IE does not send NTLM domain

Posted by Buddy Casino on Server Fault See other posts from Server Fault or by Buddy Casino
Published on 2011-02-18T10:16:23Z Indexed on 2011/02/18 15:27 UTC
Read the original article Hit count: 260

Filed under:

single-sign-on

|

ntlm

|

ie

Hi!

I have a problem with NTLM single-sign-on with IE8.

We've got multiple domain controllers and users from multiple domains that we try to authenticate to a web application via NTLMv1 passthru.

Somehow IE fails to send the user's domain in the NTLM Type 1 message. This has the effect that the webapp can not match users properly to their domain controllers, resulting in failed logon attempts, because a user from domain X tries to authenticate to domain controller Y.

This problem does not occur with Firefox, as it always sends the correct domain header.

So: how do I get IE to send the domain in the NTLM header?

Grateful for any help,
Michael

© Server Fault or respective owner

Related posts about single-sign-on

Luminis and Google Apps Single Sign On

as seen on Server Fault - Search for 'Server Fault'
We are a community college that is plodding forward with a Google Apps for Education implementation. There is support for Single Sign On and a fair amount of documentation for implementing it. We are looking to provide integration with our portal which is currently Luminis 3 (we are upgrading to… >>> More
Single Sign On with Forms Authentication

as seen on Stack Overflow - Search for 'Stack Overflow'
I am trying to set up Single sign on for 2 websites that reside on the same domain e.g. http://mydomain (top level site that contains a forms-auth login page) http://mydomain/admin (seperately developed website residing in a Virtual Application within the parent website) Have read a few articles… >>> More
Single Sign On for Web Application and Application in Virtual Directory

as seen on Stack Overflow - Search for 'Stack Overflow'
To enable single sign-on for a web application and a web application in a virtual directory, I set the machinekey in both apps to the same: <machineKey validationKey="xxx" decryptionKey="yy" validation="SHA1" /> The single sign on works just fine, but existing users can't sign in any more;… >>> More
Enabling Single Sign on with OpenID for the Google Apps Marketplace

as seen on Google Code - Search for 'Google Code'
Users of cloud-based business applications shouldn’t have to create, remember and maintain new credentials for each of the many apps that they use. With applications on the Google... >>> More
Integrate VBulletin in a J2EE application and support single sign on

as seen on Stack Overflow - Search for 'Stack Overflow'
I am considering purchasing VBulletin and integrating it with my J2EE application. While I am still looking into what it takes to enable this integration, I was wondering if VBulletin supports single sign on so that my users do not have to login to VBulletin once they have been authenticated to the… >>> More

Related posts about ntlm

Squid, NTLM, Windows 7 and IE8

as seen on Server Fault - Search for 'Server Fault'
I'm running Squid 2.7-stable4, Samba 3 and the Windows 7 RC with IE8. I have NTLM authentication setup on my squid proxy server and it works fine for every combination of browser and Windows (including IE8 on XP and Firefox on Win7), but it doesn't work (keeps asking for authentication) for IE8 on… >>> More
Active Directory and NTLM Authentication

as seen on Stack Overflow - Search for 'Stack Overflow'
Im writing an IIS Application, which manages AD users. For this purpose Ive configured site to use Negitiate AuthenticationProvider, and everything works. I wonder, is NTLM suitable for operations with Active Directory (such as creating user accounts)? Or AD accepts only Kerberos authentication? >>> More
Spring NTLM NtlmProcessingFilter do cache

as seen on Stack Overflow - Search for 'Stack Overflow'
does anyone tried doing cache for spring-ntlm NtlmProcessingFilter.java file so that every request no need to query from microsoft active directory to authenticate user ? how to implement such cache using ehcache >>> More
Apache configuration to make NTLM authentication work through a Proxy

as seen on Server Fault - Search for 'Server Fault'
I'm running an application server behind an Apache proxy with the following sort of thing in my Apache config: ProxyPass /app http://myapplication:8080/myapp ProxyPassReverse /app http://myapplication:8080/myapp When I switch on NTLM authentication (using mod_ntlm) the authentication fails… >>> More
Firefox for NTLM secured sites

as seen on Geeks with Blogs - Search for 'Geeks with Blogs'
Spent the last weekend fighting to get firefox to connect to a sharepoint portal hosting my homegrown TFS instance's TFS/WEB and team project portal from a friends' place. Firefox is THE favourite browser and I was hating to se it fail miserably with NTLM authentication. Fun part is it showed the… >>> More