NTLM (NT LAN Manager) is a suite of Microsoft security protocols that provides authentication, integrity, and confidentiality to users.

learn more… | top users | synonyms

19
votes
5answers
12k views

Why use Kerberos instead of NTLM in IIS?

This is something that I've never really been able to answer as well as I like: What is the real advantage of using Kerberos authentication in IIS instead of NTLM? I've seen a lot of people really ...
7
votes
6answers
27k views

How do you find out if Active Directory is using Kerberos or NTLM?

Is there a command line program you can use?
6
votes
3answers
6k views

apt-get through NTLM authenticated proxy

I must be missing something... I could swear I've done this before but I've torched the VM's that I was using previously. How do you get apt-get to authenticate through a proxy that only supports ...
6
votes
2answers
529 views

ntlm_auth - can login in AD with both old and new passwords

I have problem with AD and ntlm_auth. I use the following command, to query the AD server for checking the user existence: ntlm_auth --use-cached-creds --username=SOME_USER --password=SOME_PASS ...
5
votes
2answers
256 views

NetApp erroring with: STATUS_NOLOGON_WORKSTATION_TRUST_ACCOUNT

Since a sitewide upgrade to Windows 7 on desktop, I've started having a problem with virus checking. Specifically - when doing a rename operation on a (filer hosted) CIFS share. The virus checker ...
5
votes
1answer
164 views

“Anonymous Logon” vs “NTLM V1” What to disable?

Working on getting rid of NTLM V1 logins all together in the AD environment; found lot of events, almost all of them from the user "Anonymous Logon"(4624 events) other 1(4624 events) percent coming ...
5
votes
2answers
2k views

Password Authentication Fails - NTLMv2

Environment: Windows 2000 sp4 EDIT: Domain Controller with no trust setup with the Win2008 Server Windows XP machines Windows 2008 Server Netapp NAS Problem: We have a shared folder that resides ...
5
votes
3answers
6k views

How do I log authentication attempts with samba?

I have users authenticating with squid (NTLM) to an Active Directory server using Samba 3.5.4 and I'd like to log users' login attempts. I'd like a line showing something like: TIMESTAMP ...
4
votes
1answer
2k views

How can I inspect why Active Directory can't use kerberos and fallsback to NTLM?

I have been trying to get squid running with kerberos auth for a few days but I'm in some trouble. The problem has been asked and replied many times on both the squid-users list and on the web, I have ...
4
votes
2answers
3k views

Why is squid breaking kerberos/NTLM auth?

I'm using squid 2.6.22 (Centos 5 Default) as a proxy. Squid seems to break the authentication process for web pages when they require NTLM or Kerberos Auth. I tested with sharepoint 2007 and tried all ...
3
votes
5answers
6k views

Implications of allowing Windows clients to use NTLMv1?

I have a web application that I'd like to authenticate to using pass-through NTLM for SSO. There is a problem, however, in that NTLMv2 apparently will not work in this scenario (without the ...
3
votes
4answers
12k views

How can I check if my IIS site is using NTLM or Kerberos?

How can I check if my IIS site is using NTLM or Kerberos? And how can I change authentication from Kerberos to NTLM? I'm using IIS 7.5 and I couldn't find any answer to this question, can help me a ...
3
votes
4answers
16k views

Which ports are needed for NTLM (Windows Authentication) to connect to SQL Server?

I've got SQL server running on a machine which is not in a domain, and which is not operating in mixed mode (it's running with "Windows Authentication"). I'm trying to connect to it from a Linux web ...
3
votes
3answers
2k views

Risks involved in setting up Kerberos authentication for WSS Reporting Services

We have an established Intranet based on WSS with two front ends and a database. Currently all authentication is NTLM. We have installed Reporting Services In Integration Mode. RS works as long as ...
3
votes
1answer
153 views

Why deploy Kerberos for Exchange 2010 SP1 RU3?

