Automic VaultAutomic Vault

brew

Install cntlm with Homebrew, apk, apt, dnf, MacPorts, Nix, zypper

NTLM authentication proxy with tunneling. Version 0.92.3 via Homebrew; verified from local package data.

Install commandSecurity notes

install

Additional install commands

macOS

Homebrewverified · 100%
brew install cntlm

local Homebrew formula metadata

MacPortsverified · 94%
sudo port install cntlm

MacPorts ports tree · net/cntlm/Portfile · source: api.github.com

Linux

Alpine Linux apkverified · 92%
sudo apk add cntlm

Alpine Linux edge package indexes · cntlm · source: dl-cdn.alpinelinux.org

Debian aptverified · 92%
sudo apt install cntlm

Debian stable package indexes · cntlm · source: deb.debian.org

Fedora dnfverified · 92%
sudo dnf install cntlm

Fedora Rawhide package metadata · cntlm · source: dl.fedoraproject.org

Nixverified · 92%
nix profile install nixpkgs#cntlm

nixpkgs package indexes · pkgs/by-name/cn/cntlm/package.nix · source: api.github.com

openSUSE zypperverified · 92%
sudo zypper install cntlm

openSUSE Tumbleweed package metadata · cntlm · source: download.opensuse.org

overview

Package summary

NTLM authentication proxy with tunneling

Commands and aliases

  • cntlm

history

Project history and usage

Cntlm is a small C NTLM/NTLM Session Response/NTLMv2 authenticating HTTP proxy with TCP/IP tunneling, built to let applications that lack NTLM support work behind corporate Microsoft-style proxy infrastructure.

Project history

The official SourceForge site presents Cntlm as a cross-platform proxy written in plain C with no external dependencies, connection caching, tunneling, SOCKS5 mode, and support for parent proxy failover. The project's public news shows active 0.35-era work in 2007, a larger 0.91 rewrite/testing cycle in 2010, and 0.92.x Windows and packaging fixes in 2011-2012.

Adoption history

Cntlm was adopted by Unix users working behind NTLM-authenticated corporate proxies, especially when command-line package managers, browsers, version-control clients, or build tools could use a normal local HTTP proxy but could not authenticate to NTLM directly. This batch input records packages in Alpine, Homebrew, Debian, Fedora, MacPorts, Nix, Ubuntu, and openSUSE.

How it is used

Users configure usernames, domains, parent proxies, and password hashes in cntlm.conf or cntlm.ini, then point applications at the local Cntlm listener. The official site emphasizes authenticated connection reuse, multiple parent proxies, TCP/IP port forwarding, SOCKS5 proxy mode, and running on Unix and Windows.

Why package nerds care

Cntlm is significant as a pragmatic corporate-network survival package: small, old, and often invisible, but essential when bootstrap tools such as package managers, Git/SVN, language installers, or build systems need ordinary HTTP proxy access through an NTLM-only network.

Timeline

  • 2007: Version 0.35 brought FreeBSD support, Debian packaging visibility, and built-in SOCKS5 proxy support.
  • 2010: 0.91 release candidates tested a major rewrite with standalone proxy behavior, WWW authentication support, Windows installer work, and packaging targets.
  • 2011: Version 0.92 appeared with bug fixes and feature work after the 0.35.1 stable era.
  • 2012: 0.92.3 and updated manual/WebSVN notes were published while 0.93 testing was requested.

Related projects

  • NTLMAPS is the older Python NTLM proxy that Cntlm documentation compares itself against.
  • Squid, Tinyproxy, WinGate, NetCache, and Microsoft ISA Server appear in Cntlm's own compatibility and proxy discussion.

security posture

Risk level: orange

formula declares a Homebrew service.

Risk classifier

orange risk · medium confidence · infrastructure

Why

  • formula declares a Homebrew service

Signals

  • metadata:service

Install behavior

  • No Homebrew post-install hook is recorded in formula metadata.
  • Formula metadata declares a service or daemon block.
  • Homebrew bottle metadata is available for 13 platform targets.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix
/etc/cntlm.conf/usr/local/etc/cntlm.conf
Windows
%PROGRAMFILES%\Cntlm\cntlm.ini

Credential files

Credential-bearing paths to review before unattended agent runs.

