NTLM authentication in Spotfire does not work if SMB 2.0 or higher versions are enabled on Domain Controller.

NTLM authentication in Spotfire does not work if SMB 2.0 or higher versions are enabled on Domain Controller.

NTLM authentication set up with SMB 2.0 or later versions enabled on a domain controller will not work in Spotfire. Server logs will show the following error when SMB 2.0 or later is enabled.

caused by: jcifs.smb.smbexception: failed to connect
jcifs.util.transport.transportexception: connection in error

This is a known issue when using SMB 2.0 or later, as NTLM only works with SMB 1.0 enabled in Spotfire. Spotfire uses the third party component "Jespa" for NTLM which uses SMB internally. Currently Spotfire does not make use of the required Jespa versions that supports SMB 2.0 or later. Only Jespa version 1.2 or later started supporting SMB 2.0 or later.

To resolve the issue, set up NTLM with SMB 1.0 enabled, or apply the following hotfixes:

• TSS 7.6.1 HF-013 or higher
• TSS 7.7.1 HF-008 or higher
• TSS 7.8.1 HF-007 or higher
• TSS 7.9.0 HF-002 or higher
• TSS 7.10.0 HF-001 or higher

https://www.ioplex.com/jespa_release.html