The first version of Exchange 2010 to support Kerberos is SP1 RU3. It does this through the RollAlternateServiceAccountCredential.ps1 commandlet. Besides implementing "better" security, does this ...
3
votes
1answer
3k views

Avoiding 401 response for each request using NTLM

We have here an ASP.NET 3.5 application using NTLM based Windows authentication. The system runs on a private network that is actually distributed over different geographic places (connected via VPN). ...
3
votes
2answers
3k views

NTLM with cURL returns 401

Goal: connecting to an Exchange server (EWS) Method: cURL Problem: Cannot get authenticated (NTLM), request returns 401.1 There seems to be an old, well documented 2 issue that started with cURL's ...
3
votes
1answer
1k views

All client browsers repeatedly asking for NTLM authentication when running through local proxy server

All client browsers repeatedly asking for NTLM authentication when running through local proxy server. When pointing browsers through the local proxy to the internet, some but not all clients are ...
3
votes
1answer
183 views

Does IIS NTLM/Kerberos authentication still work with an offline domain controller?

We have multiple IIS instances spread across remote regional branches. Each IIS instance (v.7.5) is running the same application and authenticates its users with Integrated Authentication (NTLM in the ...
2
votes
1answer
3k views

Squid proxy authentication - most painless way

Ok, the title says it all, really. The end goal is to implement proxy-authentication for end users. Users' systems are mostly (95%) windows-based, the proxy is a Debian Lenny running squid 2.7. I've ...
2
votes
6answers
15k views

How to investigate windows network lockouts related to Outlook Exchange Server authentication?

I am an end-user, not an IT professional. Unfortunately my corporate resources cannot solve this problem. I am looking for some advice to give them. I've been account locked on our corporate network ...
2
votes
1answer
3k views

Apache2::AuthenNTLM connects to Domain controller but does not authenticate

I have an Apache 2.2 server running Apache2::AuthenNTLM. I have successfully Apache2::AuthenNTLM configured it to the point that it connects to the domain controller. However, valid username / ...
2
votes
1answer
140 views

rules for usernames in windows domain

I'm working on a app that uses Jespa to do transparent SSO. I'm using the NtlmSecurityProvider. In my code, when I get the username looks like this: "DOMAINNAME\username" e.g. <% ...
2
votes
1answer
1k views

Users of Intranet site on IIS7.5 prompted for username/password

I have an intrasite from a third-party that we just transitioned from IIS 6 on Windows 2003 to a Windows 2008 R2 server with IIS 7.5. On the old system, the user would connect ot the website and be ...
2
votes
2answers
1k views

Optional NTLM authentication in Apache

I have a site set up to authenticate users using NTLM in Apache on Linux using perl's Apache2::AuthenNTLM module. This works great when I require the authentication, but I want this to bypass the ...
2
votes
4answers
610 views

Web based remote administration of Windows user accounts? [closed]

We're looking for a simple web based admin tool to allow trusted users to create windows user accounts via a web based interface. It should also give regular users the ability to change their ...
2
votes
2answers
623 views

IE supplies wrong username for NTLM Proxy Auth

We have a managed proxy based on Squid, using NTLM "fakeauth" authentication. The system has been running well for over a year. My issue lies in the client I believe. Yesterday, a specific user on a ...
2
votes
1answer
415 views

Windows service running as network service - how does it authenticate? Breaking change in W2K8?

A Windows service running as "Network Service" talks to services on other machines (here: SQL Server and Analysis Services), using Windows authentication. For authentication, we have to grant ...
2
votes
3answers
19k views

Squid, NTLM, Windows 7 and IE8

I'm running Squid 2.7-stable4, Samba 3 and the Windows 7 RC with IE8. I have NTLM authentication setup on my squid proxy server and it works fine for every combination of browser and Windows ...
2
votes
4answers
10k views

Authentication issues using NTLM, SSL, and SharePoint

I am currently experiencing problems with authentication on a SharePoint site. Routinely, user accounts(only one or so at a time) will be locked out and they will get 401 unauthorized errors. The ...
2
votes
2answers
745 views

One computer cannot authenticate to TFS or Exchange

I have several computers... only one of which cannot authenticate to either my exchange or TFS server. (2 of the computers are at my home trying to connect to our exchange/tfs server at work, one of ...
2
votes
3answers
443 views

Access internally hosted IIS with Windows authentication from Internet

I have .NET web application running on IIS behind the firewall. Application is using Windows authentication (NTLM) to authenticate users. I need to make this application accessible from Internet so ...
2
votes
1answer
719 views

Single Sign-on for Intranet WordPress using OpenID (or OAuth), IIS, Integrated Windows Authentication, Active Directory?

