NTLM (NT LAN Manager) is a suite of Microsoft security protocols that provides authentication, integrity, and confidentiality to users.

learn more… | top users | synonyms

3
votes
1answer
573 views

Does IIS NTLM/Kerberos authentication still work with an offline domain controller?

We have multiple IIS instances spread across remote regional branches. Each IIS instance (v.7.5) is running the same application and authenticates its users with Integrated Authentication (NTLM in the ...
2
votes
1answer
1k views

Apache mod_auth_kerb asking 2 authentication

I've configured Apache to use mod_auth_kerberos. So far everything is working nicely for client thats connected to Active Directory and have their browser to NTLM enabled. When clients are not in the ...
1
vote
1answer
20 views

Why is IIS asking for NTLM over and over

When running a website localy on IIS every request requires NTLM authentication over again. When running on server it's not as bad, but still requests more than once for a batch of requests all used ...
1
vote
1answer
101 views

NTLM on a Load Balanced Environment

We have a Netscaler VPX that load balances HTTP requests to 3 IIS services on 3 Windows servers. Authentication is set to "Windows Authentication" but because our environment isn't set up for Kerberos ...
1
vote
1answer
1k views

How to decode traffic as NTLM protocol in Wireshark?

I'm trying to debug NTLM authentication issue. One of my ideas was to capture the network traffic and look thougth it. In my case NTLM authentication is going over non-stardart port (6901). Of course, ...
0
votes
1answer
110 views

Vagrant behind NTLM proxy on windows - guest unable to connect to the host proxy

I'm on a Windows machine behind a corporate NTLM proxy and I need to vagrant up a VM from the given Vagrantfile. I've read a few things on this topic: ...
0
votes
1answer
35 views

Exchange 2007 RPC over HTTPS, basic auth, password prompt bypassed by clicking 'need password'.. desired behavior?

I can't handle the incessant password prompting anymore.. Our Outlook installations prompt for a password after the comps wake from sleep and/or when changing between wired/wireless. Outlook DOES ...
0
votes
1answer
157 views

Why Squid ntlm_auth works only when “cache_effective_group root”

I have Debian 8 Jessie with Samba configured as AD member server. Samba+Winbind works perfectly: I can create shares and assign rights for AD users; getent passwd shows both local and AD users, etc. ...
0
votes
1answer
252 views

Active Directory / Freeradius / ntlm_auth / mail attribute

I am currently configuring a linux server with Freeradius to have our clients authenticate against our Active Directory for our WiFi-network. The goal is to have our users use the e-mail address that ...
0
votes
1answer
335 views

IIS 6.0 App Pool under domain service account unable to use NTLM authentication

I'm trying to move an old internal web site into its own app pool run by its own service account, so that I can get finer-grained control over its permissions and such. The site is set up to use ...
0
votes
1answer
970 views

SOCKS proxy server chained to NTLM protected HTTP proxy on Linux

Our application can connect to Internet only directly or via SOCKS proxy. Unfortunately we can only access the Internet via HTTP proxy protected by NTLM authentication. Is there any SOCKS server that ...
0
votes
1answer
267 views

ASP.NET MVC app on IIS7 with WebForms content is throwing NTLM authenticate box

I have an ASP.NET MVC app that also contains some WebForms content (for SSRS ReportViewer). This is deployed to IIS7 and the MVC pages of the app work fine, but when I try to browse to the aspx page I ...
4
votes
0answers
306 views

Configure ntlm_auth for offline operations

We currently have a NAC server set up to authenticate against a Samba4 AD using the ntlm_auth utility and would like to make it more tolerant to network outages. Currently, when the NAC loses ...
2
votes
0answers
3k views

What does AuthForwardServerList do?

