Questions tagged [ntlm]

NTLM (NT LAN Manager) is a suite of Microsoft security protocols that provides authentication, integrity, and confidentiality to users.

Filter by
Sorted by
Tagged with
0 votes
0 answers
11 views

Cntlm installed on RHEL 7 and started, but it doesn't seem to listen

I have Cntlm installed on RHEL 7.9 from an .rpm file. After configuring it I tried it out with: curl --proxy http://127.0.0.1:3128 http://google.com and I get the error "curl: (7) Failed connect ...
user avatar
  • 121
0 votes
0 answers
77 views

Validating credentials in PowerShell wont use Kerberos

In reality I'm debugging a C# app but since the same command is possible in PowerShell I'm trying there. I am trying to validate user accounts using the following in PowerShell: > Add-Type -...
user avatar
1 vote
0 answers
166 views

Apache reverse proxy to site using NTLM authentication fails with mod_rewrite but not mod_proxy

We have a reverse proxy server in front of an Exchange server and would like to lock down more of the paths. Minimized examples: Fails (but works for all pages that don't require authentication): <...
user avatar
  • 221
3 votes
0 answers
93 views

Active Directory: how to get rid of NTLM when we have remote users (road warriors)?

I want to disable NTLM completely. I don't want password hash to be stored in memory because of pass-the-hash attack (people don't have SeDebugPrivilege but anyway NTLM is not good) But people connect ...
user avatar
0 votes
0 answers
28 views

Squid does not write into access.log with kerberos authentication

I finally managed to get squid with kerberos authentication and LDAP group checking to work. I am using squid 4.1, kerberos v5 and Linux Mint Cinnamon 20.1. Everything works fine, but I got a little ...
user avatar
  • 21
0 votes
1 answer
212 views

Not defined state of the `Network security: Restrict NTLM: NTLM authentication in this domain` GPO

Is NTLM by default disabled on domain controllers with Windows Server 2019? My current tests show that the GPO Network security: Restrict NTLM: NTLM authentication in this domain does not work as ...
user avatar
  • 664
0 votes
1 answer
87 views

Can any local domain controller authenticate NTLM or do they pass it on to the primary domain controller?

When a Windows server needs to authenticate a domain user with NTLM it asks the local domain controller. My question is whether that domain controller (assuming the user is in that domain) can process ...
user avatar
0 votes
0 answers
396 views

Linux servers stopped being able to use PowerShell remoting over WinRM using NTLM on remote Windows Servers

So basically we have a team with Linux servers running PowerShell Core (a mix of 6 and 7) that have to execute remote Windows PowerShell commands on Windows servers. Problem is, the team never got ...
user avatar
  • 548
1 vote
0 answers
196 views

Powershell session from CentOS 7 to Windows Server 2019

I want to open a Powershell session from CentOS 7 to a Windows Server 2019 using a domain account but I can't get it working. What I've done so far: Enabled WinRM on Windows (verified connection from ...
user avatar
  • 325
1 vote
2 answers
998 views

Clear cached authentication for network share

Context: I map a cifs share in windows using NTLMv2 authentication, as the legacy server doesn't support kerberos. I am not prompted for login: net use S: \\server.domain.com\share /persistent:yes The ...
user avatar
  • 297
0 votes
1 answer
875 views

SMB Connection to non-domain server

I have a service that needs to establish a SMB connection to several servers. There is no issue with domain-joined computers using a domain account with access. However, I need it to connect to a few ...
user avatar
  • 23
0 votes
1 answer
59 views

Problems accessing shared folder in Windows clustered file Server 2008 R2

Firs of all I need to apologise for my poor technical and language skills. I will try to describe a problem as detail as I can. There is subnet 172.16.10.0/24 In this subnet I have 3 servers 1 storage ...
user avatar
3 votes
0 answers
905 views

How to run kinit as root before automounting mutiuser cifs mounts?

Goal I'm setting up multi-user CIFS mounts in an Active Directory environment under CentOS 8.2. The storage server supports SMB3.1.1 protocol. Prerequisites I could easily integrate the system to the ...
user avatar
1 vote
0 answers
921 views

Remote Desktop to W10 with NTLM Disabled

We recently disable NTLM on our DCs (Default Domain Controllers Policy - Restrict NTLM: Deny all The problem is when some (not all) Windows 10 workgroup clients (connected with VPN) try to open a ...
user avatar
5 votes
2 answers
670 views

Hardening a file-serving Windows Server 2019 instance

I'm in the process of re-configuring and securing a server for the small company that I work for. We use it to store design files and other data with Autodesk Vault. It's running on a VPS from a ...
user avatar
1 vote
0 answers
2k views

Default for lmcompatibilitylevel if it doesn't exist

If the registry item lmcompatibilitylevel in HKLM\System\CurrentControlSet\Control\Lsa does not exist, when I look at the local policy Network Security:LAN Mananager authentication level, it shows '...
user avatar
1 vote
1 answer
2k views

