samba - May 2010 - smbclient -k works; mount -t cifs does not

I am confused (nothing new there ...). I have 2 Ubuntu 9.10 Samba
servers. I am trying to mount a share from the other (i.e.,
"workhorse"
is trying to mount a share on "dual-booter"). If I specify a smbmount
command with a -k option, I can mount the share:

turgon at workhorse:~$ klist
Ticket cache: FILE:/tmp/krb5cc_1000
Default principal: turgon at DACRIB.LOCAL

Valid starting     Expires            Service principal
05/03/10 18:55:31  05/04/10 04:55:31  krbtgt/DACRIB.LOCAL at DACRIB.LOCAL
	renew until 05/09/10 22:56:03
05/03/10 23:07:07  05/04/10 04:55:31
cifs/dual-booter.dacrib.local at DACRIB.LOCAL
	renew until 05/09/10 22:56:03


turgon at workhorse:~$ smbclient //dual-booter/TestShare /mnt -k
Domain=[DACRIB] OS=[Unix] Server=[Samba 3.4.0]
smb: \> ls
  .                              D        0  Sat May  1 19:27:48 2010
  ..                             D        0  Mon May  3 19:58:00 2010
  TestFile                                0  Sat May  1 19:27:48 2010

		37555 blocks of size 524288. 22379 blocks available

However, I can't seem to mount it using mount -t cifs:

$ sudo mount -t cifs //dual-booter/TestShare /mnt -o username=DACRIB+turgon
[sudo] password for turgon:
Password:
mount error(13): Permission denied
Refer to the mount.cifs(8) manual page (e.g. man mount.cifs)

What I'd like to do is to set this in /etc/fstab. But there seems to be
no way to use Kerberos to authenticate the mounting, and it's only
Kerberos (and smbmount) that seems to work. And using the "-o
sec=krb5"
options on mount doesn't seem to work, either.

$ sudo mount -t cifs //dual-booter/TestShare /mnt -o sec=krb5
mount error(2): No such file or directory
Refer to the mount.cifs(8) manual page (e.g. man mount.cifs)

Anyone? I really don't want to have to make a script that uses smbmount
-k, running on login, rather than in /etc/fstab.

Thanks

Hello,

Mon, May 03, 2010 at 11:25:13PM -0400, Mike Leone
napsal(a):
> I am confused (nothing new there ...). I have 2 Ubuntu 9.10 Samba
> servers. I am trying to mount a share from the other (i.e.,
"workhorse"
> is trying to mount a share on "dual-booter"). If I specify a
smbmount
> command with a -k option, I can mount the share:
there was a bug (https://bugzilla.redhat.com/show_bug.cgi?id=565446).
I'm not sure in which samba version. Please check it. RH guys fixed it.

Regards,

Luf

On Mon, 03 May 2010 23:25:13 -0400
Mike Leone <turgon at mike-leone.com> wrote:
> I am confused (nothing new there ...). I have 2 Ubuntu 9.10 Samba
> servers. I am trying to mount a share from the other (i.e.,
"workhorse"
> is trying to mount a share on "dual-booter"). If I specify a
smbmount
> command with a -k option, I can mount the share:
> 
> turgon at workhorse:~$ klist
> Ticket cache: FILE:/tmp/krb5cc_1000
> Default principal: turgon at DACRIB.LOCAL
> 
> Valid starting     Expires            Service principal
> 05/03/10 18:55:31  05/04/10 04:55:31  krbtgt/DACRIB.LOCAL at DACRIB.LOCAL
> 	renew until 05/09/10 22:56:03
> 05/03/10 23:07:07  05/04/10 04:55:31
> cifs/dual-booter.dacrib.local at DACRIB.LOCAL
> 	renew until 05/09/10 22:56:03
> 
> 
> turgon at workhorse:~$ smbclient //dual-booter/TestShare /mnt -k
> Domain=[DACRIB] OS=[Unix] Server=[Samba 3.4.0]
> smb: \> ls
>   .                              D        0  Sat May  1 19:27:48 2010
>   ..                             D        0  Mon May  3 19:58:00 2010
>   TestFile                                0  Sat May  1 19:27:48 2010
> 
> 		37555 blocks of size 524288. 22379 blocks available
> 
> However, I can't seem to mount it using mount -t cifs:
> 
> $ sudo mount -t cifs //dual-booter/TestShare /mnt -o username=DACRIB+turgon
> [sudo] password for turgon:
> Password:
> mount error(13): Permission denied
> Refer to the mount.cifs(8) manual page (e.g. man mount.cifs)
> 
> What I'd like to do is to set this in /etc/fstab. But there seems to be
> no way to use Kerberos to authenticate the mounting, and it's only
> Kerberos (and smbmount) that seems to work. And using the "-o
sec=krb5"
> options on mount doesn't seem to work, either.
> 
> $ sudo mount -t cifs //dual-booter/TestShare /mnt -o sec=krb5
> mount error(2): No such file or directory
> Refer to the mount.cifs(8) manual page (e.g. man mount.cifs)
> 
Try using the FQDN of the server in the UNC. For instance:

   //dual-booter.dacrib.local/TestShare
> Anyone? I really don't want to have to make a script that uses smbmount
> -k, running on login, rather than in /etc/fstab.
> 
> Thanks

-- 
Jeff Layton <jlayton at poochiereds.net>