Questions tagged [ntlm]
NTLM (NT LAN Manager) is a suite of Microsoft security protocols that provides authentication, integrity, and confidentiality to users.
187
questions
0
votes
1
answer
253
views
How to configure samba+winbind with AD redundancy?
I work for a company that offers a software solution for network management. Part of the solution is proxy authentication. An already legacy option in our software, is to configure a proxy to use NTLM ...
0
votes
1
answer
290
views
Is there any working Apache module to implement NTLM on Ubuntu Server
I am trying to configure NTLM authentication for an internal site running on Apache/Ubuntu Jammy. I was able to implement LDAP authentication. Still, I want to make the login/auth process smooth as ...
- 11
1
vote
0
answers
250
views
Windows Remote Desktop defaulting to NTLM
The issue:
I have a Virtual Host - VHost.domian.com. When I try to connect from my laptop - Laptop.domain.com - it seems to be trying to use NTLM for authentication and not Kerberos. Note: My laptop ...
-1
votes
1
answer
442
views
NTLM Authentication Failing once Domain Controller was upgraded to Windows Server 2016
NTLM Authentication Failing once Domain Controller was upgraded to Windows Server 2016. Application server is running Server 2012 R2. We have one domain controller left on 2012, NTLM works fine on ...
0
votes
0
answers
234
views
Standalone Samba 4.13 server with LDAP backend: Windows 10 clients fails (Windows 7 is OK)
I have a running Samba v4.13 standalone server (no Active Directory nor Samba Domain) on Debian using an LDAP passdb backend (ldapsam) which was working just fine with Windows 7 SMB client but does ...
- 242
0
votes
0
answers
431
views
IIS - getting 401 authentication for HTTPS but not for HTTP
I'm having a strange problem with IIS 10 setup on a Windows server 2022. When accessing the site with http, it loads fine without issues. However, with https, I get a login prompt. Website has ...
1
vote
1
answer
559
views
GPO settings for Kerberos authentication
My customer requires SSO in Windows domain for my Linux-based web/application server. Server have its own keytab installed and it all does work fine. Windows domain (EXAMPLE.ORG) have a service user ...
- 508
0
votes
1
answer
664
views
HTTP 401.2 Error when using Azure Application Gateway
I have an ASP.Net site hosted in IIS 10 on Windows Server 2019 DataCenter in Azure. This site has only Windows Authentication enabled.
When I access the site directly (http://mysite-backend.example....
- 1,278
1
vote
0
answers
603
views
Web application - Integrated windows authentication issues with layer 4 load balancer
Evening folks
We currently have an internally developed web application that is hosted on IIS using Windows Authentication.
Our users use Edge in IEMode to connect to our web app - currently they don’...
- 11
0
votes
0
answers
186
views
azure devops self-managed agent installation on Ubuntu
my environment is Ubuntu 20.04, after running ./config.cmd command and adding my correct details
I get the following error:
System.PlatformNotSupportedException: NTLM authentication is not possible ...
- 11
2
votes
0
answers
980
views
Single Sign on (SSO) not working on Firefox
Could it be that Firefox doesn’t support all windows NTLM SSO scenarios on a Sharepoint Site via adfs? Login attempts into Sharepoint site just gets stuck on the login page and nothing happens ...
- 51
1
vote
1
answer
1k
views
How to restrict NTLM V1 to select servers?
The domain I'm working on currently has NTLM V1 enabled for Domain Controllers. I've done some tests and discovered that only a few application servers require NTLM V1. Unfortunately I have to allow ...
- 111
0
votes
0
answers
516
views
Validating credentials in PowerShell wont use Kerberos
In reality I'm debugging a C# app but since the same command is possible in PowerShell I'm trying there.
I am trying to validate user accounts using the following in PowerShell:
> Add-Type -...
1
vote
0
answers
1k
views
Apache reverse proxy to site using NTLM authentication fails with mod_rewrite but not mod_proxy
We have a reverse proxy server in front of an Exchange server and would like to lock down more of the paths. Minimized examples:
Fails (but works for all pages that don't require authentication):
<...
- 231
3
votes
0
answers
304
views
Active Directory: how to get rid of NTLM when we have remote users (road warriors)?
I want to disable NTLM completely. I don't want password hash to be stored in memory because of pass-the-hash attack (people don't have SeDebugPrivilege but anyway NTLM is not good)
But people connect ...
- 211
0
votes
1
answer
1k
views
Not defined state of the `Network security: Restrict NTLM: NTLM authentication in this domain` GPO
Is NTLM by default disabled on domain controllers with Windows Server 2019?
My current tests show that the GPO Network security: Restrict NTLM: NTLM authentication in this domain does not work as ...
