thousands of NTLM requests per day

Andrew Schulman schulman.andrew@epa.gov
Tue Feb 28 15:17:00 GMT 2017


I got a call from our domain admins, asking me if I knew why my Windows 7
host would be sending many thousands of NTLMv1 authentication requests per
day. I don't know, and we're still trying to find out which application is
doing that, but here's what I wonder:

Could Cygwin be responsible for the authentication requests? I wonder about
this because Cygwin now queries Windows for user and group information that
used to be kept statically in /etc/passwd and /etc/group.

I don't know much about this. Sorry if it's an obtuse question. Any general
information would be appreciated.

Andrew


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple



More information about the Cygwin mailing list