Questions tagged [ntlm]

NTLM (NT LAN Manager) is a suite of Microsoft security protocols that provides authentication, integrity, and confidentiality to users.

59 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
4 votes
0 answers
2k views

Configure ntlm_auth for offline operations

We currently have a NAC server set up to authenticate against a Samba4 AD using the ntlm_auth utility and would like to make it more tolerant to network outages. Currently, when the NAC loses ...
Antoine Benkemoun's user avatar
4 votes
0 answers
2k views

Squid Logs NTLM usernames only for certain requests

Currently I have squid 3.2 setup with NTLM authentication and LDAP Group pulls. I also have MySar running to pull the reports. It seems that the way the logging works is by passing them twice, one to ...
alucas's user avatar
  • 41
3 votes
0 answers
337 views

Active Directory: how to get rid of NTLM when we have remote users (road warriors)?

I want to disable NTLM completely. I don't want password hash to be stored in memory because of pass-the-hash attack (people don't have SeDebugPrivilege but anyway NTLM is not good) But people connect ...
user996142's user avatar
3 votes
0 answers
2k views

How to run kinit as root before automounting mutiuser cifs mounts?

Goal I'm setting up multi-user CIFS mounts in an Active Directory environment under CentOS 8.2. The storage server supports SMB3.1.1 protocol. Prerequisites I could easily integrate the system to the ...
MauvaisJoueur's user avatar
3 votes
0 answers
2k views

Getting Authentication Negotiate instead of NTLM while consuming SOAP WCF Service in Net.Core 2.1

I was trying to connect to a WCF SOAP service using NTLM Authentication Scheme, I succeeded at it when using .Net Framework 4.x but when I try to consume the same service in .NET Core 2.1 it fails (...
dennisbot's user avatar
  • 131
3 votes
0 answers
8k views

Unable to configure CNTLM

I am setting up a proxy server on my linux system using CNTLM. I have edited the cntlm.conf file and made the following changes- # # Cntlm Authentication Proxy Configuration # # NOTE: all values ...
Backspace's user avatar
2 votes
0 answers
1k views

Single Sign on (SSO) not working on Firefox

Could it be that Firefox doesn’t support all windows NTLM SSO scenarios on a Sharepoint Site via adfs? Login attempts into Sharepoint site just gets stuck on the login page and nothing happens ...
john zuh's user avatar
2 votes
0 answers
424 views

Powershell session from CentOS 7 to Windows Server 2019

I want to open a Powershell session from CentOS 7 to a Windows Server 2019 using a domain account but I can't get it working. What I've done so far: Enabled WinRM on Windows (verified connection from ...
Michael's user avatar
  • 355
2 votes
0 answers
311 views

Is it possible to limit SSRS authentication to Kerberos only?

We have an instance of SSRS (SQL Server Reporting Services) which uses Kerberos Constrained Delegation to fetch data for its reports from SQL Server on behalf of its users. For this purpose, SSRS was ...
Cat Mucius's user avatar
2 votes
0 answers
524 views

How to set “Negotiate Seal” in NTLMSSP_AUTH?

not sure if this is right stackexchange site to ask this, but here it goes. I have 2 servers (win 2003 and 2012) trying to do NTLM authentication with a UNIX box (with apache web server) with the ...
Jach's user avatar
  • 151
2 votes
0 answers
977 views

haproxy anonymous frontend, authorized backend with NTLM

Need to provide an anonymous readonly access to an svn repository AFAIK, haproxy cannot auth on backend by itself. There's a working configuration for haproxy with basic auth. How to migrate it to ...
basin's user avatar
  • 558
2 votes
0 answers
590 views

NTLM authen not available after installing MS Exchange 2013

After installing MS Exchange Server 2013 the SMTP service is running. However when telnetting the host I get 'AUTH' after 'EHLO', rather than 'AUTH NTLM'. I have checked off "integrated Windows ...
user891260's user avatar
2 votes
0 answers
1k views

IIS7, Kerberos, sometimes no response from browser to 401

SharePoint 2010 hosted on IIS7, Kerberos enabled. Clients log on through Citrix on several terminal servers. Kerberos is working on several clients, so SPN's are defined correctly, but on some clients ...
Boland's user avatar
  • 21
2 votes
0 answers
628 views

IIS logging one 401.5 response, followed by a 200 response

We are using pass-through authentication on our intranet. The clients are running Google Chrome Frame in IE and the server is running IIS 7. In the IIS logs, for every request we are seeing a 401.5 ...
cbp's user avatar
  • 299
1 vote
0 answers
498 views

Windows Remote Desktop defaulting to NTLM

The issue: I have a Virtual Host - VHost.domian.com. When I try to connect from my laptop - Laptop.domain.com - it seems to be trying to use NTLM for authentication and not Kerberos. Note: My laptop ...
Johnny Heisler's user avatar
1 vote
0 answers
710 views

Web application - Integrated windows authentication issues with layer 4 load balancer

Evening folks We currently have an internally developed web application that is hosted on IIS using Windows Authentication. Our users use Edge in IEMode to connect to our web app - currently they don’...
Ahimsa's user avatar
  • 11
1 vote
1 answer
3k views

How to restrict NTLM V1 to select servers?

