I can connect outside of the ...
1
vote
0answers
226 views

Apache authentication - Exclude paths from <Directory> defined authentication

I currently use the following directives to apply NTLM authentication to our Drupal installation, but I need to exclude some paths. I've tried adding directives for the specific paths I want to ...
0
votes
2answers
3k views

Apache2 authentication NTLM without prompted semi Basic auth type

I succesfully configured ntlm authentication. Unfortunately config allows semi basic authorization. For example when I'm using tortoise svn1.8.4(with serf access lib), chrome or IE web browsers, they ...
1
vote
0answers
84 views

Proxy hosted in IIS with NTLM, how can I enable single sign on?

I have a forward proxy hosted in IIS with windows authentication enabled. Firefox is set up to use the proxy. Problem is, I don't know what to do with network.automatic-ntlm-auth.trusted-uris. ...
2
votes
2answers
1k views

IE supplies wrong username for NTLM Proxy Auth

We have a managed proxy based on Squid, using NTLM "fakeauth" authentication. The system has been running well for over a year. My issue lies in the client I believe. Yesterday, a specific user on a ...
0
votes
2answers
1k views

NTLM through proxy server

We use squid as a HTTP proxy (if needed I can modify it's configuration). We want to access a website that uses ntlm for authentication When we go on the website through squid we see a blank page ...
3
votes
1answer
340 views

Does IIS NTLM/Kerberos authentication still work with an offline domain controller?

We have multiple IIS instances spread across remote regional branches. Each IIS instance (v.7.5) is running the same application and authenticates its users with Integrated Authentication (NTLM in the ...
1
vote
1answer
663 views

IIS 7.5 selectively overwrites my error response page

Using Windows 2008r2, IIS 7.5, I have an application using Windows Integrated Authentication (WWW-Authenticate: NTLM, Negotiate). In my ASP.NET MVC code, I am overwriting the IIS error page ...
-1
votes
1answer
67 views

Why there are three rounds of message exchanges for integrated windows authentication for IE

According to the result monitored by fiddler, there are totally 3 handshakes for integrated windows authentication for IE. GET /home - 401 Unauthorized WWW-Authenticate: Negotiate, NTLM GET ...
0
votes
0answers
232 views

Improving Windows Authentication performance on IIS

We're struggling with performance issues with a ASP.NET MVC site that is using Windows Authentication. Response time is very slow on the first request to the site when the user is being ...
1
vote
0answers
2k views

What does AuthForwardServerList do?

A bit of context, we have several Windows 7 clients connected to an LDAP backed Samba PDC. We also have a Zimbra 8 server that authenticates off the same LDAP. When users logon to the Windows 7 ...
1
vote
0answers
98 views

NTLM Only working from some clients

I have a Windows test app, using .net4, which consumes a remote asp.net web service hosted under IIS6. The client app has hard-coded Windows credentials which it passes to the IIS box. The IIS box ...
1
vote
2answers
1k views

IE does not send NTLM domain

I have a problem with NTLM single-sign-on with IE8. We've got multiple domain controllers and users from multiple domains that we try to authenticate to a web application via NTLMv1 passthru. ...
1
vote
1answer
918 views

Squid Proxy and AD auth generating errors on Squid startup

I need some advice with an error i am getting when trying to start Squid which has integrated NTLM / AD auth setup. heres the back story: I've followed this guide word for word on the setup, ...
2
votes
0answers
248 views

NTLM authen not available after installing MS Exchange 2013

After installing MS Exchange Server 2013 the SMTP service is running. However when telnetting the host I get 'AUTH' after 'EHLO', rather than 'AUTH NTLM'. I have checked off "integrated Windows ...
0
votes
1answer
3k views

Samba authentication of user with wbinfo -a

i setup a RedHat server with samba/kerberos/winbind. I can retrieve my user and groups with wbinfo -u and wbinfo -g. BUT in the listings, the name appears like that : wbinfo -u DOMAIN+username1 ...
3
votes
2answers
4k views

Weird IIS with Windows Authentication + IE problem

I have a website running on IIS and using Windows Authentication. All users that are configured to get access to the site are form a AD domain (not local users). In the properties of a Website, I have ...
0
votes
1answer
268 views

IIS 6.0 App Pool under domain service account unable to use NTLM authentication

I'm trying to move an old internal web site into its own app pool run by its own service account, so that I can get finer-grained control over its permissions and such. The site is set up to use ...
2
votes
3answers
605 views

Access internally hosted IIS with Windows authentication from Internet

I have .NET web application running on IIS behind the firewall. Application is using Windows authentication (NTLM) to authenticate users. I need to make this application accessible from Internet so ...