- 687
0
votes
1
answer
364
views
Can any local domain controller authenticate NTLM or do they pass it on to the primary domain controller?
When a Windows server needs to authenticate a domain user with NTLM it asks the local domain controller.
My question is whether that domain controller (assuming the user is in that domain) can process ...
- 101
0
votes
1
answer
1k
views
Linux servers stopped being able to use PowerShell remoting over WinRM using NTLM on remote Windows Servers
So basically we have a team with Linux servers running PowerShell Core (a mix of 6 and 7) that have to execute remote Windows PowerShell commands on Windows servers. Problem is, the team never got ...
- 548
2
votes
0
answers
395
views
Powershell session from CentOS 7 to Windows Server 2019
I want to open a Powershell session from CentOS 7 to a Windows Server 2019 using a domain account but I can't get it working.
What I've done so far:
Enabled WinRM on Windows (verified connection from ...
- 345
1
vote
3
answers
4k
views
Clear cached authentication for network share
Context: I map a cifs share in windows using NTLMv2 authentication, as the legacy server doesn't support kerberos. I am not prompted for login:
net use S: \\server.domain.com\share /persistent:yes
The ...
- 412
0
votes
1
answer
3k
views
SMB Connection to non-domain server
I have a service that needs to establish a SMB connection to several servers. There is no issue with domain-joined computers using a domain account with access. However, I need it to connect to a few ...
- 23
0
votes
1
answer
267
views
Problems accessing shared folder in Windows clustered file Server 2008 R2
Firs of all I need to apologise for my poor technical and language skills.
I will try to describe a problem as detail as I can.
There is subnet 172.16.10.0/24
In this subnet I have 3 servers 1 storage ...
3
votes
0
answers
2k
views
How to run kinit as root before automounting mutiuser cifs mounts?
Goal
I'm setting up multi-user CIFS mounts in an Active Directory environment under CentOS 8.2. The storage server supports SMB3.1.1 protocol.
Prerequisites
I could easily integrate the system to the ...
1
vote
0
answers
2k
views
Remote Desktop to W10 with NTLM Disabled
We recently disable NTLM on our DCs (Default Domain Controllers Policy - Restrict NTLM: Deny all
The problem is when some (not all) Windows 10 workgroup clients (connected with VPN) try to open a ...
5
votes
2
answers
845
views
Hardening a file-serving Windows Server 2019 instance
I'm in the process of re-configuring and securing a server for the small company that I work for. We use it to store design files and other data with Autodesk Vault. It's running on a VPS from a ...
1
vote
1
answer
5k
views
Default for lmcompatibilitylevel if it doesn't exist
If the registry item lmcompatibilitylevel in HKLM\System\CurrentControlSet\Control\Lsa does not exist, when I look at the local policy Network Security:LAN Mananager authentication level, it shows '...
- 46
0
votes
1
answer
4k
views
NTLM authentication and non-domain joined computers accessing shares on a domain
I have a non-domain joined Win 10 computer which accesses shares on a domain joined Win 2016 server. At first connection with one of these shares, the Win 10 client is challenged and I supply domain ...
- 510
0
votes
0
answers
922
views
IIS / PHP not passing (or passing incorrect) NTLM user information
I am currently migrating PHP applications from IIS 8.0 to IIS 10.0. NTLM/Windows Authentication has been installed through Server Manager, the scripts are running on PHP7.1, are using exactly the same ...
- 51
1
vote
1
answer
2k
views
Where is the documentation of Apache's mod_auth_sspi module?
I'm trying to configure the mod_auth_sspi module on my Apache server. I've found a few example configurations, but I can't find any proper documentation. Does anyone know where I can find that?
- 267
1
vote
0
answers
2k
views
Prevent Anonymous logons on windows-server 2016
I can't figure out how to entirely disable anonymous logon on Windows Server 2016 which is not a domain controller (regular instance). With the settings currently set I'm truly surprised to see such ...
- 131
3
votes
0
answers
2k
views
Getting Authentication Negotiate instead of NTLM while consuming SOAP WCF Service in Net.Core 2.1
I was trying to connect to a WCF SOAP service using NTLM Authentication Scheme, I succeeded at it when using .Net Framework 4.x but when I try to consume the same service in .NET Core 2.1 it fails (...
- 131
0
votes
0
answers
913
views
Why is NTLM authentication appearing as NT AUTHORITY\NETWORK SERVICE instead of machine account
I have an ASP.NET application whose app pool is running as Network Service which makes a request to SSRS running on a separate server to retrieve a report. The report displays the username (using ...
- 101
1
vote
2
answers
3k
views
NTLM authentication module mod_auth_ntlm_winbind for Apache2 omits domain name
I have an Apache2 instance running on Ubuntu 18.04 in local intranet and I want to configure NTLM authentication on the instance. I have installed and configured mod_auth_ntlm_winbind usage for user....
