This is the mail archive of the
cygwin
mailing list for the Cygwin project.
Re: thousands of NTLM requests per day
- From: Andrey Repin <anrdaemon at yandex dot ru>
- To: Andrew Schulman <schulman dot andrew at epa dot gov>, cygwin at cygwin dot com
- Date: Tue, 28 Feb 2017 19:30:04 +0300
- Subject: Re: thousands of NTLM requests per day
- Authentication-results: sourceware.org; auth=none
- Authentication-results: smtp2h.mail.yandex.net; dkim=pass header.i=@yandex.ru
- References: <bi4bbc1qpuhhp2pquc9ui5kfp74jj9n42b@4ax.com>
- Reply-to: cygwin at cygwin dot com
Greetings, Andrew Schulman!
> I got a call from our domain admins, asking me if I knew why my Windows 7
> host would be sending many thousands of NTLMv1 authentication requests per
> day. I don't know, and we're still trying to find out which application is
> doing that, but here's what I wonder:
> Could Cygwin be responsible for the authentication requests? I wonder about
> this because Cygwin now queries Windows for user and group information that
> used to be kept statically in /etc/passwd and /etc/group.
Do you use cygserver ? If not, try to set it up, it should help with domain
information caching. If the problem you observe is caused by Cygwin activity,
you should see a decrease in such requests.
> I don't know much about this. Sorry if it's an obtuse question. Any general
> information would be appreciated.
--
With best regards,
Andrey Repin
Tuesday, February 28, 2017 19:28:37
Sorry for my terrible english...
--
Problem reports: http://cygwin.com/problems.html
FAQ: http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple