##### BACKGROUND ##### I still cannot do basic share mapping between Samba 3.0.28 and a Windows 2003 AD Domain controller. When using mount.cifs, I get a permission denied error 13. I have run it as root and as my own user account.>From a windows workstation on a different domain, I can log on fine.HELP!!!!!!!!!!!! Thanks, Mike Tosh ##### CAN VIEW, BUT NOT MAP, VIA SMB ##### # smbclient -V Version 3.0.28-0.1.95-1624-SUSE-SLES9 # smbclient -L //server/share -A.cifs_creds WARNING: The "printer admin" option is deprecated Domain=[DOMAIN] OS=[Windows Server 2003 3790 Service Pack 2] Server=[Windows Server 2003 5.2] Sharename Type Comment --------- ---- ------- share Disk Share for everyone # smbmount //server/share /mnt/share/ -o credentials=.cifs_creds WARNING: The "printer admin" option is deprecated cli_negprot: SMB signing is mandatory and we have disabled it. 7959: protocol negotiation failed SMB connection failed ##### ERROR 13 (PERMISSION DENIED) USING CIFS: ###### # mount -t cifs //server/share /mnt/share -o credentials=.cifs_creds mount error 13 = Permission denied Refer to the mount.cifs(8) manual page (e.g.man mount.cifs) # mount.cifs //server/share /mnt/share -o credentials=.cifs_creds mount error 13 = Permission denied Refer to the mount.cifs(8) manual page (e.g.man mount.cifs) #cat .cifs_creds username=remoteuser password=remotepass domain=DOMAIN # mount -v -t cifs //server/share /mnt/share -o credentials=.cifs_creds parsing options: rw,credentials=.cifs_creds Domain W2K3ADDOMAIN mount.cifs kernel mount options unc=//server\share,ip=10.x.x.x,user=remoteuser,domain=DOMAIN,passremotepass,ver=1,rw,credentials=/root/.cifs_creds mount error 13 = Permission denied Refer to the mount.cifs(8) manual page (e.g.man mount.cifs) linuxserver:/var/log # grep CIFS messages warn warn:Mar 26 12:03:08 proto2 kernel: CIFS VFS: cifs_mount failed w/return code = -13 warn:Mar 26 12:03:39 proto2 kernel: CIFS VFS: cifs_mount failed w/return code = -13 ##### LOGS ON SERVER (and it's a DOMAIN CONTROLLER) ##### Successful Network Logon: User Name: remoteuser Domain: DOMAIN Logon ID: (0x0,0x20544132) Logon Type: 3 Logon Process: NtLmSsp Authentication Package: NTLM Workstation Name: \\10.x.x.x (IP of linux box) Source Network Address: 10.x.x.x (IP of linux box) ##### Then immediately after I see: ##### User Logoff: User Name: remoteuser Domain: W2K3ADDOMAIN Logon ID: (0x0,0x20544132) Logon Type: 3
Douglas VanLeuven
2008-Mar-27 21:01 UTC
[Samba] Still get error 13 when mounting w2k3 share
Tosh, Michael J wrote:> ##### BACKGROUND ##### > > I still cannot do basic share mapping between Samba 3.0.28 and a Windows > 2003 AD Domain controller. When using mount.cifs, I get a permission > denied error 13. I have run it as root and as my own user account. >>From a windows workstation on a different domain, I can log on fine. >Try adding the sec= option on the command line trying a couple different modes. I can use ntlm, ntlmi, and ntlmv2. Maybe something other than the defaults will work for you. You also need to know what level of security your w2k3 is enforcing through group policy. Enforced signing and ntlmv2 only have caused some people difficulties in the past. I'd try /sbin/mount.cifs directly and specifying the user and password on the command line at least to test. Try using the IP number of the remote host. The domain name must be in uppercase, workgroup NAME or realm style MY.REALM.COM. Regards, Doug