Users fails to Login into Spotfire with NTLM Authentication with error: "Caused by: jcifs.smb.SmbException: Logon failure: user not allowed to log on to this computer."

Users fails to Login into Spotfire with NTLM Authentication with error: "Caused by: jcifs.smb.SmbException: Logon failure: user not allowed to log on to this computer."

book

Article ID: KB0082007

calendar_today

Updated On:

Products Versions
Spotfire Server All Versions

Description

Users are unable to login to Spotfire in NTLM SSO Authentication setup.

Symptoms:
1) Login Failure in Spotfire in NTLM SSO Authentication.
2) The TIBCO Spotfire Server logs shows the following message:
-----------------------------------------------------------------------------------------
DEBUG 2018-01-04T08:51:52,972+0930 [unknown, #7] server.security.JespaAdapter: NTLM authentication error
jespa.security.SecurityProviderException: NETLOGON failure
    at jespa.ntlm.NtlmSecurityProvider.authenticate(NtlmSecurityProvider.java:1397)
    at jespa.ntlm.NtlmSecurityProvider.acceptSecContext(NtlmSecurityProvider.java:1174)
    at com.spotfire.server.security.JespaAdapter.authenticateNTLM(JespaAdapter.java:297)
    .............
    .............
Caused by: jcifs.smb.SmbException: Logon failure: user not allowed to log on to this computer.
    at jespa.ntlm.Netlogon.validate0(Netlogon.java:629)
    at jespa.ntlm.Netlogon.validate(Netlogon.java:713)
    ...........
------------------------------------------------------------------------------------------------------------------------------

Cause:
Error: "Caused by: jcifs.smb.SmbException: Logon failure: user not allowed to log on to this computer.",  states that the user does not have login permission on Spotfire Server machine.

Environment

All Supported OS

Resolution

Logon permissions to Spotfire server machine needs to be given to the failed login user in Active Directory.

Instructions to enable the permissions:
===============================
1).  Login to Active Directory Server as Domain Controller Administrator. Open Active Directory Users and Computers Console ( All Program -> Administrative tools - > Active Directory Users and Computers or  Run -> DSA.MSC ).
2).  Browse and select the affected USER (S). Right Click on the UserName  -> Go to Properties.
3).  Select “Account” Tab and then click on “Log On To” button.
4).  Make sure the radio button for “All Computers” is selected or if “The following computers” option is selected then the Spotfire Server computer name must be present in the Computer name list.

Attached document (Filename: Logon_to_all_Computer_Permissiion.docx) shows the steps with screenshots.

Issue/Introduction

Users fails to Login into Spotfire with NTLM Authentication with error: "Caused by: jcifs.smb.SmbException: Logon failure: user not allowed to log on to this computer."

Attachments

Users fails to Login into Spotfire with NTLM Authentication with error: "Caused by: jcifs.smb.SmbException: Logon failure: user not allowed to log on to this computer." get_app