NTLM_AUTH(1) User Commands NTLM_AUTH(1) (NAME) ntlm_auth - NTLM Winbind (SYNOPSIS) ntlm_auth (DESCRIPTION) samba(7) . ntlm_auth NT/LM . 0 1 . ntlm_auth winbind . ( Squid mod_ntlm_winbind) . (OPERATIONAL REQUIREMENTS) winbindd(8) . winbindd_privileged $LOCKDIR . (root) winbindd_privileged . . (OPTIONS) --helper-protocol=PROTO stdio. : squid-2.4-basic ( ) Squid 2.4. squid-2.5-basic ( ) Squid 2.5. squid-2.5-ntlmssp NTLMSSP Squid 2.5. winbindd_privileged $LOCKDIR . : http://devel.squid-cache.org/ntlm/squid_helper_protocol.html. NTLMSSP Negotiate YR ( ). ntlmssp-client-1 NTLMSSP Samba . . . YR ( ) . gss-spnego GSS-SPNEGO . squid-2.5-ntlmssp . winbindd_privileged $LOCKDIR . gss-spnego-client GSS-SPNEGO . . ntlm-server-1 RADIUS 'winbind' pppd MSCHAP MSCHAPv2. : Parameter: value Parameter:: Base64-encode value. . ( ). : Username unix charset . : Username: bob Username:: Ym9i NT-Domain unix charset . : NT-Domain: WORKGROUP NT-Domain:: V09SS0dST1VQ Full-Username unix charset winbind separator . : Full-Username: WORKGROUP\bob Full-Username:: V09SS0dST1VQYm9i LANMAN-Challenge LANMAN Challenge ( MSCHAPv2) . : LANMAN-Challenge: 0102030405060708 LANMAN-Response LANMAN Response LANMAN Challenge . ..PP : LANMAN-Response: 0102030405060708090A0B0C0D0E0F101112131415161718 NT-Response >= 24 NT Response LANMAN Challenge . . : NT-Response: 0102030405060708090A0B0C0D0E0F10111213141516171 Password . helper (legacy) . : Password: samba2 Password:: c2FtYmEy Request-User-Session-Key (user session key) . : Request-User-Session-Key: Yes Request-LanMan-Session-Key LANMAN . : Request-LanMan-Session-Key: Yes ( /) (newline) base64 . helper base64 . --username=USERNAME --domain=DOMAIN --workstation=WORKSTATION (workstation) --challenge=STRING NTLM ( - HEXADECIMAL) --lm-response=RESPONSE LM ( - HEXADECIMAL) --nt-response=RESPONSE NT NTLMv2 ( - HEXADECIMAL) --password=PASSWORD . NTLMSSP winbindd . --request-lm-key LM --request-nt-key NT --diagnostics . --password . --require-membership-of={SID|Name} ( SID) . --pam-winbind-conf=FILENAME pam_winbind.conf. --target-hostname=HOSTNAME . --target-service=SERVICE . --use-cached-creds () winbindd . --allow-mschapv2 MSCHAPv2. --offline-logon (offline) . -?|--help . --usage . -d|--debuglevel=level level 0 10 . 1 . . 0 . 1 - . 1 . 3 . log level /etc/samba/smb.conf . --debug-stdout STDOUT . STDERR . --configfile= . ( ) client smb encrypt . /etc/samba/smb.conf . . --option== "" smb.conf(5) "" . . --option=name=value . -V|--version . (EXAMPLE SETUP) ntlm_auth squid 2.5 basic NTLMSSP squid.conf . auth_param ntlm program ntlm_auth --helper-protocol=squid-2.5-ntlmssp auth_param basic program ntlm_auth --helper-protocol=squid-2.5-basic auth_param basic children 5 auth_param basic realm Squid proxy-caching web server auth_param basic credentialsttl 2 hours ntlm_auth (PATH) winbindd_privileged . ntlm_auth squid 2.5 squid.conf . auth_param ntlm program ntlm_auth --helper-protocol=squid-2.5-ntlmssp --require-membership-of='WORKGROUP\Domain Users' auth_param basic program ntlm_auth --helper-protocol=squid-2.5-basic --require-membership-of='WORKGROUP\Domain Users' (TROUBLESHOOTING) Internet Explorer MS Windows 9X Millennium Edition NTLMSSP ntlm_auth (--helper-protocol=squid-2.5-ntlmssp) Microsoft Knowledge Base ..SH " (VERSION)" 4.24.6 Samba . (AUTHOR) Samba Andrew Tridgell . Samba Samba Team Linux . ntlm_auth Jelmer Vernooij Andrew Bartlett . Samba 4.24.6 08/16/2026 NTLM_AUTH(1)