NTLM asking credentials, domain required?

Hi,
Simple question but couldn't find a good answer in the datasheet.
When the Ironport WSA asks credentials when using LDAP, no domain is required.
Username, password ==> Finished!
However, it seems when using NTLM that you are required to:
DOMAIN\Username, password ==> Finished
Is there a way to disable the need for the end-users to enter the domain?
Kind regards,
Robin

Rick,
I have no real knowledge of mod_ntlm but I was directed to this site, perhaps this can help you as well
http://wiki.bestpractical.com/view/NtlmAuthentication
GL
Randy

Similar Messages

  • NTLM asking for log in

    I have installed mod_ntlm version 1.3 and it works except that when I first access an APEX application or the development environment it asks me to login to the server that APEX is running on even though I am logged into the network. Our domain server is different than the APEX server. Is there something in the MOD_NTLM parameters I need to get it to not ask me to log into the APEX server? My NTLM parameters look like this in my marvel.conf:
    AuthType NTLM
    AuthName "NTLM authentication"
    NTLMAuth On
    NTLMAuthoritative On
    NTLMOfferBasic On
    NTLMDomain our domain
    require valid-user
    Can anyone help! I have looked all over the place and I can't find an answer to this question.
    Rick

    Rick,
    I have no real knowledge of mod_ntlm but I was directed to this site, perhaps this can help you as well
    http://wiki.bestpractical.com/view/NtlmAuthentication
    GL
    Randy

  • Why is Domain required for an identity in the FIM Service?

    I have a scenario where FIM is managing identity, but not all identities have an Active Directory account. I have a flag in the FIM Portal (Service) that indicates if a particular
    user is entitled to an AD account or not. My provisioning setup adds or removes the AD account as appropriate. To support FIM Portal activities for those that do have AD accounts, I populate AccountName, Domain, and ObjectSID in the FIM Service from their
    corresponding attributes in AD.
    What I have noticed is that it does not seem possible to null out or delete the Domain attribute for a user in the FIM Service. I can delete the attributes for both AccountName
    and ObjectSID without issues.
    When attempting to remove the Domain attribute for a user I get the following in the event logs:
    Microsoft.ResourceManagement.WebServices.Exceptions.UnwillingToPerformException: Other ---> System.Data.SqlClient.SqlException: Procedure or function 'GetDomainConfigurationIdentifiersFromDomain'
    expects parameter '@domainName', which was not supplied.
    I assume that something internal to the FIM Service is trying to do some magic with validating the domain name and the domain configuration. I did found a post saying, “Yeah,
    you have to populate Domain”:
    http://social.technet.microsoft.com/Forums/en-US/f207caa9-3a6f-4f2d-8461-a83777280803/fim-service-ma-export-failedmodificationviawebservices-error?forum=ilm2
    My question is why is Domain required for a user? It is obviously needed for users that have AD accounts an must authenticate with the Portal, but in the case where a user
    does not have an account (and therefore does not have a domain), it feels odd to store the incorrect data for the user. It also looks weird when you bring up list of users in the portal and see domain values for users that do not have accounts. In this particular
    case, the client has many domains and does have the Domain and AccountName attributes displayed on the user search results page.

    Hi Henry,
    Using another domain attribute and workflow to maintain the actual Domain and DomainConfiguration is a good suggestion, thanks.
    My original question still stands however... Why is Domain required in the FIM Service?
    It is sounding like the answer is "It is not really required on it's own, but there is an internal process that requires it if there is a value for DomainContext set (and there is some magic that sets DomainContext, so you have to manually clear it.)"
    Since DomainContext is automatically set when a client writes a value to Domain. I would suggest that it is a bug that DomainContext is not automatically cleared when Domain is cleared.
    I poked around a bit and the bug can be fixed by changing the stored procedure definition to allow null parameters. In the FIM Service database the stored procedure [fim].[GetDomainConfigurationIdentifiersFromDomain] has a parameter declaration of "@domainName
    NVARCHAR(448)". If this is changed to "@domainName NVARCHAR(448) = null" the problem appears to be solved.
    Making this change would of course be totally unsupported, but perhaps it can be included in a future product update.
    For now I will use Henry's workaround, or just live with potential out of date Domain data.
     Thanks

  • HT201407 My iphone suddenly stops working and asked for activation required. I did restore it thru itunes but it asks me to turn off "find my iphone". How can i disable "find my iphone" if i can open the iphone itself. please help me.