A bit of context, we have several Windows 7 clients connected to an LDAP backed Samba PDC. We also have a Zimbra 8 server that authenticates off the same LDAP. When users logon to the Windows 7 ...
2
votes
0answers
400 views

NTLM authen not available after installing MS Exchange 2013

After installing MS Exchange Server 2013 the SMTP service is running. However when telnetting the host I get 'AUTH' after 'EHLO', rather than 'AUTH NTLM'. I have checked off "integrated Windows ...
2
votes
0answers
1k views

Squid Logs NTLM usernames only for certain requests

Currently I have squid 3.2 setup with NTLM authentication and LDAP Group pulls. I also have MySar running to pull the reports. It seems that the way the logging works is by passing them twice, one to ...
1
vote
0answers
23 views

How to set “Negotiate Seal” in NTLMSSP_AUTH?

not sure if this is right stackexchange site to ask this, but here it goes. I have 2 servers (win 2003 and 2012) trying to do NTLM authentication with a UNIX box (with apache web server) with the ...
1
vote
0answers
27 views

NTLM authentication not working following server reboot

I have IIS 6.1 on Windows Server 2008 SP1. There is one web application which has only Windows Authentication enabled. This has just one provider: NTLM. When I works, it works fine - until the server ...
1
vote
0answers
75 views

haproxy anonymous frontend, authorized backend with NTLM

Need to provide an anonymous readonly access to an svn repository AFAIK, haproxy cannot auth on backend by itself. There's a working configuration for haproxy with basic auth. How to migrate it to ...
1
vote
0answers
29 views

Apache NTLM not authenicating domain username/password.

I have a centos box and I am trying to setup NTLM authenication for apache. I have the linux box on the AD domain already and able to get user and group info using the wbinfo command. I have the ...
1
vote
0answers
69 views

Squid authentication helpers

I set up squid with authentication helper following along the line the guide here http://www.freesoftwaremagazine.com/articles/authentication_with_squid the only difference is that my users together ...
1
vote
0answers
471 views

Unable to configure CNTLM

I am setting up a proxy server on my linux system using CNTLM. I have edited the cntlm.conf file and made the following changes- # # Cntlm Authentication Proxy Configuration # # NOTE: all values ...
1
vote
0answers
155 views

SSRS Returning 401 Unauthorised Error when calling web service

We have two web servers that call the SSRS service to query the reports held there. Both servers are set up identically but while one works the other returns a 401 unauthorised exception when trying ...
1
vote
0answers
124 views

Each request for a NTLM authenticated page served by an Apache webservice is doing CAN transactions

I develop a TYPO3 application which runs in a companies intranet. It is build on a CENTOS 6 platform with a MySQL database (5.1.16) and an Apache webserver (Version 2.2.15). For authentication we use ...
1
vote
0answers
416 views

Apache authentication - Exclude paths from <Directory> defined authentication

I currently use the following directives to apply NTLM authentication to our Drupal installation, but I need to exclude some paths. I've tried adding directives for the specific paths I want to ...
1
vote
0answers
141 views

Proxy hosted in IIS with NTLM, how can I enable single sign on?

I have a forward proxy hosted in IIS with windows authentication enabled. Firefox is set up to use the proxy. Problem is, I don't know what to do with network.automatic-ntlm-auth.trusted-uris. ...
1
vote
0answers
131 views

NTLM Only working from some clients

I have a Windows test app, using .net4, which consumes a remote asp.net web service hosted under IIS6. The client app has hard-coded Windows credentials which it passes to the IIS box. The IIS box ...
1
vote
0answers
578 views

IIS7, Kerberos, sometimes no response from browser to 401

SharePoint 2010 hosted on IIS7, Kerberos enabled. Clients log on through Citrix on several terminal servers. Kerberos is working on several clients, so SPN's are defined correctly, but on some clients ...
1
vote
0answers
207 views

IIS logging one 401.5 response, followed by a 200 response

We are using pass-through authentication on our intranet. The clients are running Google Chrome Frame in IE and the server is running IIS 7. In the IIS logs, for every request we are seeing a 401.5 ...
1
vote
0answers
217 views

Transparent Proxy For Individual Web Apps?

