Skip to main content
Jasys
Explorer
January 27, 2026
Question

Agentless NTLM Auth - Not Working

  • January 27, 2026
  • 1 reply
  • 133 views

 I have followed this as much as possible,  I am using sAMAccountName on the config user ldap so it looks at every account, but NTLM doesnt work at all,  So I set up basic Auth to the same LDAP server, and that works fine, user has to log in with current credentials and they can hit the proxy policy and surf the web etc, can see them under "diagnose wad user list" as "basic auth"

 

I need the behaviour to be transparent, so NTLM seems to be the answer (Not using FSSO yet!)

but the login box appears, you type in creds, then it just appears again.

 

config user ldap
edit "ldap-server"
set server "x.x.x.x"
set cnid "sAMAccountName"
set dn "dc=lab,dc=local"
set type regular
set username "myadadmin"
set password ENC blah blah blah
next

 

config authentication scheme
edit "MYAD-LDAP"
set method nlm
set domain-controller "MYDC" (LDAP SERVER ABOVE)

 

config authentication rule
edit "auth-web"
set srcintf "proxy-int"
set srcaddr "all"
set active-auth-method "MYAD-LDAP"

 

Any advice please?

 

https://docs.fortinet.com/document/fortigate/7.6.5/administration-guide/554836/agentless-ntlm-authentication-for-web-proxy

1 reply

Jasys
JasysAuthor
Explorer
January 27, 2026

Can anyone offer any advice please? NTLM is just stuck in a loop asking for credentials, i need the logged in user to pass transparently