[Samba] smbclient -k works; mount -t cifs does not

[Mike Leone]

I am confused (nothing new there ...). I have 2 Ubuntu 9.10 Samba
servers. I am trying to mount a share from the other (i.e., "workhorse"
is trying to mount a share on "dual-booter"). If I specify a smbmount
command with a -k option, I can mount the share:

turgon@workhorse:~$ klist
Ticket cache: FILE:/tmp/krb5cc_1000
Default principal: tur...@DACRIB.LOCAL

Valid starting Expires Service principal
05/03/10 18:55:31 05/04/10 04:55:31 krbtgt/DACRIB...@DACRIB.LOCAL
renew until 05/09/10 22:56:03
05/03/10 23:07:07 05/04/10 04:55:31
cifs/dual-booter....@DACRIB.LOCAL
renew until 05/09/10 22:56:03

turgon@workhorse:~$ smbclient //dual-booter/TestShare /mnt -k
Domain=[DACRIB] OS=[Unix] Server=[Samba 3.4.0]
smb: \> ls
. D 0 Sat May 1 19:27:48 2010
.. D 0 Mon May 3 19:58:00 2010
TestFile 0 Sat May 1 19:27:48 2010

37555 blocks of size 524288. 22379 blocks available

However, I can't seem to mount it using mount -t cifs:

$ sudo mount -t cifs //dual-booter/TestShare /mnt -o username=DACRIB+turgon
[sudo] password for turgon:
Password:
mount error(13): Permission denied
Refer to the mount.cifs(8) manual page (e.g. man mount.cifs)

What I'd like to do is to set this in /etc/fstab. But there seems to be
no way to use Kerberos to authenticate the mounting, and it's only
Kerberos (and smbmount) that seems to work. And using the "-o sec=krb5"
options on mount doesn't seem to work, either.

$ sudo mount -t cifs //dual-booter/TestShare /mnt -o sec=krb5
mount error(2): No such file or directory
Refer to the mount.cifs(8) manual page (e.g. man mount.cifs)

Anyone? I really don't want to have to make a script that uses smbmount
-k, running on login, rather than in /etc/fstab.

Thanks
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba

[Ludek Finstrle]

Hello,

Mon, May 03, 2010 at 11:25:13PM -0400, Mike Leone napsal(a):

> I am confused (nothing new there ...). I have 2 Ubuntu 9.10 Samba
> servers. I am trying to mount a share from the other (i.e., "workhorse"
> is trying to mount a share on "dual-booter"). If I specify a smbmount
> command with a -k option, I can mount the share:

there was a bug (https://bugzilla.redhat.com/show_bug.cgi?id=565446).
I'm not sure in which samba version. Please check it. RH guys fixed it.

Regards,

Luf

[Jeff Layton]

Try using the FQDN of the server in the UNC. For instance:

//dual-booter.dacrib.local/TestShare

> Anyone? I really don't want to have to make a script that uses smbmount
> -k, running on login, rather than in /etc/fstab.
>
> Thanks

--
Jeff Layton <jla...@poochiereds.net>

[Rob Townley]

First, i use Fedora / Centos.

mount.cifs is actually a different mailing list - linux-cifs-client
http://lists.samba.org/pipermail/linux-cifs-client

mount.cifs has had changes when it comes to setuid security issues.
You may have to do something special.

The files under /proc/fs/cifs/ are your best bet for debugging
mount.cifs. Verbosity can be turned up and extensions turned on.

i feel the pain. There are at least 3 seemingly totally different
ways to mount a remote samba filesystem and always have a hard time
remembering where to look for troubleshooting info. Would have
thought a single open source core would have arrived but now it seems
more splintered than ever.

1.) mount.cifs - intertwined with linux kernel -
linux-ci...@lists.samba.org
2.) smbclient - separated from kernel - sa...@lists.samba.org
3.) fuse-smb
4.) gvfs-smb / gigolo / gvfs-fuse - gtk.org
5.) kde analogues to gvfs

[Mike Leone]

On 5/4/2010 3:18 PM, Rob Townley had this to say:

>>> $ sudo mount -t cifs //dual-booter/TestShare /mnt -o sec=krb5
>>> mount error(2): No such file or directory
>>> Refer to the mount.cifs(8) manual page (e.g. man mount.cifs)
>>>
>>
>> Try using the FQDN of the server in the UNC. For instance:
>>
>> //dual-booter.dacrib.local/TestShare

Nothing. I used the FQDN in /etc/fstab, and nothing happens. No error
listed, but also nothing mounts.

[Helmut Hullen]

Hallo, Mike,

tur...@mike-leone.com meinte am 04.05.10 in Samba zum Thema Re: [Samba] smbclient -k works; mount -t cifs does not:

>>>> $ sudo mount -t cifs //dual-booter/TestShare /mnt -o sec=krb5
>>>> mount error(2): No such file or directory

>>> Try using the FQDN of the server in the UNC. For instance:
>>>
>>> //dual-booter.dacrib.local/TestShare

> Nothing. I used the FQDN in /etc/fstab, and nothing happens. No error
> listed, but also nothing mounts.

It's no good idea to put a (perhaps not working) mount directive into "/
etc/fstab".

What you want has to work at least in a command line, and then (and
there) you can see more messages.

Viele Gruesse!
Helmut

[Mike Leone]

On 05/04/2010 04:43 PM, Helmut Hullen wrote:
> Hallo, Mike,
>
> tur...@mike-leone.com meinte am 04.05.10 in Samba zum Thema Re: [Samba] smbclient -k works; mount -t cifs does not:
>
>
>>>>> $ sudo mount -t cifs //dual-booter/TestShare /mnt -o sec=krb5
>>>>> mount error(2): No such file or directory
>>>>>
>
>>>> Try using the FQDN of the server in the UNC. For instance:
>>>>
>>>> //dual-booter.dacrib.local/TestShare
>>>>
>
>> Nothing. I used the FQDN in /etc/fstab, and nothing happens. No error
>> listed, but also nothing mounts.
>>
> It's no good idea to put a (perhaps not working) mount directive into "/
> etc/fstab".
>
> What you want has to work at least in a command line, and then (and
> there) you can see more messages.
>

It does work from the command line, when mounting using Kerberos
options. It does not work in /etc/fstab. :-)

I've since upgraded my laptop to Xubuntu 10.04 (a clean install). This
uses Samba 3.4.7, as opposed to my previous 3.4.0.

So basically I will be starting over from scratch, and we'll see how it
goes. :-)