NTLM (NT LAN Manager) is a suite of Microsoft security protocols that provides authentication, integrity, and confidentiality to users.

learn more… | top users | synonyms

4
votes
2answers
2k views

March 10th Patch Tuesday appears to cause SQL Server client connection problems

Since applying the full set of patches on a Win 7.1 Pro desktop and a Windows 2012 R2 Datacenter Azure server running SQL 2014, SQL Management Studio (2008 and 2014 versions) won't connect to the SQL ...
3
votes
1answer
346 views

Does IIS NTLM/Kerberos authentication still work with an offline domain controller?

We have multiple IIS instances spread across remote regional branches. Each IIS instance (v.7.5) is running the same application and authenticates its users with Integrated Authentication (NTLM in the ...
2
votes
1answer
1k views

Apache mod_auth_kerb asking 2 authentication

I've configured Apache to use mod_auth_kerberos. So far everything is working nicely for client thats connected to Active Directory and have their browser to NTLM enabled. When clients are not in the ...
1
vote
1answer
1k views

DCOM Authentication Fails to use Kerberos, Falls back to NTLM

I have a webservice that is written in Classic ASP. In this web service it attempts to create a VirtualServer.Application object on another server via DCOM. This fails with Permission Denied. However ...
0
votes
1answer
1k views

IIS 7.5 - Authentication works with IP Adress but NOT with FQDN

I'm using an IIS Server and run into the following problem: Using Internet Explorer, I type http://1.2.3.4/mySite/ and everything works fine, it uses my Windows credentials. When I try ...
0
votes
1answer
270 views

IIS 6.0 App Pool under domain service account unable to use NTLM authentication

I'm trying to move an old internal web site into its own app pool run by its own service account, so that I can get finer-grained control over its permissions and such. The site is set up to use ...
0
votes
1answer
771 views

SOCKS proxy server chained to NTLM protected HTTP proxy on Linux

Our application can connect to Internet only directly or via SOCKS proxy. Unfortunately we can only access the Internet via HTTP proxy protected by NTLM authentication. Is there any SOCKS server that ...
0
votes
1answer
243 views

ASP.NET MVC app on IIS7 with WebForms content is throwing NTLM authenticate box

I have an ASP.NET MVC app that also contains some WebForms content (for SSRS ReportViewer). This is deployed to IIS7 and the MVC pages of the app work fine, but when I try to browse to the aspx page I ...
3
votes
0answers
152 views

Configure ntlm_auth for offline operations

We currently have a NAC server set up to authenticate against a Samba4 AD using the ntlm_auth utility and would like to make it more tolerant to network outages. Currently, when the NAC loses ...
2
votes
0answers
307 views

FreeRADIUS using Active Directory integration broken without any traces

I've a FreeBSD 10.0 server running FreeRADIUS 3 and things got broken without any apparent reason. I'm using Winbind from Samba4 to authenticate with ntlm_auth. I've done some debug to solve the ...
2
votes
0answers
251 views

NTLM authen not available after installing MS Exchange 2013

After installing MS Exchange Server 2013 the SMTP service is running. However when telnetting the host I get 'AUTH' after 'EHLO', rather than 'AUTH NTLM'. I have checked off "integrated Windows ...
2
votes
0answers
1k views

Squid Logs NTLM usernames only for certain requests

Currently I have squid 3.2 setup with NTLM authentication and LDAP Group pulls. I also have MySar running to pull the reports. It seems that the way the logging works is by passing them twice, one to ...
1
vote
0answers
47 views

SSRS Returning 401 Unauthorised Error when calling web service

We have two web servers that call the SSRS service to query the reports held there. Both servers are set up identically but while one works the other returns a 401 unauthorised exception when trying ...
1
vote
0answers
60 views

Each request for a NTLM authenticated page served by an Apache webservice is doing CAN transactions

I develop a TYPO3 application which runs in a companies intranet. It is build on a CENTOS 6 platform with a MySQL database (5.1.16) and an Apache webserver (Version 2.2.15). For authentication we use ...
1
vote
0answers
228 views

Apache authentication - Exclude paths from <Directory> defined authentication

I currently use the following directives to apply NTLM authentication to our Drupal installation, but I need to exclude some paths. I've tried adding directives for the specific paths I want to ...
1
vote
0answers
84 views

Proxy hosted in IIS with NTLM, how can I enable single sign on?

I have a forward proxy hosted in IIS with windows authentication enabled. Firefox is set up to use the proxy. Problem is, I don't know what to do with network.automatic-ntlm-auth.trusted-uris. ...
1
vote
0answers
2k views

What does AuthForwardServerList do?

A bit of context, we have several Windows 7 clients connected to an LDAP backed Samba PDC. We also have a Zimbra 8 server that authenticates off the same LDAP. When users logon to the Windows 7 ...
1
vote
0answers
99 views

NTLM Only working from some clients

I have a Windows test app, using .net4, which consumes a remote asp.net web service hosted under IIS6. The client app has hard-coded Windows credentials which it passes to the IIS box. The IIS box ...
1
vote
0answers
449 views

IIS7, Kerberos, sometimes no response from browser to 401

SharePoint 2010 hosted on IIS7, Kerberos enabled. Clients log on through Citrix on several terminal servers. Kerberos is working on several clients, so SPN's are defined correctly, but on some clients ...
1
vote
0answers
159 views

IIS logging one 401.5 response, followed by a 200 response

We are using pass-through authentication on our intranet. The clients are running Google Chrome Frame in IE and the server is running IIS 7. In the IIS logs, for every request we are seeing a 401.5 ...
1
vote
0answers
179 views

Transparent Proxy For Individual Web Apps?

At work, I perform automated testing of our front-end web apps that use Active Directory for authentication. One tool (Sahi) uses a local proxy to go between the web app and the user's browser, to ...
1
vote
0answers
368 views

LSA Cache Entries - NTLM versus Negotiate Windows Authentication Providers

We have a situation, due to a recent employee name change, where the HttpContext.Current.User.Identity.Name property of an ASP.NET web application resolves to the old username. This has been ...
1
vote
0answers
264 views

Remote access to IIS 5.1 via NTLM

I'm trying to configure remote access to IIS 5.1 web server on a virtual xp machine. The web server is used to expose a ASP.NET web service. I want to access the web service using Java client by ...
1
vote
0answers
597 views

How do I tell if IIS allows for authentication to downgrade from Kerberos to NTLM v1?

It is my understanding that authenticating to IIS with Kerberos will, by default, allow for the authentication to downgrade to NTLM v2 or NTLM v1 if the client cannot handle Kerberos. In my case I ...
0
votes
0answers
15 views

Active Directory / Freeradius / ntlm_auth / mail attribute

I am currently configuring a linux server with Freeradius to have our clients authenticate against our Active Directory for our WiFi-network. The goal is to have our users use the e-mail address that ...
0
votes
0answers
17 views

What are the implications of removing Negotiate as a Windows Authentication provider?

A single user of our internal website is getting the following message when using IE9 to access one of our internal websites hosted on IIS 7.5: 401 - Unauthorized: Access is denied due to invalid ...
0
votes
0answers
80 views

How to configure Apache NTLM in order to get REMOTE_USER?

No matter where I put %{REMOTE_USER}, I got NULL. Can you please tell me how I can configure NTLM Apache in order to get REMOTE_USER ? RewriteEngine On #RewriteCond %{LA-U:REMOTE_USER} ...
0
votes
0answers
71 views

Squid NTLM authentication started to fail

I have a squid server authenticating against a Win2k3 AD. The authentication is failing since today and I'm sure it is something on the windows side because on the linux machine there were no ...
0
votes
0answers
50 views

[cntlm]: How to configure cntlm for multiple users?

I configure cntlm for one user and it works well (firefox, yum...) but I would like to configure cntlm for multiple users. The service cntlmd is active. # chkconfig --list cntlmd cntlmd ...
0
votes
0answers
41 views

Disable ‘Authentication Required’ login modal upon failed ntlm authentication on apache

I'm trying to disable the Authentication Required login modal that appears when the NTLM authentication fails and simply redirect the users to a login page.
0
votes
0answers
172 views

NTLM in Chrome not working

I'm writing a web app for my work's intranet. I'm using NTLM to authenticate users automatically. The server is running on a local domain, so myServer is really myServer.MyCompanyDomain.local. IE uses ...
0
votes
0answers
38 views

IIS 6.0 reverting to NTLM authorization

This is related to my other question here. We have a .net 2.0 app hosted in IIS 6 on two different servers (the second server was setup to troubleshoot this issue) these servers are on two different ...
0
votes
0answers
471 views

Cross-server NTLM authentication failing

I think this issue has less to do with software development and more to do with general network configuration, so I'm posting the question here initially. I have an MVC4 application hosted in IIS 7.5 ...
0
votes
0answers
177 views

Java HTTPClient Proxy Authentication

I need to setup a local dev environment behind an authenticated proxy. I'm using Squid as the proxy and have written a java program using Apache Java HTTP client to ensure I can connect outside of the ...
0
votes
0answers
236 views

Improving Windows Authentication performance on IIS

We're struggling with performance issues with a ASP.NET MVC site that is using Windows Authentication. Response time is very slow on the first request to the site when the user is being ...
0
votes
0answers
131 views

How to allow all users to be 'authenticated' by winbind

I'm facing a problem with the infamous NTLM authentication implemented on RHEL5.3 server using Samba (winbind). The problem is that we have a requirement to disable the authentication in a sense to ...
-2
votes
0answers
14 views

Windows Passthrough and Impersonation

Does pass-through authentication (under Windows and NTLM) use Impersonation method ? edit As I can see in log event, it is a real connection. Not a salad :)