    My iphone suddenly stops working and asked for activation required. I did restore it thru itunes but it asks me to turn off "find my iphone". How can i disable "find my iphone" if i can open the iphone itself. please help me.

    My iphone 5 suddenly stops working and asked for activation required. I did restore it thru itunes but it asks me to turn off "find my iphone". How can i disable "find my iphone" if i can't open the iphone itself. please help me.

  • TS2771 my ipod screen is none responsive and it is asking for activation required

    my ipod screen is not responding and it is asking for activation required we have tryed the restart procedure but it just gose back to the same screen

    Try here:
    iOS: Not responding or does not turn on

  • IPhone using VPN: why asking credentials each time?

    Hello all,
    I have a question related to the iPhone behavior.
    Today I am using a laptop to connect to my company Cisco VPN. As my laptop is integrated into my company's domain, I don't need to enter my credentials when going to an internal website.
    When using the iPhone, whatever internal site I access that requires authentication, it asks for my credentials.
    Is there a way on phone or Cisco side to force authentication to happen according to VPN connection settings to avoid logging in each time ?
    Thanks for your help,
    Ben.

    You can create a VPN profile using the iPhone Configuration Utility where you can hardcode all of the credentials. This enables you to simply activate the VPN and it will connect.
    Windows:
    http://support.apple.com/downloads/iPhoneConfiguration_Utility_1_1_forWindows
    Mac:
    http://support.apple.com/downloads/iPhoneConfiguration_Utility_1_1_for_Mac_OSX

  • HT1807 got an unlocked iphone 4s bt it asks for activation required via a wifi or mobile network each time i put a new sim. wat if i put in a sim which doesnt have 3g and i dnt have any wifi around me? how do i activate it then?

    I am living in uk at the moment and i have an unlocked iphone 4s. Each time i put a new sim in it a message appears saying ''Activation Required''. When i slide the unlock bar it asks to choose a wifi network or a mobile data network. So far this hasnt been a problem coz i always found a wifi network around me or the mobile data network worked fine. Now the problem is I am moving back to my country Bangladesh in couple of days. And back there wifi isnt a very available thingie. And mobile data network is very hard to connect. So if i put on a Bangladeshi mobile service sim in my phone how do i activate it without the wifi or mobile data network? Please some help asap would be much appreciated.

    Hi Allan,
    Sorry for the rant up there..   Thanks for your quick response.  I couldn't get to an Apple store and can't order anything from the States that contains Lithium ION batteries -- no U.S. Postal Services will deliver these to us anymore.  Target sold this to me as an unactivated Sprint phone.  I never activated it through Sprint in the States and just took it to Germany with me.  I updated to vs.6.0 via ITunes and without the Sprint SIM Card installed.  The IPhone is now accessible (Apps, Settings, etc., to be able to check firmware, et al., settings.  However, I can't tell if it's unlocked (since I upgraded the version without the Sprint SIM Card installed) until I go to the local cell phone shop and stuff in a BASE (provider) SIM card and test it out.  Is there a way to tell whether or not the phone is unlocked without a SIM card in it?  I don't think there is....

  • This morning I ask about the requirement to download the adobe Cs6 before i buy the product and the salesperson told me that i met the requirement for that particular software, so my surprise now when i open the file it says an error because my computer d

    this morning I ask to a sales person about the requirement to download the adobe Creative Cs6 before i buy the product and the salesperson told me that my computer met the requirement for that particular software, so my surprise now when i open the file it says an error because my computer doesn't meet this requirement,  my computer is a OS X 10.5.8 and the requirement  is OS X v10.6.8 or v10.7 what can i do?

