Questions tagged [ntlm]
NTLM (NT LAN Manager) is a suite of Microsoft security protocols that provides authentication, integrity, and confidentiality to users.
1
vote
0answers
12 views
Is there a way to have password-less SQL server login for another user without kerberos enabled?
I am connecting to SQL server with JDBC.
I am able to use Integrated authentication with JDBC to connect to a SQL Server 2016 instance as the current logged in user, and I did not have to supply a ...
0
votes
0answers
15 views
How to find the origin of event 4625 in Windows Server 2008 R2 Security log?
We have Windows Server 2008 R2, to which something presumably is trying to bruteforce password for Administrator and Администратор accounts.
There are a lot of 4625 events in Security log, like this:
...
0
votes
1answer
21 views
npm install behind one proxy but got Http Error=407 (Forefront TMG requires authorization)
The operating system is MacOS, and already set up http(s) proxy inside the Network Preferences, but always failed to install any packages when running npm install (npm is one package installer for ...
0
votes
0answers
40 views
Squid as transparent proxy to tunnel all connections under Windows
There's this app Joplin that can't connect to the internet on a corporate machine which lives on Active Directory and connects to the internet through HTTP and a NTLM proxy.
The problem is that you ...
0
votes
0answers
11 views
Can deactivating NTLMv1 impact my applications?
Suppose I have a server and an AD. The AD accepts both NTLMv1 and NTLMv2 protocols. The server is configured to use NTLMv1 in order to authenticate.
+--------------+ +--------------+
| ...
0
votes
0answers
60 views
Searching for a reverse proxy doing NTLM Auth against backend
I have an application which needs to access a webservice secured by ntlm auth.
My application is not able to do ntlm auth and there is no way that the backend offers other auth methods.
I thought ...
0
votes
0answers
40 views
Multiple different LM hashes per NT hash
i was charged with testing the security of our domain, and i opened the NTDS in order to check if LM hashes are in use, i used two methods
1. dcsync
2. WPR (a windows software)
in both cases i see ...
0
votes
0answers
13 views
AD doesn't return baseSessionKey when authentificate via NTLM
I have a question about NTLM authentication in a Active Directory.
So, I try to retranslate NTLM messages from client to AD to be aware, that AD can authenticate this client.
All steps work fine,
1)...
1
vote
1answer
347 views
Authenticate NTLM at reverse proxy in front of unauthenticated web servers
I have several Linux HTTP servers setup with no authentication required to access the web content. I would like for my Windows users to be able to access these sites with pass-through authentication.
...
0
votes
1answer
213 views
NTLM with squid
I am new to Squid proxy and need help in setting up NTLM authentication.
I checked so many resources on the web but did not find exact steps to get my work done
Since I have no background on proxy/...
0
votes
0answers
31 views
Failed to download file from IIS virtual folder - 401 (unauthorized)
I'm hitting 401 (unauthorized) when trying to download file from IIS virtual folder. The folder is restricted to local machine username. The authentication is done by NTLM protocol.
The weird part ...
0
votes
0answers
136 views
Bypass DOMAIN\user needed on ntlm window login
I have configured in our support service (glpi) the option of authentication via ntlm for computers and users that are in the domain (samba4 ADDC). About that, everything okay. :D
Followed tutorial: ...
0
votes
1answer
703 views
Auditing NTLM authentication on Domain Controllers: which GPO?
We are wanting to turn on NTLM authentication auditing to gather further details on some clients trying to authenticate using NTLM to the domain/DCs. Specifically we want to enable:
Network ...
0
votes
0answers
231 views
How to replace URL in page link when using Stream Proxy in Nginx for the NTLM
I am trying to setup the reverse proxy using Nginx for a IIS server.
However, caused by the server is using Windows Authentication (NTLM), therefore I am using the steam module in Nginx, reference by ...
1
vote
1answer
205 views
Does Windows prevent automatic NTLM authentication when the SMB server is located on a different subnet?
I have a Samba server[1] on my network with a share configured[2] to allow access for my Windows logon user.
I can access the share from the Windows 10 machine that hosts the SMB server VM without ...
0
votes
1answer
626 views
Looking for a lightweight NTLM HTTP proxy server
For some testing, I am looking for an NTLM HTTP proxy server. The server should authenticate the clients, not delegate that authentication to an upstream "real" NTLM proxy server (like "NTLMAPS" or "...
