I'm trying to get apache to use NTLMv2 authentication against our
windows domain. I've done a few weeks of research and can't find any
existing mods that work. Authen::NTLM and mod_ntlm only support
ntlmv1, and we have lmcompability level set to 4 on every machine on
our network so using ntlmv1 is not an option. From what I can tell,
you could probably update Authen::NTLM to use the newest version of
samba's libsmb, right now it uses an older library called smblib. I'm
neither an apache mod or samba guru, and was hoping someone out there
has already done this, as it looks pretty difficult to update the
module.
I've also looked into kerberos authentication, but I don't want the
users to send their pw's over, and ntlm authentication is automatic in
IE, and configurable in firefox. It's pretty much NTLMv2 or bust.
>> Stay informed about: help setting up NTLMv2 authentication