    The requirements are online. For the Master Collection the requirements on Macs are:
    Mac OS
    Multicore Intel processor with 64-bit support
    Mac OS X v10.6.8 or v10.7
    4GB of RAM (8GB recommended)
    15.5GB of available hard-disk space for installation; additional free space required during installation (cannot install on a volume that uses a case-sensitive file system or on removable flash-based storage devices)
    Additional disk space required for disk cache, preview files, and other working files; 10GB recommended
    1280×900 display with 16-bit color and 512MB of VRAM; 1680×1050 display required and second professionally calibrated viewing display recommended for Speedgrade
    OpenGL 2.0-capable system
    DVD-ROM drive compatible with dual-layer DVDs (SuperDrive for burning DVDs; Blu-ray burner for creating Blu-ray Disc media)
    Java™ Runtime Environment 1.6
    Eclipse™ 3.7 Cocoa version (for plug-in installation of Flash Builder); the following distributions are supported: Eclipse IDE for Java EE and Java Developers, Eclipse Classic, Eclipse for PHP Developers
    QuickTime 7.6.6 software required for QuickTime features, multimedia, and HTML5 media playbackOptional: Adobe-certified GPU card for GPU-accelerated performance in Premiere Pro; see the latest list of supported cards
    Optional: Adobe-certified GPU card for GPU-accelerated ray-traced 3D renderer in After Effects; see the latest list of supported cards
    Optional: Tangent CP200 family or Tangent Wave control surface for Speedgrade
    Optional: 7200 RPM or faster hard drive (multiple fast disk drives, preferably RAID 0 configured, recommended) for video products
    Broadband Internet connection and registration are required for software activation, validation of subscriptions, and access to online services.* Phone activation is not available.
    You should have been given the correct information. Adobe offers 30-day money back guarantee.
    You can find return information here:
    Return, cancel, or exchange an Adobe order

  • Credentials are required prompt -- won't go away

    Hi,
    We have several users that are receiving a credentials prompt when signing in to Lync.  It is not everyone, and it is not on every machine.  For example, I sign in fine on my machine, but on a resource PC I get prompted for cred's.  This began
    happening about 1 week ago.  It won't accept the creds.  Also, I cannot erase the box "Account:"
    The message: Type your user name and password to connect to the certificate service.
    2008 R2 Domain
    Lync 2010 FE server
    Lync client version 4.0.7577.4446
    I checked all the normal things, accounts/PWs, etc.  No go.
    If I run Certmgr.msc and compare two PCs, the one that works fine has certs issued by "Communications Server" listed under Certificates - current user > Personal > Certificiates.  On the machine that prompts for creds there are no certs
    there.
    Also interesting... If I hold Ctrl and right click icon, to look at configuration information, I see MAPI is working fine on one and Unavailable on the other.
    So how do I force lync to issue a cert?  
    I should mention that for a few weeks we have been attempting to configure a lync edge and reverse proxy server.  Neither of those work.  The reverse proxy is offline, and didn't affect this issue.  
    Thanks in advance,
    Todd
    Todd Wollin

    Hi,
    As the issue not happen only for several users, it can be a Lync client issue. So you can firstly do the following checkpoints on local computer:
    For the issued computers, please check if they have the Root certificate in the local certificate store.
    Exist Lync client, then delete Lync user profile and Register information, then rerun Lync client to check the issue again.
    Make sure the issued Lync client update to the latest version, and then test again.
    Best Regards,
    Eason Huang
    Eason Huang
    TechNet Community Support

  • Problem updating Apple TV(screen icon asking lead connection required to iTunes

    Update has caused screen to show connection by cable to iTunes  required
    and causing indicator light on box to false quickly

    My ATV doesn't does (I didn't see it under the HDMI) have MicroUSB port, only Ethernet, power connector and HDMI. The icon on the screen is asking us clearly (at least my icon) to connect the ATV from the HDMI port to itunes. Thus, I need an HDMI to USB cable, which I don't have.
    Interesting!!!
    -BJ
    Message was edited by: B2J