NTLM authentication and non-domain joined computers accessing shares on a domain

I have a non-domain joined Win 10 computer which accesses shares on a domain joined Win 2016 server. At first connection with one of these shares, the Win 10 client is challenged and I supply domain ...
user avatar
0 votes
0 answers
577 views

IIS / PHP not passing (or passing incorrect) NTLM user information

I am currently migrating PHP applications from IIS 8.0 to IIS 10.0. NTLM/Windows Authentication has been installed through Server Manager, the scripts are running on PHP7.1, are using exactly the same ...
user avatar
  • 51
0 votes
1 answer
914 views

Where is the documentation of Apache's mod_auth_sspi module?

I'm trying to configure the mod_auth_sspi module on my Apache server. I've found a few example configurations, but I can't find any proper documentation. Does anyone know where I can find that?
user avatar
1 vote
0 answers
2k views

Prevent Anonymous logons on windows-server 2016

I can't figure out how to entirely disable anonymous logon on Windows Server 2016 which is not a domain controller (regular instance). With the settings currently set I'm truly surprised to see such ...
user avatar
  • 121
3 votes
0 answers
1k views

Getting Authentication Negotiate instead of NTLM while consuming SOAP WCF Service in Net.Core 2.1

I was trying to connect to a WCF SOAP service using NTLM Authentication Scheme, I succeeded at it when using .Net Framework 4.x but when I try to consume the same service in .NET Core 2.1 it fails (...
user avatar
  • 131
0 votes
0 answers
519 views

Why is NTLM authentication appearing as NT AUTHORITY\NETWORK SERVICE instead of machine account

I have an ASP.NET application whose app pool is running as Network Service which makes a request to SSRS running on a separate server to retrieve a report. The report displays the username (using ...
user avatar
1 vote
2 answers
2k views

NTLM authentication module mod_auth_ntlm_winbind for Apache2 omits domain name

I have an Apache2 instance running on Ubuntu 18.04 in local intranet and I want to configure NTLM authentication on the instance. I have installed and configured mod_auth_ntlm_winbind usage for user....
user avatar
2 votes
0 answers
237 views

Is it possible to limit SSRS authentication to Kerberos only?

We have an instance of SSRS (SQL Server Reporting Services) which uses Kerberos Constrained Delegation to fetch data for its reports from SQL Server on behalf of its users. For this purpose, SSRS was ...
user avatar
0 votes
3 answers
6k views

IIS NTLM authentication prompting for passwords on alternate DNS name

We have an existing server with HTTPS set up and an certificate signed by an internal custom CA cert. It runs an app which uses windows authentication e.g. https://internalserver We browse to this ...
user avatar
1 vote
2 answers
3k views

Office365 NTLM authentication

Can I authenticate credentials with Office365 based on NTLMv2. Microsoft describes on Authentication and EWS in Exchange that clients can authenticate with Exchange based on NTLM, but My program ...
user avatar
2 votes
1 answer
715 views

Joining workstations to the domain as a member of Protected Users group (Delegation vs User Rights)

Implementing "Protected Users" and coming across this problem that I couldn't find a solution to anywhere. Cannot join computers to the domain with delegation permissions. Instead "Add workstation to ...
user avatar
-2 votes
2 answers
52 views

How to identify that the protocol is using by AD DC is Kerberous?

I have created a local environment as follows:- DC:- Windows server 2008<br> Client:- Windows 7<br> Domain:- januapp.local Now I read on somewhere that, the DC uses two types of Protocol ...
user avatar
2 votes
1 answer
1k views

IIS and HttpListener (.NET) with windows authentication

I have a question about Windows authentication with IIS and HttpListener I have the following setup (All installed in same Windows 8.1 box. No outside communication). All requests are sent as http://...
user avatar
1 vote
0 answers
175 views

Is there a way to have password-less SQL server login for another user without kerberos enabled?

I am connecting to SQL server with JDBC. I am able to use Integrated authentication with JDBC to connect to a SQL Server 2016 instance as the current logged in user, and I did not have to supply a ...
user avatar
1 vote
1 answer
4k views

npm install behind one proxy but got Http Error=407 (Forefront TMG requires authorization)

The operating system is MacOS, and already set up http(s) proxy inside the Network Preferences, but always failed to install any packages when running npm install (npm is one package installer for ...
user avatar
  • 141
1 vote
0 answers
552 views

Squid as transparent proxy to tunnel all connections under Windows

There's this app Joplin that can't connect to the internet on a corporate machine which lives on Active Directory and connects to the internet through HTTP and a NTLM proxy. The problem is that you ...
user avatar
  • 111
1 vote
1 answer
4k views

Authenticate NTLM at reverse proxy in front of unauthenticated web servers

I have several Linux HTTP servers setup with no authentication required to access the web content. I would like for my Windows users to be able to access these sites with pass-through authentication. ...
user avatar
0 votes
1 answer
1k views

NTLM with squid

I am new to Squid proxy and need help in setting up NTLM authentication. I checked so many resources on the web but did not find exact steps to get my work done Since I have no background on proxy/...
user avatar
1 vote
1 answer
5k views

Auditing NTLM authentication on Domain Controllers: which GPO?

