Questions tagged [ntlm]
NTLM (NT LAN Manager) is a suite of Microsoft security protocols that provides authentication, integrity, and confidentiality to users.
0
votes
3answers
32 views
IIS NTLM authentication prompting for passwords on alternate DNS name
We have an existing server with HTTPS set up and an certificate signed by an internal custom CA cert.
It runs an app which uses windows authentication
e.g. https://internalserver
We browse to this ...
0
votes
2answers
53 views
Office365 NTLM authentication
Can I authenticate credentials with Office365 based on NTLMv2.
Microsoft describes on Authentication and EWS in Exchange that clients can authenticate with Exchange based on NTLM, but My program ...
2
votes
1answer
43 views
Joining workstations to the domain as a member of Protected Users group (Delegation vs User Rights)
Implementing "Protected Users" and coming across this problem that I couldn't find a solution to anywhere. Cannot join computers to the domain with delegation permissions. Instead "Add workstation to ...
-2
votes
2answers
25 views
How to identify that the protocol is using by AD DC is Kerberous?
I have created a local environment as follows:-
DC:- Windows server 2008<br>
Client:- Windows 7<br>
Domain:- januapp.local
Now I read on somewhere that, the DC uses two types of Protocol ...
2
votes
1answer
230 views
IIS and HttpListener (.NET) with windows authentication
I have a question about Windows authentication with IIS and HttpListener
I have the following setup (All installed in same Windows 8.1 box. No outside communication). All requests are sent as http://...
1
vote
0answers
21 views
Is there a way to have password-less SQL server login for another user without kerberos enabled?
I am connecting to SQL server with JDBC.
I am able to use Integrated authentication with JDBC to connect to a SQL Server 2016 instance as the current logged in user, and I did not have to supply a ...
0
votes
1answer
144 views
npm install behind one proxy but got Http Error=407 (Forefront TMG requires authorization)
The operating system is MacOS, and already set up http(s) proxy inside the Network Preferences, but always failed to install any packages when running npm install (npm is one package installer for ...
1
vote
0answers
157 views
Squid as transparent proxy to tunnel all connections under Windows
There's this app Joplin that can't connect to the internet on a corporate machine which lives on Active Directory and connects to the internet through HTTP and a NTLM proxy.
The problem is that you ...
0
votes
0answers
88 views
Searching for a reverse proxy doing NTLM Auth against backend
I have an application which needs to access a webservice secured by ntlm auth.
My application is not able to do ntlm auth and there is no way that the backend offers other auth methods.
I thought ...
1
vote
1answer
596 views
Authenticate NTLM at reverse proxy in front of unauthenticated web servers
I have several Linux HTTP servers setup with no authentication required to access the web content. I would like for my Windows users to be able to access these sites with pass-through authentication.
...
0
votes
1answer
277 views
NTLM with squid
I am new to Squid proxy and need help in setting up NTLM authentication.
I checked so many resources on the web but did not find exact steps to get my work done
Since I have no background on proxy/...
0
votes
0answers
36 views
Failed to download file from IIS virtual folder - 401 (unauthorized)
I'm hitting 401 (unauthorized) when trying to download file from IIS virtual folder. The folder is restricted to local machine username. The authentication is done by NTLM protocol.
The weird part ...
0
votes
0answers
185 views
Bypass DOMAIN\user needed on ntlm window login
I have configured in our support service (glpi) the option of authentication via ntlm for computers and users that are in the domain (samba4 ADDC). About that, everything okay. :D
Followed tutorial: ...
0
votes
1answer
1k views
Auditing NTLM authentication on Domain Controllers: which GPO?
We are wanting to turn on NTLM authentication auditing to gather further details on some clients trying to authenticate using NTLM to the domain/DCs. Specifically we want to enable:
Network ...
1
vote
1answer
267 views
Does Windows prevent automatic NTLM authentication when the SMB server is located on a different subnet?
I have a Samba server[1] on my network with a share configured[2] to allow access for my Windows logon user.
I can access the share from the Windows 10 machine that hosts the SMB server VM without ...
1
vote
2answers
905 views
Looking for a lightweight NTLM HTTP proxy server
For some testing, I am looking for an NTLM HTTP proxy server. The server should authenticate the clients, not delegate that authentication to an upstream "real" NTLM proxy server (like "NTLMAPS" or "...
0
votes
1answer
2k views
Cannot RDP into Windows Server 2016: 0x80090302
I am attempting to RDP into multple Windows Server 2016 VMs with no success. It is joined to a domain and I am using a domain account.
