[Samba] cifs and kerberos

Hi,

when I try to mount a windows share with a valide kerberos ticket :

mount.cifs //auberge.iut.lan/install_autocad /mnt/test/ -o
user='IUT\Administrateur',password=toto,sec=krb5i

I get this error :


Jun 2 12:32:51 brice-deb kernel: fs/cifs/cifs_spnego.c: key
description =
ver=0x1;host=auberge.iut.lan;ip4=10.31.0.12;sec=kr b5;uid=0x0
Jun 2 12:32:51 brice-deb cifs.spnego: keyctl_describe_alloc failed:
Invalid argument
Jun 2 12:32:51 brice-deb kernel: fs/cifs/sess.c: ssetup freeing
small buf ffff8100229c9140
Jun 2 12:32:51 brice-deb kernel: CIFS VFS: Send error in SessSetup = -126
Jun 2 12:32:51 brice-deb kernel: fs/cifs/connect.c: No session or bad tcon
Jun 2 12:32:51 brice-deb kernel: fs/cifs/connect.c: CIFS VFS:
leaving cifs_mount (xid = 10) rc = -126
Jun 2 12:32:51 brice-deb kernel: CIFS VFS: cifs_mount failed
w/return code = -126


Any idea ?

Regards,
Brice.


----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.


--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba

On Mon, Jun 2, 2008 at 5:33 AM, Brice Rouanet
<brice.rouanet@iut-tlse3.fr> wrote:
> Hi,
>
> when I try to mount a windows share with a valide kerberos ticket :
>
> mount.cifs //auberge.iut.lan/install_autocad /mnt/test/ -o
> user='IUT\Administrateur',password=toto,sec=krb5i
>

have u tried different command:

mount -t cifs -o
UID=lucas,username=administrator,password=password ,domain=mydomainname
//windowsservername/folder /home/lucas/somefolder
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba

Hallo, Lukasz,

Du (szybalski) meintest am 02.06.08:

>> when I try to mount a windows share with a valide kerberos ticket :
>>
>> mount.cifs //auberge.iut.lan/install_autocad /mnt/test/ -o
>> user='IUT\Administrateur',password=toto,sec=krb5i


> have u tried different command:

> mount -t cifs -o
> UID=lucas,username=administrator,password=password ,domain=mydomainnam
> e //windowsservername/folder /home/lucas/somefolder

"mount -t cifs" needs another syntax than "mount.cifs".

Viele Gruesse!
Helmut
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba

Hi,

this command don't use kerberos, if I use password authentification,
it works fine, but I need to use kerberos.

Brice.

> On Mon, Jun 2, 2008 at 5:33 AM, Brice Rouanet
> <brice.rouanet@iut-tlse3.fr> wrote:
>> Hi,
>>
>> when I try to mount a windows share with a valide kerberos ticket :
>>
>> mount.cifs //auberge.iut.lan/install_autocad /mnt/test/ -o
>> user='IUT\Administrateur',password=toto,sec=krb5i
>>
>
> have u tried different command:
>
> mount -t cifs -o
> UID=lucas,username=administrator,password=password ,domain=mydomainname
> //windowsservername/folder /home/lucas/somefolder
>
>



****************************************
Brice Rouanet
Technicien informatique
Département Genie Chimique
Centre de Ressources Informatiques
****************************************
Tel : 05.62.25.89.97
Tel : 05.62.25.89.19
****************************************
CRI - IUT "A" PAUL SABATIER
137, avenue de Rangueil
BP67701
31077 TOULOUSE CEDEX 04
****************************************

----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.


--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba

In the man, I can see :

WARNING: smbmount is deprecated and not maintained any longer.
mount.cifs (mount -t cifs) should be used instead of smbmount.

I use samba 3.2 rc with cifs.spnego upcall helper and not work, why ? :(

Brice.

> Look this example of smbmount with Kerberos:
> ROOT#Â* SMBMOUNT //SERVER/NETLOGON /TMP/NETLOGON/ -O KRB
> Warning: kerberos support will only work for samba servers
>
> ROOT#Â* DF
> Sist. Arq.Â*Â*Â*Â*Â*Â*Â*Â*Â*Â* 1K-blocosÂ*Â*Â*Â*Â* Usad Dispon.Â*Â*
> Uso% Montado em
> ...
> //bioquimik/netlogonÂ*Â* 7305344Â*Â* 1244544Â*Â* 6060800Â* 18%
> /tmp/netlogon
> ...
>
> ROOT#Â* KLIST
> Credentials cache: FILE:/tmp/krb5cc_0
> Â*Â*Â*Â*Â*Â*Â* Principal: eduardo@DOMAIN.COM.BR
>
> Â* IssuedÂ*Â*Â*Â*Â*Â*Â*Â*Â*Â* ExpiresÂ*Â*Â*Â*Â*Â*Â*Â*Â* Principal
> Jan 20 14:31:06Â* Jan 21 12:44:26Â*
> krbtgt/DOMAIN.COM.BR@DOMAIN.COM.BR
> JAN 20 14:31:09Â* JAN 21 12:44:26Â*
> CIFS/SERVER.DOMAIN.COM.BR@DOMAIN.COM.BR
> []`s
>
> Brice Rouanet escreveu: Hi,
>
> this command don't use kerberos, if I use password authentification,
> it works fine, but I need to use kerberos.
>
> Brice.
>
>> On Mon, Jun 2, 2008 at 5:33 AM, Brice Rouanet
>>
> href=\"mailto:brice.rouanet@iut-tlse3.fr\"><brice.rouanet@iut-tlse3.fr>
>> wrote:
>> Hi,
>>
>> when I try to mount a windows share with a valide kerberos ticket :
>>
>>
>> mount.cifs //auberge.iut.lan/install_autocad /mnt/test/ -o
>> user='IUT\Administrateur',password=toto,sec=krb5i
>
> have u tried different command:
>
> mount -t cifs -o
> UID=lucas,username=administrator,password=password ,domain=mydomainname
>
> //windowsservername/folder /home/lucas/somefolder
>
> ****************************************
> Â*Â*Â*Â*Â*Â*Â*Â*Â*Â*Â*Â*Â* Brice Rouanet
> Â*Â*Â*Â*Â*Â*Â*Â* Technicien informatique
> Â*Â*Â*Â*Â*Â*Â* Département Genie Chimique
> Â*Â*Â* Centre de Ressources Informatiques
> ****************************************
> Â*Â*Â*Â*Â*Â*Â*Â*Â* Tel : 05.62.25.89.97
> Â*Â*Â*Â*Â*Â*Â*Â*Â* Tel : 05.62.25.89.19
> ****************************************
> Â*Â*Â*Â*Â*Â* CRI - IUT "A" PAUL SABATIER
> Â*Â*Â*Â*Â*Â*Â*Â* 137, avenue de Rangueil
> Â*Â*Â*Â*Â*Â*Â*Â*Â*Â*Â*Â*Â*Â*Â*Â* BP67701
> Â*Â*Â*Â*Â*Â*Â*Â* 31077 TOULOUSE CEDEX 04
> ****************************************
>
> ----------------------------------------------------------------
> This message was sent using IMP, the Internet Messaging Program.
>
>



****************************************
Brice Rouanet
Technicien informatique
Département Genie Chimique
Centre de Ressources Informatiques
****************************************
Tel : 05.62.25.89.97
Tel : 05.62.25.89.19
****************************************
CRI - IUT "A" PAUL SABATIER
137, avenue de Rangueil
BP67701
31077 TOULOUSE CEDEX 04
****************************************

----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.


--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba