In a user session outside of domain authentication, I had NTLM authentication working for web requests sending Auth headers:
WWW-Authenticate: Negotiate WWW-Authenticate: NTLM
But, now I've authenticated within a domain, with the same username (but now
DOMAIN/user instead of just
user) and password, but NTLM authentication is no longer working.
[global] passdb backend = tdbsam security = ADS unix password sync = yes encrypt passwords = yes invalid users = root kerberos method = secrets and keytab realm = EXAMPLE.COM winbind offline logon = yes winbind refresh tickets = yes
I don't need NTLM authentication if Kerberos would work properly, but how can I authenticate against these IIS servers?