We are wanting to turn on NTLM authentication auditing to gather further details on some clients trying to authenticate using NTLM to the domain/DCs. Specifically we want to enable: Network ...
user avatar
  • 32.3k
1 vote
1 answer
818 views

Does Windows prevent automatic NTLM authentication when the SMB server is located on a different subnet?

I have a Samba server[1] on my network with a share configured[2] to allow access for my Windows logon user. I can access the share from the Windows 10 machine that hosts the SMB server VM without ...
user avatar
  • 11
6 votes
2 answers
5k views

Looking for a lightweight NTLM HTTP proxy server

For some testing, I am looking for an NTLM HTTP proxy server. The server should authenticate the clients, not delegate that authentication to an upstream "real" NTLM proxy server (like "NTLMAPS" or "...
user avatar
  • 576
0 votes
1 answer
5k views

Cannot RDP into Windows Server 2016: 0x80090302

I am attempting to RDP into multple Windows Server 2016 VMs with no success. It is joined to a domain and I am using a domain account. The error I see is on the servers is Event ID 4625: An account ...
user avatar
  • 11
0 votes
1 answer
437 views

500 server error on after turning anon auth off and NTLM on

I'm pretty sure this is a permissions issue but can't seem to track down where at. We have a local intranet site that is running on IIS 6.1 and running PHP. We turned on NTLM on so we can pull user-...
user avatar
-1 votes
1 answer
1k views

NTLM Unknown username or bad password on Windows Server 2016

I've been receiving the following error(attached file) in my event log lately. So i'm trying to figure out how did this Ip(Source Netword Address) manage to authentication the login details. I only ...
user avatar
0 votes
1 answer
2k views

How do you enable ntlm v3 on windows server 2008 on IIS?

My boss wants me to enable NTLM v3 on IIS on my Windows 2008 server instance. How do I do that? Googling it is very non-conclusive.
user avatar
1 vote
1 answer
469 views

IIS Site Losing Ability to Authenticate With NTLM

We are having a recurring issue with one of our servers that I am not sure how to troubleshoot. The server is used to host an instance of Microsoft TFS and every few weeks Windows Authentication ...
user avatar
  • 111
0 votes
1 answer
642 views

Windows NTLM: who is trying to check against the domain

I have a very awkward situation. I want to find the application and/or IP address attempting to break in. We have a WEB server, running IIS 7 on a 2008R2 domain. We are (still) using NTLM. ...
user avatar
  • 398
1 vote
1 answer
2k views

LmCompatibilityLevel to be applied to client, domain controller or both?

I'd like to apply LmCompatibilityLevel = 5 to my domain but I am not sure if this is to be applied to all clients (via GPO), domain controllers only or to both. I am a little confused as the TechNet ...
user avatar
2 votes
3 answers
11k views

How to stop NTLM v1 authentication from being accepted on a Windows VM environment?

My scenario is that I have a website set up via IIS in Windows Server 2012 R2 Standard using Windows Authentication which has been detected as vulnerable to an NTLMv1 attack and so I am looking to ...
user avatar
0 votes
2 answers
2k views

Force anonymous authentication to use NTLM v2 rather than NTLM v1?

I already started changing my applications that use NTLM v1 in the authentication for NTLM v2. I still have several event IDs in my DCs that show sessiom NULL with anonymous accounts. after ...
user avatar
2 votes
1 answer
9k views

AUTH NTLM Authentication Format

I am a student worker in Enterprise Systems at the university I attend. We are in the process of converting to a new version of Exchange. We are attempting to use telnet to track messages in our test ...
user avatar
  • 21
0 votes
1 answer
2k views

Setting up NTLM/Kerberos authentication for IIS 8, Server 2012 Workgroup

I need the following. My Server 2012 with IIS 8 installed is in a workgroup. Workstations are in a domain called 'hello.local' I need for users in the domain 'hello.local', to be authenticated ...
user avatar
1 vote
0 answers
135 views

NTLM Authentication fails once a week for only one user

I assist with running a small AD domain with around 40 members. For just one of those members, every wednesday at 12pm exactly, authentication will fail when they try to browse to the company intranet ...
user avatar
1 vote
2 answers
1k views

Why is only the first request to an NTLM authenticating proxy challenged and how do subsequent requests through the proxy get authenticated?

I am trying to develop a network tunnel that can traverse NTLM authenticating proxies. As part of that I am investigating how NTLM auth works. My test setup has WinGate proxy on one Windows box ...
user avatar
  • 21