0
votes
1answer
2k views
Cannot RDP into Windows Server 2016: 0x80090302
I am attempting to RDP into multple Windows Server 2016 VMs with no success. It is joined to a domain and I am using a domain account.
The error I see is on the servers is Event ID 4625:
An account ...
0
votes
1answer
81 views
500 server error on after turning anon auth off and NTLM on
I'm pretty sure this is a permissions issue but can't seem to track down where at.
We have a local intranet site that is running on IIS 6.1 and running PHP. We turned on NTLM on so we can pull user-...
0
votes
1answer
374 views
NTLM Unknown username or bad password on Windows Server 2016
I've been receiving the following error(attached file) in my event log lately. So i'm trying to figure out how did this Ip(Source Netword Address) manage to authentication the login details.
I only ...
0
votes
1answer
516 views
How do you enable ntlm v3 on windows server 2008 on IIS?
My boss wants me to enable NTLM v3 on IIS on my Windows 2008 server instance.
How do I do that? Googling it is very non-conclusive.
0
votes
1answer
242 views
IIS Site Losing Ability to Authenticate With NTLM
We are having a recurring issue with one of our servers that I am not sure how to troubleshoot. The server is used to host an instance of Microsoft TFS and every few weeks Windows Authentication ...
0
votes
1answer
173 views
Windows NTLM: who is trying to check against the domain
I have a very awkward situation. I want to find the application and/or IP address attempting to break in.
We have a WEB server, running IIS 7 on a 2008R2 domain. We are (still) using NTLM.
...
1
vote
1answer
1k views
LmCompatibilityLevel to be applied to client, domain controller or both?
I'd like to apply LmCompatibilityLevel = 5 to my domain but I am not sure if this is to be applied to all clients (via GPO), domain controllers only or to both. I am a little confused as the TechNet ...
2
votes
3answers
5k views
How to stop NTLM v1 authentication from being accepted on a Windows VM environment?
My scenario is that I have a website set up via IIS in Windows Server 2012 R2 Standard using Windows Authentication which has been detected as vulnerable to an NTLMv1 attack and so I am looking to ...
0
votes
2answers
1k views
Force anonymous authentication to use NTLM v2 rather than NTLM v1?
I already started changing my applications that use NTLM v1 in the authentication for NTLM v2.
I still have several event IDs in my DCs that show sessiom NULL with anonymous accounts. after ...
1
vote
1answer
3k views
AUTH NTLM Authentication Format
I am a student worker in Enterprise Systems at the university I attend. We are in the process of converting to a new version of Exchange. We are attempting to use telnet to track messages in our test ...
0
votes
1answer
965 views
Setting up NTLM/Kerberos authentication for IIS 8, Server 2012 Workgroup
I need the following.
My Server 2012 with IIS 8 installed is in a workgroup.
Workstations are in a domain called 'hello.local'
I need for users in the domain 'hello.local', to be authenticated ...
1
vote
0answers
49 views
NTLM Authentication fails once a week for only one user
I assist with running a small AD domain with around 40 members.
For just one of those members, every wednesday at 12pm exactly, authentication will fail when they try to browse to the company intranet ...
1
vote
2answers
410 views
Why is only the first request to an NTLM authenticating proxy challenged and how do subsequent requests through the proxy get authenticated?
I am trying to develop a network tunnel that can traverse NTLM authenticating proxies. As part of that I am investigating how NTLM auth works. My test setup has WinGate proxy on one Windows box ...
0
votes
2answers
2k views
How to use nginx to proxy to a host requiring NTLM authentication?
Basically the same issue as How to use nginx to proxy to a host requiring authentication? but this time using NTLM authentication. Unfortunately the company IIS doesn't accept basic authentication.
I ...
1
vote
0answers
838 views
Setup a proxy server using Windows Authentication (NTLM)?
I want to setup a proxy server using Windows authentication (formally NTLM), I know that there are better protocols that could be use (Digest, etc.). I've been struggling to find information on how to ...
0
votes
0answers
394 views
How to access remote user name in nginx?
Please help, I have a RoR application running on RedHat 6.6 with Nginx as webserver and Passenger as application server. Now i need to implement SSO with windows authentication, i.e if a user has ...
1
vote
0answers
286 views
How to set “Negotiate Seal” in NTLMSSP_AUTH?
not sure if this is right stackexchange site to ask this, but here it goes.
I have 2 servers (win 2003 and 2012) trying to do NTLM authentication with a UNIX box (with apache web server) with the ...
1
vote
1answer
1k views
Determine usage of UPN for logon inside MS AD forest / domain
maybe somebody can give me a hint on this.
I am evaluating the prerequisites for changing all (human) user's UPN in a large Microsoft AD environment to the recommended MS format (aligned with the ...
1
vote
0answers
93 views
NTLM authentication not working following server reboot
I have IIS 6.1 on Windows Server 2008 SP1. There is one web application which has only Windows Authentication enabled. This has just one provider: NTLM.
When I works, it works fine - until the server ...
1
vote
1answer
2k views
Vagrant behind NTLM proxy on windows - guest unable to connect to the host proxy
I'm on a Windows machine behind a corporate NTLM proxy and I need to vagrant up a VM from the given Vagrantfile.
I've read a few things on this topic:
http://runefs.com/2014/11/28/setting-up-vagrant-...
0
votes
1answer
323 views
Exchange 2007 RPC over HTTPS, basic auth, password prompt bypassed by clicking 'need password'.. desired behavior?
I can't handle the incessant password prompting anymore..
Our Outlook installations prompt for a password after the comps wake from sleep and/or when changing between wired/wireless. Outlook DOES ...
2
votes
0answers
432 views
haproxy anonymous frontend, authorized backend with NTLM
Need to provide an anonymous readonly access to an svn repository
AFAIK, haproxy cannot auth on backend by itself.
There's a working configuration for haproxy with basic auth. How to migrate it to ...
1
vote
1answer
446 views
Apache NTLM not authenicating domain username/password.
I have a centos box and I am trying to setup NTLM authenication for apache. I have the linux box on the AD domain already and able to get user and group info using the wbinfo command.
I have the ...
1
vote
1answer
155 views
Why is IIS asking for NTLM over and over
When running a website localy on IIS every request requires NTLM authentication over again.
When running on server it's not as bad, but still requests more than once for a batch of requests all used ...
37
votes
4answers
112k views
RDP error “The function requested is not supported” after enabling NLA
I'm trying to RDP into one of my servers, which as Network Level Authentication Enabled as well as NTLMv2 being forced. This worked fine until the server had to reboot for updates. Now, I cannot RDP ...
3
votes
1answer
1k views
NTLM on a Load Balanced Environment
We have a Netscaler VPX that load balances HTTP requests to 3 IIS services on 3 Windows servers. Authentication is set to "Windows Authentication" but because our environment isn't set up for Kerberos ...
1
vote
3answers
972 views
Why Squid ntlm_auth works only when “cache_effective_group root”
I have Debian 8 Jessie with Samba configured as AD member server.
Samba+Winbind works perfectly: I can create shares and assign rights for AD users; getent passwd shows both local and AD users, etc.
...
0
votes
1answer
770 views
How to resolve 401 Unauthorized failures on intranet pages with IIS and Active Directory
I'm attempting allow/restrict website intranet users access based on Active Directory permissions.
I thought we'd reached our objective (authentication without domain sign-on prompt) until I ...
2
votes
1answer
1k views
RDP client error - An authentication error has occured (0x609)
I have a computer named ws24 (192.168.1.168) and another named srvPPassTest2.
I have written a program running on ws24 that is an "RDP proxy". It accepts connections from RDP clients on port 7070 (...
1
vote
0answers
184 views
Squid authentication helpers
I set up squid with authentication helper following along the line the guide here
http://www.freesoftwaremagazine.com/articles/authentication_with_squid
the only difference is that my users together ...
3
votes
0answers
3k views
Unable to configure CNTLM
I am setting up a proxy server on my linux system using CNTLM. I have edited the cntlm.conf file and made the following changes-
#
# Cntlm Authentication Proxy Configuration
#
# NOTE: all values ...
2
votes
1answer
5k views
How to decode traffic as NTLM protocol in Wireshark?
I'm trying to debug NTLM authentication issue. One of my ideas was to capture the network traffic and look thougth it. In my case NTLM authentication is going over non-stardart port (6901). Of course, ...
0
votes
1answer
734 views
Active Directory / Freeradius / ntlm_auth / mail attribute
I am currently configuring a linux server with Freeradius to have our clients authenticate against our Active Directory for our WiFi-network.
The goal is to have our users use the e-mail address that ...
5
votes
3answers
18k views
Check Primary Authentication Protocol for Active Directory (NTLM or Kerberos?) [duplicate]
How can I check, from a client machine (in Global Group)(also is local admin), whether the domain controller is authenticating my login request to the domain using NTLM or Kerberos?
I know that ...
