F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

Sam_Hall's avatar
Sam_Hall
Icon for Nimbostratus rankNimbostratus
Oct 10, 2013

NTLM advice please

We're planning on hosting HP TRIM server for some clients on a separate domain. My understanding is the client software uses NTLM to pass credentials to the server and this is the only authentication...
design
ntlm
Sam_Hall's avatar
Sam_Hall
Icon for Nimbostratus rankNimbostratus
Nov 10, 2013

I discovered HP TRIM client/server traffic uses RCF (Remote Call Framework) over TCP port 1137 for TRIM client traffic, this is encapsulated within NTLM or Kerberos which provides both the authentication mechanism as well as some level of encryption. There are no alternative authentication options available.

 

HP recommends deploying a "Workgroup Server" on each site and then have a central database. That's not ideal in this situation as we were hoping to offer the service from entirely within our own infrastructure.

 

Another viable option would be to ask that the clients firstly establish a VPN connection, but then we would still have to overcome the issue of mapping user credentials which goes away if we have them host the TRIM Workgroup Server on their own domain. I guess we could trust the VPN allocated IP address at that stage and attempt to offload NTLM or something, though I'm not sure it's worth the effort. We'll probably present them with the options of setting up cross domain trust vs. hosting their own TRIM Workgroup Server.