Questions tagged [ntlm]

NTLM (NT LAN Manager) is a suite of Microsoft security protocols that provides authentication, integrity, and confidentiality to users.

Filter by
Sorted by
Tagged with
0 votes
1 answer
253 views

How to configure samba+winbind with AD redundancy?

I work for a company that offers a software solution for network management. Part of the solution is proxy authentication. An already legacy option in our software, is to configure a proxy to use NTLM ...
EdgarLemke's user avatar
0 votes
1 answer
290 views

Is there any working Apache module to implement NTLM on Ubuntu Server

I am trying to configure NTLM authentication for an internal site running on Apache/Ubuntu Jammy. I was able to implement LDAP authentication. Still, I want to make the login/auth process smooth as ...
NaniK's user avatar
  • 11
1 vote
0 answers
250 views

Windows Remote Desktop defaulting to NTLM

The issue: I have a Virtual Host - VHost.domian.com. When I try to connect from my laptop - Laptop.domain.com - it seems to be trying to use NTLM for authentication and not Kerberos. Note: My laptop ...
Johnny Heisler's user avatar
-1 votes
1 answer
442 views

NTLM Authentication Failing once Domain Controller was upgraded to Windows Server 2016

NTLM Authentication Failing once Domain Controller was upgraded to Windows Server 2016. Application server is running Server 2012 R2. We have one domain controller left on 2012, NTLM works fine on ...
Clint Schauff's user avatar
0 votes
0 answers
234 views

Standalone Samba 4.13 server with LDAP backend: Windows 10 clients fails (Windows 7 is OK)

I have a running Samba v4.13 standalone server (no Active Directory nor Samba Domain) on Debian using an LDAP passdb backend (ldapsam) which was working just fine with Windows 7 SMB client but does ...
CDuv's user avatar
  • 242
0 votes
0 answers
431 views

IIS - getting 401 authentication for HTTPS but not for HTTP

I'm having a strange problem with IIS 10 setup on a Windows server 2022. When accessing the site with http, it loads fine without issues. However, with https, I get a login prompt. Website has ...
Venu Gopal's user avatar
1 vote
1 answer
559 views

GPO settings for Kerberos authentication

My customer requires SSO in Windows domain for my Linux-based web/application server. Server have its own keytab installed and it all does work fine. Windows domain (EXAMPLE.ORG) have a service user ...
kab00m's user avatar
  • 508
0 votes
1 answer
664 views

HTTP 401.2 Error when using Azure Application Gateway

I have an ASP.Net site hosted in IIS 10 on Windows Server 2019 DataCenter in Azure. This site has only Windows Authentication enabled. When I access the site directly (http://mysite-backend.example....
JohnLBevan's user avatar
  • 1,278
1 vote
0 answers
603 views

Web application - Integrated windows authentication issues with layer 4 load balancer

Evening folks We currently have an internally developed web application that is hosted on IIS using Windows Authentication. Our users use Edge in IEMode to connect to our web app - currently they don’...
Ahimsa's user avatar
  • 11
0 votes
0 answers
186 views

azure devops self-managed agent installation on Ubuntu

my environment is Ubuntu 20.04, after running ./config.cmd command and adding my correct details I get the following error: System.PlatformNotSupportedException: NTLM authentication is not possible ...
Shnbook's user avatar
  • 11
2 votes
0 answers
980 views

Single Sign on (SSO) not working on Firefox

Could it be that Firefox doesn’t support all windows NTLM SSO scenarios on a Sharepoint Site via adfs? Login attempts into Sharepoint site just gets stuck on the login page and nothing happens ...
john zuh's user avatar
1 vote
1 answer
1k views

How to restrict NTLM V1 to select servers?

The domain I'm working on currently has NTLM V1 enabled for Domain Controllers. I've done some tests and discovered that only a few application servers require NTLM V1. Unfortunately I have to allow ...
Prox's user avatar
  • 111
0 votes
0 answers
516 views

Validating credentials in PowerShell wont use Kerberos

In reality I'm debugging a C# app but since the same command is possible in PowerShell I'm trying there. I am trying to validate user accounts using the following in PowerShell: > Add-Type -...
AmazingRealist's user avatar
1 vote
0 answers
1k views

Apache reverse proxy to site using NTLM authentication fails with mod_rewrite but not mod_proxy

We have a reverse proxy server in front of an Exchange server and would like to lock down more of the paths. Minimized examples: Fails (but works for all pages that don't require authentication): <...
melds's user avatar
  • 231
3 votes
0 answers
304 views

Active Directory: how to get rid of NTLM when we have remote users (road warriors)?

I want to disable NTLM completely. I don't want password hash to be stored in memory because of pass-the-hash attack (people don't have SeDebugPrivilege but anyway NTLM is not good) But people connect ...
user996142's user avatar
0 votes
1 answer
1k views

Not defined state of the `Network security: Restrict NTLM: NTLM authentication in this domain` GPO

Is NTLM by default disabled on domain controllers with Windows Server 2019? My current tests show that the GPO Network security: Restrict NTLM: NTLM authentication in this domain does not work as ...
bahrep's user avatar
  • 687
0 votes
1 answer
364 views

Can any local domain controller authenticate NTLM or do they pass it on to the primary domain controller?

When a Windows server needs to authenticate a domain user with NTLM it asks the local domain controller. My question is whether that domain controller (assuming the user is in that domain) can process ...
Cody Konior's user avatar
0 votes
1 answer
1k views

Linux servers stopped being able to use PowerShell remoting over WinRM using NTLM on remote Windows Servers

So basically we have a team with Linux servers running PowerShell Core (a mix of 6 and 7) that have to execute remote Windows PowerShell commands on Windows servers. Problem is, the team never got ...
codewario's user avatar
  • 548
2 votes
0 answers
395 views

Powershell session from CentOS 7 to Windows Server 2019

I want to open a Powershell session from CentOS 7 to a Windows Server 2019 using a domain account but I can't get it working. What I've done so far: Enabled WinRM on Windows (verified connection from ...
Michael's user avatar
  • 345
1 vote
3 answers
4k views

Clear cached authentication for network share

Context: I map a cifs share in windows using NTLMv2 authentication, as the legacy server doesn't support kerberos. I am not prompted for login: net use S: \\server.domain.com\share /persistent:yes The ...
Cpt.Whale's user avatar
  • 412
0 votes
1 answer
3k views

SMB Connection to non-domain server

I have a service that needs to establish a SMB connection to several servers. There is no issue with domain-joined computers using a domain account with access. However, I need it to connect to a few ...
LT.Son's user avatar
  • 23
0 votes
1 answer
267 views

Problems accessing shared folder in Windows clustered file Server 2008 R2

Firs of all I need to apologise for my poor technical and language skills. I will try to describe a problem as detail as I can. There is subnet 172.16.10.0/24 In this subnet I have 3 servers 1 storage ...
John Constantine's user avatar
3 votes
0 answers
2k views

How to run kinit as root before automounting mutiuser cifs mounts?

Goal I'm setting up multi-user CIFS mounts in an Active Directory environment under CentOS 8.2. The storage server supports SMB3.1.1 protocol. Prerequisites I could easily integrate the system to the ...
MauvaisJoueur's user avatar
1 vote
0 answers
2k views

Remote Desktop to W10 with NTLM Disabled

We recently disable NTLM on our DCs (Default Domain Controllers Policy - Restrict NTLM: Deny all The problem is when some (not all) Windows 10 workgroup clients (connected with VPN) try to open a ...
Stratos Develekos's user avatar
5 votes
2 answers
845 views

Hardening a file-serving Windows Server 2019 instance

I'm in the process of re-configuring and securing a server for the small company that I work for. We use it to store design files and other data with Autodesk Vault. It's running on a VPS from a ...
Felix Eriksson's user avatar
1 vote
1 answer
5k views

Default for lmcompatibilitylevel if it doesn't exist

If the registry item lmcompatibilitylevel in HKLM\System\CurrentControlSet\Control\Lsa does not exist, when I look at the local policy Network Security:LAN Mananager authentication level, it shows '...
jfbradfo's user avatar
0 votes
1 answer
4k views

NTLM authentication and non-domain joined computers accessing shares on a domain

I have a non-domain joined Win 10 computer which accesses shares on a domain joined Win 2016 server. At first connection with one of these shares, the Win 10 client is challenged and I supply domain ...
Chris Driver's user avatar
0 votes
0 answers
922 views

IIS / PHP not passing (or passing incorrect) NTLM user information

I am currently migrating PHP applications from IIS 8.0 to IIS 10.0. NTLM/Windows Authentication has been installed through Server Manager, the scripts are running on PHP7.1, are using exactly the same ...
Janno's user avatar
  • 51
1 vote
1 answer
2k views

Where is the documentation of Apache's mod_auth_sspi module?

I'm trying to configure the mod_auth_sspi module on my Apache server. I've found a few example configurations, but I can't find any proper documentation. Does anyone know where I can find that?
Mathew Alden's user avatar
1 vote
0 answers
2k views

Prevent Anonymous logons on windows-server 2016

I can't figure out how to entirely disable anonymous logon on Windows Server 2016 which is not a domain controller (regular instance). With the settings currently set I'm truly surprised to see such ...
Vega4's user avatar
  • 131
3 votes
0 answers
2k views

Getting Authentication Negotiate instead of NTLM while consuming SOAP WCF Service in Net.Core 2.1

I was trying to connect to a WCF SOAP service using NTLM Authentication Scheme, I succeeded at it when using .Net Framework 4.x but when I try to consume the same service in .NET Core 2.1 it fails (...
dennisbot's user avatar
  • 131
0 votes
0 answers
913 views

Why is NTLM authentication appearing as NT AUTHORITY\NETWORK SERVICE instead of machine account

I have an ASP.NET application whose app pool is running as Network Service which makes a request to SSRS running on a separate server to retrieve a report. The report displays the username (using ...
user221592's user avatar
1 vote
2 answers
3k views

NTLM authentication module mod_auth_ntlm_winbind for Apache2 omits domain name

I have an Apache2 instance running on Ubuntu 18.04 in local intranet and I want to configure NTLM authentication on the instance. I have installed and configured mod_auth_ntlm_winbind usage for user....
SniperJoe95's user avatar
2 votes
0 answers
284 views

Is it possible to limit SSRS authentication to Kerberos only?

We have an instance of SSRS (SQL Server Reporting Services) which uses Kerberos Constrained Delegation to fetch data for its reports from SQL Server on behalf of its users. For this purpose, SSRS was ...
Cat Mucius's user avatar
0 votes
3 answers
9k views

IIS NTLM authentication prompting for passwords on alternate DNS name

We have an existing server with HTTPS set up and an certificate signed by an internal custom CA cert. It runs an app which uses windows authentication e.g. https://internalserver We browse to this ...
Orion Edwards's user avatar
1 vote
2 answers
5k views

Office365 NTLM authentication

Can I authenticate credentials with Office365 based on NTLMv2. Microsoft describes on Authentication and EWS in Exchange that clients can authenticate with Exchange based on NTLM, but My program ...
John Smag's user avatar
2 votes
2 answers
1k views

Joining workstations to the domain as a member of Protected Users group (Delegation vs User Rights)

Implementing "Protected Users" and coming across this problem that I couldn't find a solution to anywhere. Cannot join computers to the domain with delegation permissions. Instead "Add workstation to ...
Igor Akula's user avatar
-2 votes
2 answers
102 views

How to identify that the protocol is using by AD DC is Kerberous?

I have created a local environment as follows:- DC:- Windows server 2008<br> Client:- Windows 7<br> Domain:- januapp.local Now I read on somewhere that, the DC uses two types of Protocol ...
Utkarsh Agrawal's user avatar
2 votes
1 answer
2k views

IIS and HttpListener (.NET) with windows authentication

I have a question about Windows authentication with IIS and HttpListener I have the following setup (All installed in same Windows 8.1 box. No outside communication). All requests are sent as http://...
DineshNS's user avatar
1 vote
0 answers
224 views

Is there a way to have password-less SQL server login for another user without kerberos enabled?

I am connecting to SQL server with JDBC. I am able to use Integrated authentication with JDBC to connect to a SQL Server 2016 instance as the current logged in user, and I did not have to supply a ...
Nicholas DiPiazza's user avatar
1 vote
1 answer
6k views

npm install behind one proxy but got Http Error=407 (Forefront TMG requires authorization)

The operating system is MacOS, and already set up http(s) proxy inside the Network Preferences, but always failed to install any packages when running npm install (npm is one package installer for ...
Sphinx's user avatar
  • 161
1 vote
0 answers
706 views

Squid as transparent proxy to tunnel all connections under Windows

There's this app Joplin that can't connect to the internet on a corporate machine which lives on Active Directory and connects to the internet through HTTP and a NTLM proxy. The problem is that you ...
microwth's user avatar
  • 111
2 votes
1 answer
6k views

Authenticate NTLM at reverse proxy in front of unauthenticated web servers

I have several Linux HTTP servers setup with no authentication required to access the web content. I would like for my Windows users to be able to access these sites with pass-through authentication. ...
getsauce's user avatar
  • 101
0 votes
1 answer
1k views

NTLM with squid

I am new to Squid proxy and need help in setting up NTLM authentication. I checked so many resources on the web but did not find exact steps to get my work done Since I have no background on proxy/...
amit joshi's user avatar
1 vote
1 answer
6k views

Auditing NTLM authentication on Domain Controllers: which GPO?

We are wanting to turn on NTLM authentication auditing to gather further details on some clients trying to authenticate using NTLM to the domain/DCs. Specifically we want to enable: Network ...
TheCleaner's user avatar
  • 32.7k
1 vote
1 answer
1k views

Does Windows prevent automatic NTLM authentication when the SMB server is located on a different subnet?

I have a Samba server[1] on my network with a share configured[2] to allow access for my Windows logon user. I can access the share from the Windows 10 machine that hosts the SMB server VM without ...
Arne's user avatar
  • 11
7 votes
2 answers
7k views

Looking for a lightweight NTLM HTTP proxy server

For some testing, I am looking for an NTLM HTTP proxy server. The server should authenticate the clients, not delegate that authentication to an upstream "real" NTLM proxy server (like "NTLMAPS" or "...
Rich's user avatar
  • 714
0 votes
1 answer
6k views

Cannot RDP into Windows Server 2016: 0x80090302

I am attempting to RDP into multple Windows Server 2016 VMs with no success. It is joined to a domain and I am using a domain account. The error I see is on the servers is Event ID 4625: An account ...
samule's user avatar
  • 11
0 votes
1 answer
561 views

500 server error on after turning anon auth off and NTLM on

I'm pretty sure this is a permissions issue but can't seem to track down where at. We have a local intranet site that is running on IIS 6.1 and running PHP. We turned on NTLM on so we can pull user-...
Matthewpulpfree's user avatar
-1 votes
1 answer
2k views

NTLM Unknown username or bad password on Windows Server 2016

I've been receiving the following error(attached file) in my event log lately. So i'm trying to figure out how did this Ip(Source Netword Address) manage to authentication the login details. I only ...
chosenOne Thabs's user avatar