In a user session outside of domain authentication, I had NTLM authentication working for web requests sending Auth headers:

WWW-Authenticate: Negotiate
WWW-Authenticate: NTLM

But, now I've authenticated within a domain, with the same username (but now DOMAIN/user instead of just user) and password, but NTLM authentication is no longer working.

My smb.conf:

    passdb backend = tdbsam
    security = ADS
    unix password sync = yes
    encrypt passwords = yes
    invalid users = root
    kerberos method = secrets and keytab
    realm = EXAMPLE.COM
    winbind offline logon = yes
    winbind refresh tickets = yes

I don't need NTLM authentication if Kerberos would work properly, but how can I authenticate against these IIS servers?

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.