NTLM (NT LAN Manager) is a set of security protocols from Microsoft that provides authentication, integrity and confidentiality to Windows users.

learn more… | top users | synonyms

21
votes
6answers
54k views

Why does Internet Explorer keep asking me for NTLM credentials in an intranet zone?

Long text, sorry for that. I'm trying to be as specific as possible. I'm on Windows 7 and I experience a very frustrating Internet Explorer 8 behavior. I'm in a company LAN with some intranet servers ...
18
votes
2answers
13k views

Does Firefox support wildcards in NTLM / Negotiate URI's for autologin?

Following this question about Windows Domain Authentication with Firefox, does FF support using wildcards in the URI's? I'm not finding anything where it mentions support either way.
11
votes
7answers
18k views

Can I get Chrome to work with sites that use windows integrated security?

I've had success altering about:config in firefox to get firefox to work with certain intranet sites that use windows integrated security. Is there something like about:config in Chrome? Is there some ...
8
votes
1answer
16k views

How to enable NTLM for all intranet sites in Firefox?

I know I can add specific URLs in the network.authmatic-ntlm-auth.trusted-uris and separate them by comma, but I would like to enable NTLM for all intranet sites. I tried http://* and http://. but ...
6
votes
1answer
4k views

How do I configure NTLM authentication in Firefox on Linux?

Our IT department have NTLM deployed through the intranet servers. I've set network.automatic-ntlm-auth.trusted-uris value in Firefox on some of the Windows machines and that works fine. However ...
5
votes
3answers
924 views

MDT deployment of Dell OEM Windows XP Pro stumped by NTLMv2 requirement

We're working on a deployment system that uses iPXE to boot a LiteTouch PE image created by Microsoft Deployment Toolkit (MDT) 2010, which then deploys Windows XP or Windows 7 to the clients. No ...
5
votes
1answer
3k views

enabling LM hash in Windows 7

Is there any way to enable/convert an NTLM hash for a user account on Windows 7 to a LM hash? I know it's not secure, but I am trying to test something. Is it even possible?
4
votes
1answer
2k views

Using Windows credentials with TortoiseSVN?

We are a bunch of Subversion users logging in on our Windows computers with Windows domain accounts. I can set up a Subversion server on another machine in the same domain. I want to use our Windows ...
4
votes
2answers
6k views

Connecting to an SSH server from Client behind an NTLM Proxy

I'm trying to get to my SSH server on the internet from a corporate network. All connections to the outside internet have to be proxied through a server that check's for the NTLM hash of each client ...
3
votes
3answers
15k views

How to configure Firefox for NTLM SSO (Single-Sign-On)?

My computer and user belonging to the domain, I want to connect to my NTLM-SSO-enabled intranet website http://intranet without providing a login/password. How to do it with Mozilla Firefox?
3
votes
4answers
3k views

Perl Package Manager via NTLM proxy

I've installed ActivePerl and the include PPM at work, but I'm unable to get it connect to the module repository through the proxy. I've set up an environment variable HTTP_PROXY = ...
3
votes
1answer
36 views

Why is HTTP Negotiate authentication so restricted in Firefox? [closed]

According to Microsoft, the Negotiate method of HTTP authentication, is the "strongest (most secure) available protocol" Yet browsers like Firefox require you to add a special exception in ...
3
votes
1answer
71 views

How to track rogue workgroups or domains

I have a strong feeling one of our desktop support techs is doing this, but I want to see if I can track this down before I start accusing people. I just dont know how... While logging into a local ...
3
votes
1answer
5k views

Opera always re-requests proxy authentication after restart

Both 9.xx and 10.xx versions of Opera are re-requesting proxy auth after the browser restarts. The login and password inputs are already filled in so I need just click OK button but I need to do this ...
3
votes
0answers
1k views

NTLM Proxy - HTTPS Alternative to CNTLM?

I worked with a proxy at my office that I need to have applications use. Of course its using NTLM, and that's blocking a lot of stuff from using their default/built-in proxies. I've got Maven, ...
3
votes
0answers
205 views

How can I get Fiddler to watch traffic through CNTLM [closed]

EDIT: I don't know what I did before but it seems to work ok now. I'm not seeng traffic form TortoiseHg but that's no major loss. Traffic from the browser is fine. I've voted to close this question. ...
2
votes
3answers
4k views

The server 127.0.0.1:3128 requires a username and password. The server says : cntlm for parent

I have just installed cntlm on my new Ubuntu 12.04. In configuration file etc/cntlm.conf, I inserted my network configure like below: Username: myUsername Domain : myDomain Password: myPassword ...
2
votes
4answers
906 views

Firefox NTLM clear on Windows logout

My network uses Kerio WinRoute Firewall 6 and is configured to authenticate HTTP requests using built in Active Directory accounts. That means every computer gets sent an NTLM auth challenge when ...
2
votes
2answers
2k views

Non-domain computer authenticating on a domain computer to use SMB/CIFS shares

Long story short: One of my home servers has a share called "Profiles", in which everyone here has their own folder (of which they can only access) they can use to sync or backup their Windows profile ...
2
votes
0answers
177 views

Download file behind Integrated Windows Auth from command line

I'm looking for a way to be able to download the contents of a particular url that's protected behind Integrated Windows authentication from a computer that is a member of the domain, using the ...
1
vote
1answer
1k views

How inaccurate must the clock's time be for NTLM requests to be denied due to the time being incorrect?

We have a network where the time on some of the client workstations is inaccurate. There is a problem with NTP on the clients or domain controllers causing the time to not synchronize. We are ...
1
vote
1answer
211 views

How do you get the cookie of a website after an HTTPS NTLM authentification?

I am trying to store a cookie (which will help me authentificate myself elsewhere) given by a website after an authentification. The case is as follow: Get to the HTTPS page Get redirected by httpd ...
1
vote
1answer
617 views

Why doesn't windows authentication work with host alias'?

Normally accessing a Windows share is accomplished using a UNC path e.g. \\server\share where "server" is the real hostname of the Windows machine. \\server.domain.com\share also works. However ...
1
vote
0answers
232 views

The authentication mechanism is unknown

I'm attempting to authorize access to a third party program by checking their credentials against Active Directory using NTLM. This solution has been working for a long time - as it a rolled out ...
0
votes
1answer
21k views

Windows 8 security policy “LAN Manager Authentication Level”

I can't get into one of our enterprise apps and the app administrator told me I need to change the LAN Manager Authentication Level to "Send NTLM Responses Only". That normally happens via group ...
0
votes
1answer
13k views

How to change Local Security Policy with Win 8 Home using registry

Hi I have attached a USB external Drive to my new TG582n Router. Fantastic, no messing every Computer and devices with access to the network can now use the drive. All but My Windows 8.1 desktop. It ...
0
votes
1answer
250 views

cntlm password : special characters

I just got cntlm for my Windows 7 (86) It runs on cmd line and also as service, but i am not able to initiate on command line with my proxy password as it contains special characters. Any way to get ...
0
votes
2answers
932 views

How can Safari do SPNEGO authentication using default kerberos ticket?

We have a Web site (out intranet site) that uses pass though authentication and signs people in automatically. This application works seamlessly when using a Windows machine. All of our Windows ...
0
votes
1answer
571 views

What does the “Enable NTLMv2” option mean in a Windows tweaker?

I'm going over some options in a Windows Tweaker and one of them is "enable NTLMv2". I've looked this up a bit, but the main question I have: how can I benefit from this, and does it work if not ...
0
votes
0answers
21 views

Is there a way to disable basic authentication prompt for internet sites?

I am using ntlmv2 authentication using jespa. we have sites with jespa hosted on internet. For non domain users, they are getting prompt for username and password. is there a way to disable windows ...
0
votes
0answers
11 views

Is it possible to NTLM-authenticate telnet on Windows specifying credential?

Connecting via telnet to a windows server, it is recommended to use NTLM authentication so as to not send a password in plaintext over the network. The windows telnet client supports this type of ...
0
votes
0answers
103 views

Connecting a Windows 8.1 (Home ed.) to a OSX Server 10.10 via SMB

I'm trying to get a Windows 8.1 (Home edition) laptop to connect to a shared folder on a Mac OSX 10.10 server. I'm fairly sure the problem isn't on the server side, since i've managed to connect ...
0
votes
0answers
32 views

Need help constructing cURL config file

I have a (rather long) cURL command that I'm currently running as follows: curl.exe -U : --proxy-ntlm --proxy myproxyserver --cookie-jar cookies.txt -H "Accept-Encoding: gzip,deflate,sdch" -H ...
0
votes
0answers
121 views

why Internet Explorer 9 User Agent string (the "MSIE part) mess up with proxy and/or NTLM auth in Apache Tomcat 7?

In my network we're behind a proxy (pac script), when try to access a site in the following url format: http://serverName.domain.com:8080/somePath IE (9.0.8112.16421) is unable to browser the site ...
0
votes
0answers
39 views

Change Firefox settings with script

We have a network in our company and I want to set network.automatic-ntlm-auth.allow-non-fqdn parameter to True in Mozilla FireFox for all clients,how can I do this?
0
votes
0answers
154 views

Internet Explorer 11 / Outlook 2013 single sign-on anomaly: it keeps sending Authorization: headers

I have IE 11 and Outlook 2013 on the client side. On ther server side there's centos7, apache 2.4 with auth_ntlm_winbind_module and winbindd. The server URI (http://server.yourdomain.com) is added to ...
0
votes
0answers
57 views

Which IE Security Zone(s) Does Chrome Reference When Performing NTLM Authentication?

Can someone please confirm which IE security zone(s) Chrome references when determining whether or not to submit NTLM credentials? I've came across one blog post that indicated that it might only ...
0
votes
0answers
47 views

How to configure old Windows clients to use NTLMv2 when connecting to a Windows 7 network share?

So we have a shared folder on a Win7 machine which can be accessed from only Vista or later, but apparently reject older clients with error 58. The reason is that Win7 forces NTLMv2 protocol while ...
0
votes
1answer
183 views

For password protected Samba share on home network, ntlm vs ntlmv2 vs krb5 (kerberos)?

I have a home network with wifi that is password protected. On my home network, I have a file server with a password protected Samba share. The share itself is protected because my network has ...
0
votes
0answers
291 views

Apache ntlm_auth helper authentication without basic/digest

Under Apache server I'm trying make ntlm authentication (sso with windows domain) for web pages, but I want revoke basic/digest authentication. It is possible? Must I write wrapper? For config below ...
0
votes
0answers
3k views

Cntlm Authentication Proxy is quite insane

I am trying to connect to an IMAP email server through a proxy using desproxy and Cntlm Authentication Proxy. cntlm.exe -c cntlm.ini -v desproxy imap.gmail.com 993 127.0.0.1 3128 1080 openssl ...
0
votes
1answer
29 views

Why mapping a drive via IP leads to NTLM authentication instead of kerberos

Why does mapping a drive via IP leads to NTLM authentication instead of Kerberos? I thought Kerberos was more secure.