Connection Point Shared Folder with Azure File Share

bensode · 2025-06-27T12:35:15+00:00

There was an error rendering this rich post.

Has anyone successfully created an ION connection point Shared Folder with an Azure AD-joined file share? SMB2 Azure file share with AD account that can map with the account from the EC, test successfully from the Connection tab but throws an authentication error when testing the document workflow.

Message: com.hierynomus.mssmb2.SMBApiException: STATUS_LOGON_FAILURE (0xc000006d): Authentication failed for 'xxx@xxx' using com.hierynomus.smbj.auth.NtlmAuthenticator@45ef6b5b

Find more posts tagged with

Accepted answers

All comments

Kevin Heiman

Have you researched logs on the target system ?
Test button is more about the hostname resolution, not authentication.
Does the same account work in a client connection test, i.e. map network drive or net use X: \SERVER\Share ?

bensode

Hi Kevin. Yes the file share does map from net use. I've also tried adding the user and group to each of the SMB roles directly as well as the NTFS permissions after mounting but haven't had any luck. I do know that share permissions do take a few minutes to propogate so I've ensured waiting by testing small security changes over the last few days. As for logs - which logs would you suggest? It looks like a java error based on my initial web searches that led me down a rabbit hole.

Kevin Heiman

First place would be to review the Enterprise Connector logs via the AdminUI . There would also be logs in Azure . doing a quick google search example
Are you using local account or a domain account. I think ION SMB must be a local account. I would at least look at logs and try a local account.

CoPilot offered several tips on Azure troubleshooting, I used "how do I look at logs for a azure SMB connection failing for authentication smbapiexception". One of those is:

To view logs and diagnose the issue:

1. Enable Diagnostic Logging in Azure

Go to your Storage Account in the Azure Portal.
Navigate to Monitoring > Diagnostic settings.
Enable logging for File service and select Read, Write, and Delete operations.
Logs will be stored in a designated Log Analytics workspace or Storage Account.

bensode

I'll check the EC logs the Azure logs didn't turn up anything useful around the ION attempts. Not sure how I can utilize a local account for an Azure Storage File Share unless it is a cloud-only account — hadn't thought to try that and assign it to RBAC so I will give that a go while looking at the EC logs in parallel. Thansk for the suggestions will give those a go.

Copyright © 2025 Infor. All rights reserved.