At work, I perform automated testing of our front-end web apps that use Active Directory for authentication. One tool (Sahi) uses a local proxy to go between the web app and the user's browser, to ...
1
vote
0answers
424 views

LSA Cache Entries - NTLM versus Negotiate Windows Authentication Providers

We have a situation, due to a recent employee name change, where the HttpContext.Current.User.Identity.Name property of an ASP.NET web application resolves to the old username. This has been ...
1
vote
0answers
275 views

Remote access to IIS 5.1 via NTLM

I'm trying to configure remote access to IIS 5.1 web server on a virtual xp machine. The web server is used to expose a ASP.NET web service. I want to access the web service using Java client by ...
1
vote
0answers
660 views

How do I tell if IIS allows for authentication to downgrade from Kerberos to NTLM v1?

It is my understanding that authenticating to IIS with Kerberos will, by default, allow for the authentication to downgrade to NTLM v2 or NTLM v1 if the client cannot handle Kerberos. In my case I ...
0
votes
0answers
22 views

NTLM Authentication fails on SSRS 2008 R2 across trusted domains

I've got 2 domains that are fully trusted. SSRS is on domain1 and my users are on domain2. Can reach SSRS from D2 without an issue, and use my D1 credentials to authenticate. In SSRS\Reports I ...
0
votes
0answers
40 views

Squid3 + HTTPS Authentication issue

I've successfully setup Squid3 to work as a transparent proxy for HTTP and HTTPS, installed the CA on the machines. Everything works OK, but there is this corporation site I work for where Squid does ...
0
votes
0answers
79 views

stunnel with ntlm Proxy-Authenticate: NTLM authorization request rejected

My stunnel setup doesn't work through a http proxy with ntlm authentication, the stunnel returns an error message: Proxy-Authenticate: NTLM authorization request rejected Whereas the wireshark ...
0
votes
0answers
10 views

Squid : different acl for different kind of authentication

I am using a 2.7 Squid stable 9 with NTLM authentication. But with some tools (like adobe cloud), the connection use Basic auth param, which is not configured in my squid.conf. So I would like to ...
0
votes
0answers
40 views

Squid with NTLM auth behind Netscaler

my task is implementing a squid proxy that allow all my authenticated (windows AD) internal users to surf internet without any credential request (pop-up). Plus, i created two squid nodes and put ...
0
votes
0answers
48 views

Is it possible to bypass NTLM authentication for server applications?

I have a client who has an on-site legacy system. The system is secured with NTLM authentication, I believe it is running within IIS. I also have an application running on AWS, also Windows Server, ...
0
votes
0answers
49 views

using FTP over proxy Squid with NTLM auth

I have a Squid 2.7 STABLE9 proxy on a Debian and I have allow 80, 443 & 21 port to my user (user have windows PC). When a user go throught my proxy, he have to authenticate himself with NTLM ...
0
votes
0answers
284 views

RDP error “The function requested is not supported” after enabling NLA

I'm trying to RDP into one of my servers, which as Network Level Authentication Enabled as well as NTLMv2 being forced. This worked fine until the server had to reboot for updates. Now, I cannot RDP ...
0
votes
0answers
260 views

Office 2013 and squid whith NTLM authenticate doesn't work

I have a Squid 2.7STABLE9 on a Debian and everything works except the office 2013 pack : Word, Excel, Outlook ... For all, I made a rule on Squid conf as it explaine here and it look like it doesn't ...
0
votes
0answers
302 views

How to configure Apache NTLM in order to get REMOTE_USER?

No matter where I put %{REMOTE_USER}, I got NULL. Can you please tell me how I can configure NTLM Apache in order to get REMOTE_USER ? RewriteEngine On #RewriteCond %{LA-U:REMOTE_USER} ...
0
votes
0answers
1k views

Cross-server NTLM authentication failing

I think this issue has less to do with software development and more to do with general network configuration, so I'm posting the question here initially. I have an MVC4 application hosted in IIS 7.5 ...