User interface for setting up LDAP authentication via NTLM

NTLM (NT LAN Manager) can be used to authenticate users of a form.

A common use case are forms used internally by some company, and that may be accessed only by the employees of that company. The user data of the active directory can be accessed via NTLM.

NTLM may not be available depending on your license.

Using NTLM

Activate this option to use NTLM.

Synchronize with frontend server

Activate this option to transmit the current configuration to all connected and available frontend servers when saving these settings.

Domain controller host

The host (FQN) of the active directory controller used for authenticating users via NTLM and transmitting their data over LDAP.

Example: domain.example.com

Connection to the LDAP server for the LDAP search account has been established successfully

NTLM authentication

The following settings are required for enabling users to authenticate via NTLM.

Host name of the domain controller host

The host name of the active directory controller.

Example: domain

Windows domain name

Different forms of the domain name can be used depending on the active directory.

Example: example.de oder example0

Here you must specify the domain name to which the user accounts to be authenticated belong.
This domain name may be different from the domain of the computer account (This is the computer's NetBIOS name, not the DNS / FQDN name).

The Windows domain name to be used can be determined, for example, by opening a Windows console (Start / Run / cmd) on a client logged into the domain and entering the following command:
echo %userdomain%

Computer account

The computer account must have been granted permission to perform user verification. It must not be a regular user account.

A computer account is recognizable by the '$' character in the domain name. e.g. example$@domain.de

Help pages of ca technologies on creating a computer account for NTLM authentication on active directory server.

computer account password

Password of the computer account.

LDAP user lookup

The following settings concern the user lookup after a successful NTLM authenication.

Port

The port for connecting to the LDAP server for the user lookup.

SSL encryption

Enables SSL encryption when communicating the the LDAP server.

Hop count

The number of hop counts or referrals. Setting this to 0 disables following references.

User account (with domain)

Account to be used for looking up users.  It must have been granted permission to perform user lookup.

Example: ldap@example.de

User account password

Password of the user account.

Base DN für user lookup

LDAP base DN used for looking up authenticated users.

Example: ou="users", dc="example", dc="de"
Copyright 2000-2024