- 31
2
votes
0
answers
284
views
Is it possible to limit SSRS authentication to Kerberos only?
We have an instance of SSRS (SQL Server Reporting Services) which uses Kerberos Constrained Delegation to fetch data for its reports from SQL Server on behalf of its users.
For this purpose, SSRS was ...
- 155
0
votes
3
answers
9k
views
IIS NTLM authentication prompting for passwords on alternate DNS name
We have an existing server with HTTPS set up and an certificate signed by an internal custom CA cert.
It runs an app which uses windows authentication
e.g. https://internalserver
We browse to this ...
- 202
1
vote
2
answers
5k
views
Office365 NTLM authentication
Can I authenticate credentials with Office365 based on NTLMv2.
Microsoft describes on Authentication and EWS in Exchange that clients can authenticate with Exchange based on NTLM, but My program ...
- 11
2
votes
2
answers
1k
views
Joining workstations to the domain as a member of Protected Users group (Delegation vs User Rights)
Implementing "Protected Users" and coming across this problem that I couldn't find a solution to anywhere. Cannot join computers to the domain with delegation permissions. Instead "Add workstation to ...
- 23
-2
votes
2
answers
102
views
How to identify that the protocol is using by AD DC is Kerberous?
I have created a local environment as follows:-
DC:- Windows server 2008<br>
Client:- Windows 7<br>
Domain:- januapp.local
Now I read on somewhere that, the DC uses two types of Protocol ...
2
votes
1
answer
2k
views
IIS and HttpListener (.NET) with windows authentication
I have a question about Windows authentication with IIS and HttpListener
I have the following setup (All installed in same Windows 8.1 box. No outside communication). All requests are sent as http://...
- 21
1
vote
0
answers
224
views
Is there a way to have password-less SQL server login for another user without kerberos enabled?
I am connecting to SQL server with JDBC.
I am able to use Integrated authentication with JDBC to connect to a SQL Server 2016 instance as the current logged in user, and I did not have to supply a ...
1
vote
1
answer
6k
views
npm install behind one proxy but got Http Error=407 (Forefront TMG requires authorization)
The operating system is MacOS, and already set up http(s) proxy inside the Network Preferences, but always failed to install any packages when running npm install (npm is one package installer for ...
- 161
1
vote
0
answers
706
views
Squid as transparent proxy to tunnel all connections under Windows
There's this app Joplin that can't connect to the internet on a corporate machine which lives on Active Directory and connects to the internet through HTTP and a NTLM proxy.
The problem is that you ...
- 111
2
votes
1
answer
6k
views
Authenticate NTLM at reverse proxy in front of unauthenticated web servers
I have several Linux HTTP servers setup with no authentication required to access the web content. I would like for my Windows users to be able to access these sites with pass-through authentication.
...
- 101
0
votes
1
answer
1k
views
NTLM with squid
I am new to Squid proxy and need help in setting up NTLM authentication.
I checked so many resources on the web but did not find exact steps to get my work done
Since I have no background on proxy/...
1
vote
1
answer
6k
views
Auditing NTLM authentication on Domain Controllers: which GPO?
We are wanting to turn on NTLM authentication auditing to gather further details on some clients trying to authenticate using NTLM to the domain/DCs. Specifically we want to enable:
Network ...
- 32.7k
1
vote
1
answer
1k
views
Does Windows prevent automatic NTLM authentication when the SMB server is located on a different subnet?
I have a Samba server[1] on my network with a share configured[2] to allow access for my Windows logon user.
I can access the share from the Windows 10 machine that hosts the SMB server VM without ...
- 11
7
votes
2
answers
7k
views
Looking for a lightweight NTLM HTTP proxy server
For some testing, I am looking for an NTLM HTTP proxy server. The server should authenticate the clients, not delegate that authentication to an upstream "real" NTLM proxy server (like "NTLMAPS" or "...
- 714
0
votes
1
answer
6k
views
Cannot RDP into Windows Server 2016: 0x80090302
I am attempting to RDP into multple Windows Server 2016 VMs with no success. It is joined to a domain and I am using a domain account.
The error I see is on the servers is Event ID 4625:
An account ...
- 11
0
votes
1
answer
561
views
500 server error on after turning anon auth off and NTLM on
I'm pretty sure this is a permissions issue but can't seem to track down where at.
We have a local intranet site that is running on IIS 6.1 and running PHP. We turned on NTLM on so we can pull user-...
-1
votes
1
answer
2k
views
NTLM Unknown username or bad password on Windows Server 2016
I've been receiving the following error(attached file) in my event log lately. So i'm trying to figure out how did this Ip(Source Netword Address) manage to authentication the login details.
I only ...
