NTLM auth on another domain returns SEC_E_LOGON_DENIED

[willjouo]

Hello,

Sorry if this is a dumb topic or question, but this is the first time I have to deal with Active Directory, NTLM or even Kerberos stuff.

I've implemented node-express-sspi in my nodejs app and successfully make it work in a Kerberos scenario with 3 VMs like the one you wrote in the docs. But it does not work after installing it in production, mainly because apparently the active directory domain in which the users are (for example "users.local") is not the same domain as the server hosting the nodejs app (e.g. "servers.local"). NTLM is purposely used. Users get a "SEC_E_LOGON_DENIED (incorrect login/password [...])" error, no matter if they write their domain before their names or not (william or USERS\william) in the credentials popup (and we double-checked login/password of course).

The IT guy asked me if it is possible to somehow configure in my nodejs app on which domain/active directory server the credentials should be.

Is there something I can do? Do you have an idea how to solve my issue?

Thank you in advance! Awesome library by the way!