  • Force to ask Credentials while accessing a share

    How do I force windows to ask for credentials whenever I connect to a share or whenever I access a share folder?

    maybe this thread will help you to do workaround
    http://superuser.com/questions/722153/in-windows-8-1-how-to-force-prompt-for-credentials-when-accessing-a-shared-fold
    go to computer management  > shared folders > session, and disable guest account

  • The domain required by SSO BO SAP

    In the thread: Can I use SSO to integrate SAP EP Portal with InfoView Portal? I have seen that SSO requires that all the machines SAP and BO remain in the same domain.
    I am wondering what does the domain mean? Is it windows domain? LDAP domain? Forgive me if I am ignorant.

    in that example the sap.com is your domain. if you unsure just run ipconfig - it should show the domain as well
    ingo

  • JCIFS NTLM - giving backup domain controller in web.xml

    Hi All,
    We are using JCIFS NTLM authentication, for which we've configured the filter in web.xml like this
    ... other code ...
    <filter>
        <filter-name>NtlmHttpFilter</filter-name>
        <filter-class>jcifs.http.NtlmHttpFilter</filter-class>
        <init-param>
            <param-name>jcifs.http.domainController</param-name>
            <param-value>SERVER1</param-value>
        </init-param>
        ..... other code .....the above code specifies a single domain controller SERVER1 for the NTLM authentication. Suppose, I want to give one more server also (i.e. when the SERVER1 down, NTLM should check my backup server SERVER2), how do I give it in the above code? Is it like <param-value>SERVER1, SERVER 2</param-value> ?
    Thanks in advance.

    I am facing the same exact problem.
    <filter>
              <filter-name>NtlmHttpFilter</filter-name>
              <filter-class>jcifs.http.NtlmHttpFilter</filter-class>
              <init-param>
                   <param-name>jcifs.http.domainController</param-name>
                   <param-value>corg0dc02</param-value>
              </init-param>
    </filter>
        <filter-mapping>
             <filter-name>NtlmHttpFilter</filter-name>
             <url-pattern>/*</url-pattern>
        </filter-mapping>
       Is it possible to use EL or equivalent instead of hard-coding the param-value? Is this allowed in the Servlet spec?
    I would like to read the param-value from a properties file or DB table if possible.
    Edited by: asookazian on May 21, 2009 10:34 PM

  • User machine without domain require domain\username authentication.

    Hi,
    When I try to connect in lync 2013 with machine unjoined domain the "domain\username" is required, however in another organization it´s not required. How can I set this?
    Thanks.
    Diego Riera | Linkedin |
    Twitter |
    diegoriera.wordpress.com
    Por favor, lembre-se de clicar em "Marcar como Resposta" no post que o ajuda, e clique em "Desmarcar como resposta" se um post marcado na verdade não responder a sua pergunta. Isto pode ser benéfico para outros membros da comunidade. Esta
    postagem é fornecida, sem garantias e sem direitos.

    Diego,
    if you set the users' UPN to match that of your SIP domain (sign-in name), then AD username should not be required. Check
    http://support.microsoft.com/kb/243629
    http://blog.schertz.name/2012/08/understanding-active-directory-naming-formats/
    Alessio Giombini | Microsoft Solutions Architect | Twitter: @AlessioGiombini
    Lync 2013 Detailed Design Calculator: try it at http://goo.gl/jU1hZR

  • Unable to send email javax.mail.MessagingException: 553 Domain require

    Hello
    When sending a test message using One to One fulfillment I get the following message
    unable to send email
    javax.mail.MessagingException: 553 <UNSET>... Domain name required"
    Has anybody got this message before? how did you resolve it?
    Thank you
    Kind Regards
    Eva

    See if there is any space in the name of the email server. If yes, remove the space and stop and start the fulfillment server.
    HTH

Maybe you are looking for