{"id":122424,"date":"2024-06-05T10:02:20","date_gmt":"2024-06-05T01:02:20","guid":{"rendered":"https:\/\/softantenna.com\/blog\/?p=122424"},"modified":"2024-06-05T10:02:20","modified_gmt":"2024-06-05T01:02:20","slug":"microsoft-deprecate-ntlm","status":"publish","type":"post","link":"https:\/\/softantenna.com\/blog\/microsoft-deprecate-ntlm\/","title":{"rendered":"Microsoft\u3001NTLM(New Technology Lan Manager)\u3092\u975e\u63a8\u5968\u5316"},"content":{"rendered":"

\"S<\/p>\n

Microsoft\u306f6\u67083\u65e5(\u73fe\u5730\u6642\u9593)\u3001\u300cNTLM\u300d\u3092\u975e\u63a8\u5968\u6a5f\u80fd\u3068\u3059\u308b\u4e8b\u3092\u767a\u8868<\/a>\u3057\u307e\u3057\u305f(Neowin<\/a>)\u3002<\/p>\n

Windows\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u306e\u975e\u63a8\u5968\u6a5f\u80fd\u30ea\u30b9\u30c8\u306b\u8ffd\u52a0\u3055\u308c\u305f\u8aac\u660e\u306b\u3088\u308b\u3068\u3001\u300cLANMAN\u3001NTLMv1\u3001NTLMv2\u3092\u542b\u3080NTLM(New Technology Lan Manager)\u306e\u5168\u30d0\u30fc\u30b8\u30e7\u30f3\u306f\u3001\u73fe\u5728\u30a2\u30af\u30c6\u30a3\u30d6\u306a\u6a5f\u80fd\u958b\u767a\u304c\u884c\u306a\u308f\u308c\u3066\u304a\u3089\u305a\u3001\u975e\u63a8\u5968\u3068\u3055\u308c\u308b\u300d\u3068\u306e\u3053\u3068\u3002<\/p>\n

\u305f\u3060\u3057\u3001NTLM\u306e\u4f7f\u7528\u306f\u3001Windows Server\u306e\u6b21\u671f\u30ea\u30ea\u30fc\u30b9\u3084 Windows\u306e\u6b21\u671f\u30ea\u30ea\u30fc\u30b9\u3067\u3082\u7d99\u7d9a\u3055\u308c\u308b\u4e88\u5b9a\u3067\u3067\u3059\u3002<\/p>\n

Microsoft\u306f\u3001NTLM\u3078\u306e\u547c\u3073\u51fa\u3057\u306f\u3001Kerberos\u306b\u3088\u308b\u8a8d\u8a3c\u3092\u8a66\u307f\u3001\u5fc5\u8981\u306a\u5834\u5408\u306b\u306e\u307fNTLM\u306b\u30d5\u30a9\u30fc\u30eb\u30d0\u30c3\u30af\u3059\u308bNegotiate\u3078\u306e\u547c\u3073\u51fa\u3057\u306b\u7f6e\u304d\u63db\u3048\u308b\u3079\u304d\u3060\u3068\u8aac\u660e\u3057\u3066\u3044\u307e\u3059\u3002<\/p>\n

Negotiate\u30d7\u30ed\u30c8\u30b3\u30eb\u306e\u7f6e\u304d\u63db\u3048\u306b\u3064\u3044\u3066\u6b21\u306e\u3088\u3046\u306b\u8aac\u660e<\/a>\u3055\u308c\u3066\u3044\u307e\u3059\u3002<\/p>\n

\nIn many cases, applications should be able to replace NTLM with Negotiate using a one-line change in their AcquireCredentialsHandle request to the SSPI. One known exception is for applications that have made hard assumptions about the maximum number of round trips needed to complete authentication. In most cases, Negotiate will add at least one additional round trip. Some scenarios may require additional configuration. For more information, see Kerberos authentication troubleshooting guidance.<\/p>\n

\u591a\u304f\u306e\u5834\u5408\u3001\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u306f SSPI \u306b\u5bfe\u3059\u308b AcquireCredentialsHandle \u30ea\u30af\u30a8\u30b9\u30c8\u3092\u4e00\u884c\u5909\u66f4\u3059\u308b\u3060\u3051\u3067\u3001NTLM \u3092 Negotiate \u306b\u7f6e\u304d\u63db\u3048\u308b\u3053\u3068\u304c\u3067\u304d\u308b\u3002\u65e2\u77e5\u306e\u4f8b\u5916\u3068\u3057\u3066\u3001\u8a8d\u8a3c\u3092\u5b8c\u4e86\u3059\u308b\u305f\u3081\u306b\u5fc5\u8981\u306a\u30e9\u30a6\u30f3\u30c9\u30c8\u30ea\u30c3\u30d7\u306e\u6700\u5927\u56de\u6570\u306b\u3064\u3044\u3066\u3001\u53b3\u5bc6\u306a\u4eee\u5b9a\u3092\u884c\u306a\u3063\u3066\u3044\u308b\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u304c\u3042\u308b\u3002\u307b\u3068\u3093\u3069\u306e\u5834\u5408\u3001Negotiate \u306f\u5c11\u306a\u304f\u3068\u3082 1 \u30e9\u30a6\u30f3\u30c9\u30c8\u30ea\u30c3\u30d7\u3092\u8ffd\u52a0\u3059\u308b\u3002\u30b7\u30ca\u30ea\u30aa\u306b\u3088\u3063\u3066\u306f\u3001\u8ffd\u52a0\u306e\u8a2d\u5b9a\u304c\u5fc5\u8981\u306a\u5834\u5408\u3082\u3042\u308b\u3002\u8a73\u7d30\u306b\u3064\u3044\u3066\u306f\u3001Kerberos \u8a8d\u8a3c\u306e\u30c8\u30e9\u30d6\u30eb\u30b7\u30e5\u30fc\u30c6\u30a3\u30f3\u30b0\u30ac\u30a4\u30c0\u30f3\u30b9\u3092\u53c2\u7167\u306e\u3053\u3068\u3002\n<\/p><\/blockquote>\n

NTLM\u306f1993\u5e74\u306eWindows NT 3.1\u304b\u3089\u3001Kerberos\u306fWindows 2000 Service Pack 4(SP4)\u304b\u3089\u5b58\u5728\u3059\u308b\u30e6\u30fc\u30b6\u30fc\u8a8d\u8a3c\u306e\u65b9\u5f0f\u3067\u3059\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"

Microsoft\u306f6\u67083\u65e5(\u73fe\u5730\u6642\u9593)\u3001\u300cNTLM\u300d\u3092\u975e\u63a8\u5968\u6a5f\u80fd\u3068\u3059\u308b\u4e8b\u3092\u767a\u8868\u3057\u307e\u3057\u305f(Neowin)\u3002 Windows\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u306e\u975e\u63a8\u5968\u6a5f\u80fd\u30ea\u30b9\u30c8\u306b\u8ffd\u52a0\u3055\u308c\u305f\u8aac\u660e\u306b\u3088\u308b\u3068\u3001\u300cLANMAN\u3001NTLMv1\u3001NTLMv2 […]<\/p>\n","protected":false},"author":2,"featured_media":122425,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"swell_btn_cv_data":"","footnotes":""},"categories":[3],"tags":[87],"class_list":["post-122424","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-windows","tag-microsoft"],"_links":{"self":[{"href":"https:\/\/softantenna.com\/blog\/wp-json\/wp\/v2\/posts\/122424","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/softantenna.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/softantenna.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/softantenna.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/softantenna.com\/blog\/wp-json\/wp\/v2\/comments?post=122424"}],"version-history":[{"count":0,"href":"https:\/\/softantenna.com\/blog\/wp-json\/wp\/v2\/posts\/122424\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/softantenna.com\/blog\/wp-json\/wp\/v2\/media\/122425"}],"wp:attachment":[{"href":"https:\/\/softantenna.com\/blog\/wp-json\/wp\/v2\/media?parent=122424"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/softantenna.com\/blog\/wp-json\/wp\/v2\/categories?post=122424"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/softantenna.com\/blog\/wp-json\/wp\/v2\/tags?post=122424"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}