The domain I'm working on currently has NTLM V1 enabled for Domain Controllers. I've done some tests and discovered that only a few application servers require NTLM V1. Unfortunately I have to allow ...
Prox's user avatar
  • 111
1 vote
0 answers
1k views

Apache reverse proxy to site using NTLM authentication fails with mod_rewrite but not mod_proxy

We have a reverse proxy server in front of an Exchange server and would like to lock down more of the paths. Minimized examples: Fails (but works for all pages that don't require authentication): <...
melds's user avatar
  • 231
1 vote
0 answers
2k views

Remote Desktop to W10 with NTLM Disabled

We recently disable NTLM on our DCs (Default Domain Controllers Policy - Restrict NTLM: Deny all The problem is when some (not all) Windows 10 workgroup clients (connected with VPN) try to open a ...
Stratos Develekos's user avatar
1 vote
1 answer
2k views

Where is the documentation of Apache's mod_auth_sspi module?

I'm trying to configure the mod_auth_sspi module on my Apache server. I've found a few example configurations, but I can't find any proper documentation. Does anyone know where I can find that?
Mathew Alden's user avatar
1 vote
0 answers
2k views

Prevent Anonymous logons on windows-server 2016

I can't figure out how to entirely disable anonymous logon on Windows Server 2016 which is not a domain controller (regular instance). With the settings currently set I'm truly surprised to see such ...
Vega4's user avatar
  • 131
1 vote
0 answers
240 views

Is there a way to have password-less SQL server login for another user without kerberos enabled?

I am connecting to SQL server with JDBC. I am able to use Integrated authentication with JDBC to connect to a SQL Server 2016 instance as the current logged in user, and I did not have to supply a ...
Nicholas DiPiazza's user avatar
1 vote
0 answers
740 views

Squid as transparent proxy to tunnel all connections under Windows

There's this app Joplin that can't connect to the internet on a corporate machine which lives on Active Directory and connects to the internet through HTTP and a NTLM proxy. The problem is that you ...
microwth's user avatar
  • 111
1 vote
1 answer
6k views

Auditing NTLM authentication on Domain Controllers: which GPO?

We are wanting to turn on NTLM authentication auditing to gather further details on some clients trying to authenticate using NTLM to the domain/DCs. Specifically we want to enable: Network ...
TheCleaner's user avatar
  • 32.8k
1 vote
1 answer
1k views

Does Windows prevent automatic NTLM authentication when the SMB server is located on a different subnet?

I have a Samba server[1] on my network with a share configured[2] to allow access for my Windows logon user. I can access the share from the Windows 10 machine that hosts the SMB server VM without ...
Arne's user avatar
  • 11
1 vote
0 answers
186 views

NTLM Authentication fails once a week for only one user

I assist with running a small AD domain with around 40 members. For just one of those members, every wednesday at 12pm exactly, authentication will fail when they try to browse to the company intranet ...
Mike Anthony's user avatar
1 vote
0 answers
1k views

Setup a proxy server using Windows Authentication (NTLM)?

I want to setup a proxy server using Windows authentication (formally NTLM), I know that there are better protocols that could be use (Digest, etc.). I've been struggling to find information on how to ...
user3797758's user avatar
1 vote
0 answers
338 views

NTLM authentication not working following server reboot

I have IIS 6.1 on Windows Server 2008 SP1. There is one web application which has only Windows Authentication enabled. This has just one provider: NTLM. When I works, it works fine - until the server ...
paul's user avatar
  • 181
1 vote
1 answer
1k views

Apache NTLM not authenicating domain username/password.

I have a centos box and I am trying to setup NTLM authenication for apache. I have the linux box on the AD domain already and able to get user and group info using the wbinfo command. I have the ...
akarc's user avatar
  • 11
1 vote
1 answer
666 views

Why is IIS asking for NTLM over and over

When running a website localy on IIS every request requires NTLM authentication over again. When running on server it's not as bad, but still requests more than once for a batch of requests all used ...
JNF's user avatar
  • 111
1 vote
0 answers
322 views

Squid authentication helpers

I set up squid with authentication helper following along the line the guide here http://www.freesoftwaremagazine.com/articles/authentication_with_squid the only difference is that my users together ...
Leonardo M's user avatar
1 vote
0 answers
403 views

SSRS Returning 401 Unauthorised Error when calling web service

We have two web servers that call the SSRS service to query the reports held there. Both servers are set up identically but while one works the other returns a 401 unauthorised exception when trying ...
ColinRobertson's user avatar
1 vote
0 answers
241 views

Each request for a NTLM authenticated page served by an Apache webservice is doing CAN transactions

I develop a TYPO3 application which runs in a companies intranet. It is build on a CENTOS 6 platform with a MySQL database (5.1.16) and an Apache webserver (Version 2.2.15). For authentication we use ...
Klaus's user avatar
  • 111
1 vote
0 answers
797 views

Apache authentication - Exclude paths from <Directory> defined authentication

I currently use the following directives to apply NTLM authentication to our Drupal installation, but I need to exclude some paths. I've tried adding directives for the specific paths I want to ...
BeardedGeek's user avatar
1 vote
0 answers
303 views

Proxy hosted in IIS with NTLM, how can I enable single sign on?

I have a forward proxy hosted in IIS with windows authentication enabled. Firefox is set up to use the proxy. Problem is, I don't know what to do with network.automatic-ntlm-auth.trusted-uris. ...
Egor's user avatar
  • 111
1 vote
0 answers
276 views

Transparent Proxy For Individual Web Apps?

At work, I perform automated testing of our front-end web apps that use Active Directory for authentication. One tool (Sahi) uses a local proxy to go between the web app and the user's browser, to ...
user151807's user avatar
1 vote
0 answers
631 views

LSA Cache Entries - NTLM versus Negotiate Windows Authentication Providers

We have a situation, due to a recent employee name change, where the HttpContext.Current.User.Identity.Name property of an ASP.NET web application resolves to the old username. This has been ...
kmk's user avatar
  • 111
1 vote
1 answer
3k views

SOCKS proxy server chained to NTLM protected HTTP proxy on Linux

Our application can connect to Internet only directly or via SOCKS proxy. Unfortunately we can only access the Internet via HTTP proxy protected by NTLM authentication. Is there any SOCKS server that ...
Martin Ždila's user avatar
1 vote
0 answers
331 views

Remote access to IIS 5.1 via NTLM

I'm trying to configure remote access to IIS 5.1 web server on a virtual xp machine. The web server is used to expose a ASP.NET web service. I want to access the web service using Java client by ...
mateusz.fiolka's user avatar
1 vote
0 answers
988 views

How do I tell if IIS allows for authentication to downgrade from Kerberos to NTLM v1?

It is my understanding that authenticating to IIS with Kerberos will, by default, allow for the authentication to downgrade to NTLM v2 or NTLM v1 if the client cannot handle Kerberos. In my case I ...
Kirk Liemohn's user avatar
0 votes
0 answers
141 views

RDGateway NTLM SSO (with azure application proxy)

So, I follow this guide to change my RDS setup to be available through the azure application proxy: https://learn.microsoft.com/en-us/entra/identity/app-proxy/application-proxy-integrate-with-remote-...
iWantToknow's user avatar
0 votes
0 answers
305 views

Standalone Samba 4.13 server with LDAP backend: Windows 10 clients fails (Windows 7 is OK)

I have a running Samba v4.13 standalone server (no Active Directory nor Samba Domain) on Debian using an LDAP passdb backend (ldapsam) which was working just fine with Windows 7 SMB client but does ...
CDuv's user avatar
  • 242
0 votes
0 answers
222 views

azure devops self-managed agent installation on Ubuntu

my environment is Ubuntu 20.04, after running ./config.cmd command and adding my correct details I get the following error: System.PlatformNotSupportedException: NTLM authentication is not possible ...
Shnbook's user avatar
  • 11
0 votes
0 answers
606 views

Validating credentials in PowerShell wont use Kerberos

In reality I'm debugging a C# app but since the same command is possible in PowerShell I'm trying there. I am trying to validate user accounts using the following in PowerShell: > Add-Type -...
AmazingRealist's user avatar
0 votes
1 answer
464 views

Can any local domain controller authenticate NTLM or do they pass it on to the primary domain controller?

When a Windows server needs to authenticate a domain user with NTLM it asks the local domain controller. My question is whether that domain controller (assuming the user is in that domain) can process ...
Cody Konior's user avatar
0 votes
0 answers
975 views

IIS / PHP not passing (or passing incorrect) NTLM user information

I am currently migrating PHP applications from IIS 8.0 to IIS 10.0. NTLM/Windows Authentication has been installed through Server Manager, the scripts are running on PHP7.1, are using exactly the same ...
Janno's user avatar
  • 51
0 votes
0 answers
986 views

Why is NTLM authentication appearing as NT AUTHORITY\NETWORK SERVICE instead of machine account

I have an ASP.NET application whose app pool is running as Network Service which makes a request to SSRS running on a separate server to retrieve a report. The report displays the username (using ...
user221592's user avatar
0 votes
1 answer
2k views

NTLM with squid

I am new to Squid proxy and need help in setting up NTLM authentication. I checked so many resources on the web but did not find exact steps to get my work done Since I have no background on proxy/...
amit joshi's user avatar
0 votes
1 answer
6k views

Cannot RDP into Windows Server 2016: 0x80090302

I am attempting to RDP into multple Windows Server 2016 VMs with no success. It is joined to a domain and I am using a domain account. The error I see is on the servers is Event ID 4625: An account ...
samule's user avatar
  • 11
0 votes
1 answer
602 views

500 server error on after turning anon auth off and NTLM on

I'm pretty sure this is a permissions issue but can't seem to track down where at. We have a local intranet site that is running on IIS 6.1 and running PHP. We turned on NTLM on so we can pull user-...
Matthewpulpfree's user avatar