# Alert Notification getting NTLM supported error

**URL:** <https://forum.inductiveautomation.com/t/alert-notification-getting-ntlm-supported-error/7008>\
**Category:** Ignition\
**Created:** [August 9, 2013, 1:45pm UTC](https://forum.inductiveautomation.com/t/alert-notification-getting-ntlm-supported-error/7008 "2013-08-09T13:45:17Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![davisr19](https://avatars.discourse-cdn.com/v4/letter/d/76d3ee/32.png) [@davisr19](https://forum.inductiveautomation.com/u/davisr19)\
**Post date:** [August 9, 2013, 1:45pm UTC](https://forum.inductiveautomation.com/t/alert-notification-getting-ntlm-supported-error/7008/1 "2013-08-09T13:45:17Z")

</div>

We are receiving the follow error when sending alert notifications:

```auto
javax.mail.AuthenticationFailedException: 334 NTLM supported
```

The customer claims their exchange server is configured for SMTP and POP.

Would we receive this error if that were true?

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [August 9, 2013, 2:55pm UTC](https://forum.inductiveautomation.com/t/alert-notification-getting-ntlm-supported-error/7008/2 "2013-08-09T14:55:50Z")

</div>

I’m not sure, but you can find out pretty easily by opening telnet to the hostname and port they’ve configured for SMTP and seeing if you get a 220 response code from the mail server. Maybe even issue a HELO.

---

<div class="post-metadata">

**Author:** ![davisr19](https://avatars.discourse-cdn.com/v4/letter/d/76d3ee/32.png) [@davisr19](https://forum.inductiveautomation.com/u/davisr19)\
**Post date:** [August 9, 2013, 3:10pm UTC](https://forum.inductiveautomation.com/t/alert-notification-getting-ntlm-supported-error/7008/3 "2013-08-09T15:10:29Z")

</div>

OK I receive a 220 reply from the server.

I receive an 500 5.3.3 Unrecognized command reply to entering HELO

---

<div class="post-metadata">

**Author:** ![davisr19](https://avatars.discourse-cdn.com/v4/letter/d/76d3ee/32.png) [@davisr19](https://forum.inductiveautomation.com/u/davisr19)\
**Post date:** [August 9, 2013, 5:24pm UTC](https://forum.inductiveautomation.com/t/alert-notification-getting-ntlm-supported-error/7008/4 "2013-08-09T17:24:57Z")

</div>

Using telnet to port 25 on the mail server, and using the EHLO instead of the HELO command we get a list of capabilities from the server. One of these is AUTH NTLM, indicating that NTLM authorization is available on this server. (It appears to be REQUIRED on this particular server)

NTLM is an SMTP extension used by Microsoft for user authentication and is not part of the SMTP standard.

Does anyone have a workaround for accessing NTLM-configured MS Exchange mail servers?

Thank you,

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [August 9, 2013, 5:56pm UTC](https://forum.inductiveautomation.com/t/alert-notification-getting-ntlm-supported-error/7008/5 "2013-08-09T17:56:05Z")

</div>

I’ve done a little googling… it looks like it might be expecting a fully-qualified windows user instead of an email address to login, e.g. ‘MyDomain\JoeUser’.

Other than that I don’t really know where else to go on this.

---

<div class="post-metadata">

**Author:** ![davisr19](https://avatars.discourse-cdn.com/v4/letter/d/76d3ee/32.png) [@davisr19](https://forum.inductiveautomation.com/u/davisr19)\
**Post date:** [August 12, 2013, 8:14pm UTC](https://forum.inductiveautomation.com/t/alert-notification-getting-ntlm-supported-error/7008/6 "2013-08-12T20:14:30Z")

</div>

Thank you for looking too Kevin.

We tried adding the domain to the user name with no success.

Most of the workarounds I see on the web work at the java library level. I can’t believe we’re the first ones to face this problem.

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [August 12, 2013, 8:17pm UTC](https://forum.inductiveautomation.com/t/alert-notification-getting-ntlm-supported-error/7008/7 "2013-08-12T20:17:38Z")

</div>

The next 7.6.3 release candidate should have a ‘debug’ mode on email alarm notification profiles that will log the entire back and forth between Ignition and the SMTP server to wrapper.log… maybe this will give us some additional clues.

---

<div class="post-metadata">

**Author:** ![davisr19](https://avatars.discourse-cdn.com/v4/letter/d/76d3ee/32.png) [@davisr19](https://forum.inductiveautomation.com/u/davisr19)\
**Post date:** [October 4, 2013, 11:41am UTC](https://forum.inductiveautomation.com/t/alert-notification-getting-ntlm-supported-error/7008/8 "2013-10-04T11:41:11Z")

</div>

We finally resolved this problem.

Exchange server allows the configuration of alternative SMTP Connectors.

[blogs.technet.com/b/exchange/arc … 97620.aspx](http://blogs.technet.com/b/exchange/archive/2006/12/28/3397620.aspx)

We set up a custom connector that will only accept connections from the Ignition server’s IP address and without requiring the NTLM authentication that was giving so much trouble.
