Questions tagged [ntlm]
NTLM (NT LAN Manager) is a suite of Microsoft security protocols that provides authentication, integrity, and confidentiality to users.
177
questions
0
votes
0
answers
11
views
Cntlm installed on RHEL 7 and started, but it doesn't seem to listen
I have Cntlm installed on RHEL 7.9 from an .rpm file. After configuring it I tried it out with:
curl --proxy http://127.0.0.1:3128 http://google.com
and I get the error "curl: (7) Failed connect ...
- 121
0
votes
0
answers
77
views
Validating credentials in PowerShell wont use Kerberos
In reality I'm debugging a C# app but since the same command is possible in PowerShell I'm trying there.
I am trying to validate user accounts using the following in PowerShell:
> Add-Type -...
1
vote
0
answers
166
views
Apache reverse proxy to site using NTLM authentication fails with mod_rewrite but not mod_proxy
We have a reverse proxy server in front of an Exchange server and would like to lock down more of the paths. Minimized examples:
Fails (but works for all pages that don't require authentication):
<...
- 221
3
votes
0
answers
93
views
Active Directory: how to get rid of NTLM when we have remote users (road warriors)?
I want to disable NTLM completely. I don't want password hash to be stored in memory because of pass-the-hash attack (people don't have SeDebugPrivilege but anyway NTLM is not good)
But people connect ...
- 211
0
votes
0
answers
28
views
Squid does not write into access.log with kerberos authentication
I finally managed to get squid with kerberos authentication and LDAP group checking to work. I am using squid 4.1, kerberos v5 and Linux Mint Cinnamon 20.1.
Everything works fine, but I got a little ...
- 21
0
votes
1
answer
212
views
Not defined state of the `Network security: Restrict NTLM: NTLM authentication in this domain` GPO
Is NTLM by default disabled on domain controllers with Windows Server 2019?
My current tests show that the GPO Network security: Restrict NTLM: NTLM authentication in this domain does not work as ...
- 664
0
votes
1
answer
87
views
Can any local domain controller authenticate NTLM or do they pass it on to the primary domain controller?
When a Windows server needs to authenticate a domain user with NTLM it asks the local domain controller.
My question is whether that domain controller (assuming the user is in that domain) can process ...
- 101
0
votes
0
answers
396
views
Linux servers stopped being able to use PowerShell remoting over WinRM using NTLM on remote Windows Servers
So basically we have a team with Linux servers running PowerShell Core (a mix of 6 and 7) that have to execute remote Windows PowerShell commands on Windows servers. Problem is, the team never got ...
- 548
1
vote
0
answers
196
views
Powershell session from CentOS 7 to Windows Server 2019
I want to open a Powershell session from CentOS 7 to a Windows Server 2019 using a domain account but I can't get it working.
What I've done so far:
Enabled WinRM on Windows (verified connection from ...
- 325
1
vote
2
answers
998
views
Clear cached authentication for network share
Context: I map a cifs share in windows using NTLMv2 authentication, as the legacy server doesn't support kerberos. I am not prompted for login:
net use S: \\server.domain.com\share /persistent:yes
The ...
- 297
0
votes
1
answer
875
views
SMB Connection to non-domain server
I have a service that needs to establish a SMB connection to several servers. There is no issue with domain-joined computers using a domain account with access. However, I need it to connect to a few ...
- 23
0
votes
1
answer
59
views
Problems accessing shared folder in Windows clustered file Server 2008 R2
Firs of all I need to apologise for my poor technical and language skills.
I will try to describe a problem as detail as I can.
There is subnet 172.16.10.0/24
In this subnet I have 3 servers 1 storage ...
3
votes
0
answers
905
views
How to run kinit as root before automounting mutiuser cifs mounts?
Goal
I'm setting up multi-user CIFS mounts in an Active Directory environment under CentOS 8.2. The storage server supports SMB3.1.1 protocol.
Prerequisites
I could easily integrate the system to the ...
1
vote
0
answers
921
views
Remote Desktop to W10 with NTLM Disabled
We recently disable NTLM on our DCs (Default Domain Controllers Policy - Restrict NTLM: Deny all
The problem is when some (not all) Windows 10 workgroup clients (connected with VPN) try to open a ...
5
votes
2
answers
670
views
Hardening a file-serving Windows Server 2019 instance
I'm in the process of re-configuring and securing a server for the small company that I work for. We use it to store design files and other data with Autodesk Vault. It's running on a VPS from a ...
1
vote
0
answers
2k
views
Default for lmcompatibilitylevel if it doesn't exist
If the registry item lmcompatibilitylevel in HKLM\System\CurrentControlSet\Control\Lsa does not exist, when I look at the local policy Network Security:LAN Mananager authentication level, it shows '...
- 11
1
vote
1
answer
2k
views
NTLM authentication and non-domain joined computers accessing shares on a domain
I have a non-domain joined Win 10 computer which accesses shares on a domain joined Win 2016 server. At first connection with one of these shares, the Win 10 client is challenged and I supply domain ...
- 512
0
votes
0
answers
577
views
IIS / PHP not passing (or passing incorrect) NTLM user information
I am currently migrating PHP applications from IIS 8.0 to IIS 10.0. NTLM/Windows Authentication has been installed through Server Manager, the scripts are running on PHP7.1, are using exactly the same ...
- 51
0
votes
1
answer
914
views
Where is the documentation of Apache's mod_auth_sspi module?
I'm trying to configure the mod_auth_sspi module on my Apache server. I've found a few example configurations, but I can't find any proper documentation. Does anyone know where I can find that?
- 215
1
vote
0
answers
2k
views
Prevent Anonymous logons on windows-server 2016
I can't figure out how to entirely disable anonymous logon on Windows Server 2016 which is not a domain controller (regular instance). With the settings currently set I'm truly surprised to see such ...
- 121
3
votes
0
answers
1k
views
Getting Authentication Negotiate instead of NTLM while consuming SOAP WCF Service in Net.Core 2.1
I was trying to connect to a WCF SOAP service using NTLM Authentication Scheme, I succeeded at it when using .Net Framework 4.x but when I try to consume the same service in .NET Core 2.1 it fails (...
- 131
0
votes
0
answers
519
views
Why is NTLM authentication appearing as NT AUTHORITY\NETWORK SERVICE instead of machine account
I have an ASP.NET application whose app pool is running as Network Service which makes a request to SSRS running on a separate server to retrieve a report. The report displays the username (using ...
- 101
1
vote
2
answers
2k
views
NTLM authentication module mod_auth_ntlm_winbind for Apache2 omits domain name
I have an Apache2 instance running on Ubuntu 18.04 in local intranet and I want to configure NTLM authentication on the instance. I have installed and configured mod_auth_ntlm_winbind usage for user....
- 31
2
votes
0
answers
237
views
Is it possible to limit SSRS authentication to Kerberos only?
We have an instance of SSRS (SQL Server Reporting Services) which uses Kerberos Constrained Delegation to fetch data for its reports from SQL Server on behalf of its users.
For this purpose, SSRS was ...
- 145
0
votes
3
answers
6k
views
IIS NTLM authentication prompting for passwords on alternate DNS name
We have an existing server with HTTPS set up and an certificate signed by an internal custom CA cert.
It runs an app which uses windows authentication
e.g. https://internalserver
We browse to this ...
- 192
1
vote
2
answers
3k
views
Office365 NTLM authentication
Can I authenticate credentials with Office365 based on NTLMv2.
Microsoft describes on Authentication and EWS in Exchange that clients can authenticate with Exchange based on NTLM, but My program ...
- 11
2
votes
1
answer
715
views
Joining workstations to the domain as a member of Protected Users group (Delegation vs User Rights)
Implementing "Protected Users" and coming across this problem that I couldn't find a solution to anywhere. Cannot join computers to the domain with delegation permissions. Instead "Add workstation to ...
- 23
-2
votes
2
answers
52
views
How to identify that the protocol is using by AD DC is Kerberous?
I have created a local environment as follows:-
DC:- Windows server 2008<br>
Client:- Windows 7<br>
Domain:- januapp.local
Now I read on somewhere that, the DC uses two types of Protocol ...
2
votes
1
answer
1k
views
IIS and HttpListener (.NET) with windows authentication
I have a question about Windows authentication with IIS and HttpListener
I have the following setup (All installed in same Windows 8.1 box. No outside communication). All requests are sent as http://...
- 21
1
vote
0
answers
175
views
Is there a way to have password-less SQL server login for another user without kerberos enabled?
I am connecting to SQL server with JDBC.
I am able to use Integrated authentication with JDBC to connect to a SQL Server 2016 instance as the current logged in user, and I did not have to supply a ...
1
vote
1
answer
4k
views
npm install behind one proxy but got Http Error=407 (Forefront TMG requires authorization)
The operating system is MacOS, and already set up http(s) proxy inside the Network Preferences, but always failed to install any packages when running npm install (npm is one package installer for ...
- 141
1
vote
0
answers
552
views
Squid as transparent proxy to tunnel all connections under Windows
There's this app Joplin that can't connect to the internet on a corporate machine which lives on Active Directory and connects to the internet through HTTP and a NTLM proxy.
The problem is that you ...
- 111
1
vote
1
answer
4k
views
Authenticate NTLM at reverse proxy in front of unauthenticated web servers
I have several Linux HTTP servers setup with no authentication required to access the web content. I would like for my Windows users to be able to access these sites with pass-through authentication.
...
- 81
0
votes
1
answer
1k
views
NTLM with squid
I am new to Squid proxy and need help in setting up NTLM authentication.
I checked so many resources on the web but did not find exact steps to get my work done
Since I have no background on proxy/...
1
vote
1
answer
5k
views
Auditing NTLM authentication on Domain Controllers: which GPO?
We are wanting to turn on NTLM authentication auditing to gather further details on some clients trying to authenticate using NTLM to the domain/DCs. Specifically we want to enable:
Network ...
- 32.3k
1
vote
1
answer
818
views
Does Windows prevent automatic NTLM authentication when the SMB server is located on a different subnet?
I have a Samba server[1] on my network with a share configured[2] to allow access for my Windows logon user.
I can access the share from the Windows 10 machine that hosts the SMB server VM without ...
- 11
6
votes
2
answers
5k
views
Looking for a lightweight NTLM HTTP proxy server
For some testing, I am looking for an NTLM HTTP proxy server. The server should authenticate the clients, not delegate that authentication to an upstream "real" NTLM proxy server (like "NTLMAPS" or "...
- 576
0
votes
1
answer
5k
views
Cannot RDP into Windows Server 2016: 0x80090302
I am attempting to RDP into multple Windows Server 2016 VMs with no success. It is joined to a domain and I am using a domain account.
The error I see is on the servers is Event ID 4625:
An account ...
- 11
0
votes
1
answer
437
views
500 server error on after turning anon auth off and NTLM on
I'm pretty sure this is a permissions issue but can't seem to track down where at.
We have a local intranet site that is running on IIS 6.1 and running PHP. We turned on NTLM on so we can pull user-...
-1
votes
1
answer
1k
views
NTLM Unknown username or bad password on Windows Server 2016
I've been receiving the following error(attached file) in my event log lately. So i'm trying to figure out how did this Ip(Source Netword Address) manage to authentication the login details.
I only ...
0
votes
1
answer
2k
views
How do you enable ntlm v3 on windows server 2008 on IIS?
My boss wants me to enable NTLM v3 on IIS on my Windows 2008 server instance.
How do I do that? Googling it is very non-conclusive.
1
vote
1
answer
469
views
IIS Site Losing Ability to Authenticate With NTLM
We are having a recurring issue with one of our servers that I am not sure how to troubleshoot. The server is used to host an instance of Microsoft TFS and every few weeks Windows Authentication ...
- 111
0
votes
1
answer
642
views
Windows NTLM: who is trying to check against the domain
I have a very awkward situation. I want to find the application and/or IP address attempting to break in.
We have a WEB server, running IIS 7 on a 2008R2 domain. We are (still) using NTLM.
...
- 398
1
vote
1
answer
2k
views
LmCompatibilityLevel to be applied to client, domain controller or both?
I'd like to apply LmCompatibilityLevel = 5 to my domain but I am not sure if this is to be applied to all clients (via GPO), domain controllers only or to both. I am a little confused as the TechNet ...
2
votes
3
answers
11k
views
How to stop NTLM v1 authentication from being accepted on a Windows VM environment?
My scenario is that I have a website set up via IIS in Windows Server 2012 R2 Standard using Windows Authentication which has been detected as vulnerable to an NTLMv1 attack and so I am looking to ...
- 21
0
votes
2
answers
2k
views
Force anonymous authentication to use NTLM v2 rather than NTLM v1?
I already started changing my applications that use NTLM v1 in the authentication for NTLM v2.
I still have several event IDs in my DCs that show sessiom NULL with anonymous accounts. after ...
Kaderos
2
votes
1
answer
9k
views
AUTH NTLM Authentication Format
I am a student worker in Enterprise Systems at the university I attend. We are in the process of converting to a new version of Exchange. We are attempting to use telnet to track messages in our test ...
- 21
0
votes
1
answer
2k
views
Setting up NTLM/Kerberos authentication for IIS 8, Server 2012 Workgroup
I need the following.
My Server 2012 with IIS 8 installed is in a workgroup.
Workstations are in a domain called 'hello.local'
I need for users in the domain 'hello.local', to be authenticated ...
1
vote
0
answers
135
views
NTLM Authentication fails once a week for only one user
I assist with running a small AD domain with around 40 members.
For just one of those members, every wednesday at 12pm exactly, authentication will fail when they try to browse to the company intranet ...
- 111
1
vote
2
answers
1k
views
Why is only the first request to an NTLM authenticating proxy challenged and how do subsequent requests through the proxy get authenticated?
I am trying to develop a network tunnel that can traverse NTLM authenticating proxies. As part of that I am investigating how NTLM auth works. My test setup has WinGate proxy on one Windows box ...
- 21