Unix
/etc/cntlm.conf/usr/local/etc/cntlm.conf
Windows
%PROGRAMFILES%\Cntlm\cntlm.ini

executables

Installed executables

CommandKindExposureNote
cntlmcliglobal executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-07-08
manager version0.92.3
manager updated
local dataok
upstreamnot checked
latest detectednot detected

https://cntlm.sourceforge.net/

  • infoNo package-manager update timestamp was available.low confidence
  • infoRelease/tag comparison is only available for GitHub repositories.https://cntlm.sourceforge.net/none confidence

install metadata

Package metadata

Package keybrew:cntlm
Version0.92.3
Package managerHomebrew
Package manager pagehttps://formulae.brew.sh/formula/cntlm
Homepagehttps://cntlm.sourceforge.net/
Repositoryhttps://sourceforge.net/p/cntlm/code
Upstream docshttps://cntlm.sourceforge.net/
LicenseGPL-2.0-only
Source archivehttps://downloads.sourceforge.net/project/cntlm/cntlm/cntlm%200.92.3/cntlm-0.92.3.tar.bz2
Bottleavailable (on arm64_big_sur, arm64_linux, arm64_monterey, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, big_sur, catalina, monterey, sonoma, ventura, x86_64_linux)
Homebrew post-installnot defined
Servicedeclared
CaveatsEdit $HOMEBREW_PREFIX/etc/cntlm.conf to configure Cntlm

registry facts

Source database details

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namecntlm
Version Scheme0
Revision0
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Debian apt95%

cntlm 0.92.3-1.3

Fast NTLM authentication proxy with tunneling

http://cntlm.sourceforge.net/

sudo apt install cntlm
  • Section: net
  • Architecture: amd64
  • 2 dependencies
  • normalized package name match
  • Matched by: Cntlm
Debian stable package indexes · deb.debian.org · Debian stable package indexes: cntlm from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Nix95%

cntlm

nix profile install nixpkgs#cntlm
  • normalized package name match
  • Matched by: Cntlm
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/cn/cntlm/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
Ubuntu apt95%

cntlm 0.92.3-1.3build1

Fast NTLM authentication proxy with tunneling

http://cntlm.sourceforge.net/

sudo apt install cntlm
  • Section: universe/net
  • Architecture: amd64
  • 2 dependencies
  • normalized package name match
  • Matched by: Cntlm
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: cntlm from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
apk95%

cntlm 0.92.3-r5

NTLM Session Response / NTLMv2 authenticating HTTP proxy

https://cntlm.sourceforge.net/

sudo apk add cntlm
  • License: GPL-2.0-or-later
  • Architecture: x86_64
  • Source Package: cntlm
  • 1 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Cntlm
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: cntlm from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
apk95%

cntlm-doc 0.92.3-r5

NTLM Session Response / NTLMv2 authenticating HTTP proxy (documentation)

https://cntlm.sourceforge.net/

sudo apk add cntlm-doc
  • License: GPL-2.0-or-later
  • Architecture: x86_64
  • Source Package: cntlm
  • normalized package name match
  • Matched by: Cntlm
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: cntlm-doc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
apk95%

cntlm-openrc 0.92.3-r5

NTLM Session Response / NTLMv2 authenticating HTTP proxy (OpenRC init scripts)

https://cntlm.sourceforge.net/

sudo apk add cntlm-openrc
  • License: GPL-2.0-or-later
  • Architecture: x86_64
  • Source Package: cntlm
  • normalized package name match
  • Matched by: Cntlm
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: cntlm-openrc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
dnf95%

cntlm 0.92.3-34.fc44

Fast NTLM authentication proxy with tunneling

http://cntlm.sourceforge.net/

sudo dnf install cntlm
  • License: GPL-2.0-or-later
  • Category: Unspecified
  • Architecture: x86_64
  • Source Package: cntlm
  • 6 dependencies
  • 4 provides
  • normalized package name match
  • Matched by: Cntlm
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: cntlm from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst
zypper95%

cntlm 0.92.3-13.6

Fast NTLM authentication proxy with tunneling

http://cntlm.sourceforge.net/

sudo zypper install cntlm
  • License: GPL-2.0-or-later
  • Category: Productivity/Networking/Web/Proxy
  • Architecture: x86_64
  • Source Package: cntlm
  • 9 dependencies
  • 3 provides
  • normalized package name match
  • Matched by: Cntlm
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: cntlm from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst
MacPorts95%

cntlm

sudo port install cntlm
  • normalized package name match
  • Matched by: Cntlm
MacPorts ports tree · api.github.com · MacPorts ports tree: net/cntlm/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

package graph

Links come from deterministic package relationships, av.db category and tag curation, ecosystem matches, and package hub membership.

Same workflow

  • connectShares av.db curated category or tags: cli, networking, proxy, tunneling.
  • gotunShares av.db curated category or tags: cli, networking, proxy, tunneling.
  • pwnatShares av.db curated category or tags: cli, networking, proxy, tunneling.
  • sshuttleShares av.db curated category or tags: cli, networking, proxy, tunneling.
  • trojan-goShares av.db curated category or tags: cli, networking, proxy, tunneling.
  • tun2proxyShares av.db curated category or tags: cli, networking, proxy, tunneling.

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated configuration and credential file locations
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment