Testing NTLM/Kerberos against a public URL

I am creating a Java open source package that makes it easy to connect with HttpClient 3.1 to resources that are protected by NTLm v1/v2 and Kerberos.

I need to test this tool against real world servers. Are there any publicly available endpoints that are protected by NTLM or Kerberos that I can get a user and password to test against?

Basically I am looking for something like Browserspy for NTLM/Kerberos. Also a public site using self signed certificates would be helpful for testing.


A bit late to the party but ...

The freeipa project has a public demo realm. See the instructions.

$ kinit [email protected]
Password for [email protected]: 
$ klist 
Ticket cache: KEYRING:persistent:1000:1000
Default principal: [email protected]

Valid starting       Expires              Service principal
05/09/2019 20:53:50  05/10/2019 20:53:44    krbtgt/[email protected]
$ klist 
Ticket cache: KEYRING:persistent:1000:1000
Default principal: [email protected]

Valid starting       Expires              Service principal
05/09/2019 20:54:21  05/10/2019 20:53:44  HTTP/[email protected]
05/09/2019 20:54:21  05/10/2019 20:53:44  HTTP/ipa.demo1.freeipa.org@
05/09/2019 20:53:50  05/10/2019 20:53:44  krbtgt/[email protected]

The http ticket appeared after kinit'ing and visiting https://ipa.demo1.freeipa.org