The error I see is on the servers is Event ID 4625:
An account ...
0
votes
1answer
144 views
500 server error on after turning anon auth off and NTLM on
I'm pretty sure this is a permissions issue but can't seem to track down where at.
We have a local intranet site that is running on IIS 6.1 and running PHP. We turned on NTLM on so we can pull user-...
0
votes
1answer
420 views
NTLM Unknown username or bad password on Windows Server 2016
I've been receiving the following error(attached file) in my event log lately. So i'm trying to figure out how did this Ip(Source Netword Address) manage to authentication the login details.
I only ...
0
votes
1answer
654 views
How do you enable ntlm v3 on windows server 2008 on IIS?
My boss wants me to enable NTLM v3 on IIS on my Windows 2008 server instance.
How do I do that? Googling it is very non-conclusive.
1
vote
1answer
282 views
IIS Site Losing Ability to Authenticate With NTLM
We are having a recurring issue with one of our servers that I am not sure how to troubleshoot. The server is used to host an instance of Microsoft TFS and every few weeks Windows Authentication ...
0
votes
1answer
258 views
Windows NTLM: who is trying to check against the domain
I have a very awkward situation. I want to find the application and/or IP address attempting to break in.
We have a WEB server, running IIS 7 on a 2008R2 domain. We are (still) using NTLM.
...
1
vote
1answer
1k views
LmCompatibilityLevel to be applied to client, domain controller or both?
I'd like to apply LmCompatibilityLevel = 5 to my domain but I am not sure if this is to be applied to all clients (via GPO), domain controllers only or to both. I am a little confused as the TechNet ...
2
votes
3answers
6k views
How to stop NTLM v1 authentication from being accepted on a Windows VM environment?
My scenario is that I have a website set up via IIS in Windows Server 2012 R2 Standard using Windows Authentication which has been detected as vulnerable to an NTLMv1 attack and so I am looking to ...
0
votes
2answers
1k views
Force anonymous authentication to use NTLM v2 rather than NTLM v1?
I already started changing my applications that use NTLM v1 in the authentication for NTLM v2.
I still have several event IDs in my DCs that show sessiom NULL with anonymous accounts. after ...
1
vote
1answer
4k views
AUTH NTLM Authentication Format
I am a student worker in Enterprise Systems at the university I attend. We are in the process of converting to a new version of Exchange. We are attempting to use telnet to track messages in our test ...
0
votes
1answer
1k views
Setting up NTLM/Kerberos authentication for IIS 8, Server 2012 Workgroup
I need the following.
My Server 2012 with IIS 8 installed is in a workgroup.
Workstations are in a domain called 'hello.local'
I need for users in the domain 'hello.local', to be authenticated ...
1
vote
0answers
55 views
NTLM Authentication fails once a week for only one user
I assist with running a small AD domain with around 40 members.
For just one of those members, every wednesday at 12pm exactly, authentication will fail when they try to browse to the company intranet ...
1
vote
2answers
469 views
Why is only the first request to an NTLM authenticating proxy challenged and how do subsequent requests through the proxy get authenticated?
I am trying to develop a network tunnel that can traverse NTLM authenticating proxies. As part of that I am investigating how NTLM auth works. My test setup has WinGate proxy on one Windows box ...
0
votes
2answers
2k views
How to use nginx to proxy to a host requiring NTLM authentication?
Basically the same issue as How to use nginx to proxy to a host requiring authentication? but this time using NTLM authentication. Unfortunately the company IIS doesn't accept basic authentication.
I ...
1
vote
0answers
919 views
Setup a proxy server using Windows Authentication (NTLM)?
I want to setup a proxy server using Windows authentication (formally NTLM), I know that there are better protocols that could be use (Digest, etc.). I've been struggling to find information on how to ...
0
votes
0answers
452 views
How to access remote user name in nginx?
Please help, I have a RoR application running on RedHat 6.6 with Nginx as webserver and Passenger as application server. Now i need to implement SSO with windows authentication, i.e if a user has ...
1
vote
0answers
325 views
How to set “Negotiate Seal” in NTLMSSP_AUTH?
not sure if this is right stackexchange site to ask this, but here it goes.
I have 2 servers (win 2003 and 2012) trying to do NTLM authentication with a UNIX box (with apache web server) with the ...
1
vote
1answer
2k views
Determine usage of UPN for logon inside MS AD forest / domain
maybe somebody can give me a hint on this.
I am evaluating the prerequisites for changing all (human) user's UPN in a large Microsoft AD environment to the recommended MS format (aligned with the ...
1
vote
0answers
106 views
NTLM authentication not working following server reboot
I have IIS 6.1 on Windows Server 2008 SP1. There is one web application which has only Windows Authentication enabled. This has just one provider: NTLM.
When I works, it works fine - until the server ...
1
vote
1answer
2k views
Vagrant behind NTLM proxy on windows - guest unable to connect to the host proxy
I'm on a Windows machine behind a corporate NTLM proxy and I need to vagrant up a VM from the given Vagrantfile.
I've read a few things on this topic:
http://runefs.com/2014/11/28/setting-up-vagrant-...
0
votes
1answer
358 views
Exchange 2007 RPC over HTTPS, basic auth, password prompt bypassed by clicking 'need password'.. desired behavior?
I can't handle the incessant password prompting anymore..
Our Outlook installations prompt for a password after the comps wake from sleep and/or when changing between wired/wireless. Outlook DOES ...
2
votes
0answers
467 views
haproxy anonymous frontend, authorized backend with NTLM
Need to provide an anonymous readonly access to an svn repository
AFAIK, haproxy cannot auth on backend by itself.
There's a working configuration for haproxy with basic auth. How to migrate it to ...
1
vote
1answer
483 views
Apache NTLM not authenicating domain username/password.
I have a centos box and I am trying to setup NTLM authenication for apache. I have the linux box on the AD domain already and able to get user and group info using the wbinfo command.
I have the ...
1
vote
1answer
220 views
Why is IIS asking for NTLM over and over
When running a website localy on IIS every request requires NTLM authentication over again.
When running on server it's not as bad, but still requests more than once for a batch of requests all used ...
37
votes
4answers
117k views
RDP error “The function requested is not supported” after enabling NLA
I'm trying to RDP into one of my servers, which as Network Level Authentication Enabled as well as NTLMv2 being forced. This worked fine until the server had to reboot for updates. Now, I cannot RDP ...
3
votes
1answer
1k views
NTLM on a Load Balanced Environment
We have a Netscaler VPX that load balances HTTP requests to 3 IIS services on 3 Windows servers. Authentication is set to "Windows Authentication" but because our environment isn't set up for Kerberos ...
1
vote
3answers
1k views
Why Squid ntlm_auth works only when “cache_effective_group root”
I have Debian 8 Jessie with Samba configured as AD member server.
Samba+Winbind works perfectly: I can create shares and assign rights for AD users; getent passwd shows both local and AD users, etc.
...
0
votes
1answer
791 views
How to resolve 401 Unauthorized failures on intranet pages with IIS and Active Directory
I'm attempting allow/restrict website intranet users access based on Active Directory permissions.
I thought we'd reached our objective (authentication without domain sign-on prompt) until I ...
2
votes
1answer
1k views
RDP client error - An authentication error has occured (0x609)
I have a computer named ws24 (192.168.1.168) and another named srvPPassTest2.
I have written a program running on ws24 that is an "RDP proxy". It accepts connections from RDP clients on port 7070 (...
1
vote
0answers
191 views
Squid authentication helpers
I set up squid with authentication helper following along the line the guide here
http://www.freesoftwaremagazine.com/articles/authentication_with_squid
the only difference is that my users together ...
3
votes
0answers
3k views
Unable to configure CNTLM
I am setting up a proxy server on my linux system using CNTLM. I have edited the cntlm.conf file and made the following changes-
#
# Cntlm Authentication Proxy Configuration
#
# NOTE: all values ...
2
votes
1answer
6k views
How to decode traffic as NTLM protocol in Wireshark?
I'm trying to debug NTLM authentication issue. One of my ideas was to capture the network traffic and look thougth it. In my case NTLM authentication is going over non-stardart port (6901). Of course, ...
0
votes
1answer
803 views
Active Directory / Freeradius / ntlm_auth / mail attribute
I am currently configuring a linux server with Freeradius to have our clients authenticate against our Active Directory for our WiFi-network.
The goal is to have our users use the e-mail address that ...
5
votes
3answers
20k views
Check Primary Authentication Protocol for Active Directory (NTLM or Kerberos?) [duplicate]
How can I check, from a client machine (in Global Group)(also is local admin), whether the domain controller is authenticating my login request to the domain using NTLM or Kerberos?
I know that ...