Is it possible to have single sign-on for intranet WordPress sites by using OpenID (or OAuth), IIS, Integrated Windows Authentication, Active Directory? I'd like to have Active Directory users ...
2
votes
1answer
861 views

Can you change Windows 7 NTML settings to be more like Windows XP?

Our organisation officially only supports Windows XP and IE6. I do like progress, so I installed Windows 7 anyway. Most of our internal applications work fine, but whenever I need to go through our ...
2
votes
2answers
284 views

Can I set up Samba shares that are authenticated against a domain *without* being joined to a domain?

I'd like to create a Samba server with some shares that have access controlled via accounts on the domain, but without joining the machine to the domain? Is this possible?
2
votes
1answer
360 views

How to configure NTLM security on Apache http server on windows?

How to configure NTLM security on Apache http server on windows? Abdul khaliq
2
votes
2answers
1k views

Apache mod_auth_kerb asking 2 authentication

I've configured Apache to use mod_auth_kerberos. So far everything is working nicely for client thats connected to Active Directory and have their browser to ntlm enabled. When clients are not in the ...
2
votes
2answers
3k views

Weird IIS with Windows Authentication + IE problem

I have a website running on IIS and using Windows Authentication. All users that are configured to get access to the site are form a AD domain (not local users). In the properties of a Website, I have ...
2
votes
0answers
115 views

NTLM authen not available after installing MS Exchange 2013

After installing MS Exchange Server 2013 the SMTP service is running. However when telnetting the host I get 'AUTH' after 'EHLO', rather than 'AUTH NTLM'. I have checked off "integrated Windows ...
2
votes
0answers
672 views

Squid Logs NTLM usernames only for certain requests

Currently I have squid 3.2 setup with NTLM authentication and LDAP Group pulls. I also have MySar running to pull the reports. It seems that the way the logging works is by passing them twice, one to ...
2
votes
2answers
409 views

NTLM Authorization using Apache NameBased VirtualHosts over SSL

I have a development environment that is fronted via an Apache server. This apache server requires SSL and Centrify-enabled NTLM authentication/authorization with the AD backend, using group access to ...
2
votes
1answer
933 views

Apache configuration to make NTLM authentication work through a Proxy

I'm running an application server behind an Apache proxy with the following sort of thing in my Apache config: ProxyPass /app http://myapplication:8080/myapp ProxyPassReverse /app ...
1
vote
4answers
619 views

openvpn as two factor network entry point integrated to AD

I'm looking to deploy openvpn as a linux RAS server (rather than site-to-site) and i'd like to use two factor authentication, specifically the use of ssl certificates and passwords tied into an ntlm ...
1
vote
4answers
3k views

Can we have Linked Servers when using NTLM?

I don't have access to the Active Directory settings, nor do I have access to change anything on the linked server. From everything I've read, it seems like this means I cannot use Kerberos - which ...
1
vote
1answer
364 views

Squid Proxy and AD auth generating errors on Squid startup

I need some advice with an error i am getting when trying to start Squid which has integrated NTLM / AD auth setup. heres the back story: I've followed this guide word for word on the setup, ...
1
vote
1answer
309 views

IIS 7.5 selectively overwrites my error response page

Using Windows 2008r2, IIS 7.5, I have an application using Windows Integrated Authentication (WWW-Authenticate: NTLM, Negotiate). In my ASP.NET MVC code, I am overwriting the IIS error page ...
1
vote
3answers
1k views

How to ensure machine is “Kerberos Domain” joined?

i've been having issues where calls to the LogonUser Windows API function is falling back to NTLM authentication, rather than using the preferred, default, Kerberos authentication. Researching the ...
1
vote
1answer
627 views

IIS6/NTLM : very slow authentication with user from other domain

I have a WSS 3.0 website hosted on IIS6. It's fully configured for NTLM only. It is hosted in domain A. When users from domain A attempt to access the website, it works fine. Now we are in the ...
1
vote
1answer
598 views

SMTP Relay via MS Exchange

I am trying to pragmatically send e-mail to external user with Exchange. Now I know if Relay is not Enabled in Exchange Server then e-mail relay will not work. Now, if I send e-mail from my Outlook ...
1
vote
1answer
257 views

Configure Apache to forward requests to proxy with NTLM2 authentication

I'm trying to call a REST API over the internet using SoapUI but I'm behind a corporate firewall that uses NTLM2 authentication which is not supported by SoapUI. Is it possible to run a local Apache ...