samba - Feb 2010 - Problems accessing a file share using kerberos

Hi,

I'm trying to access a file share on what I believe is a netapp server
using kerberos authentication. I've done a kinit and gotten
credentials and then ran:

$ smbclient -U pedrocr //gsb-filer2/pedrocr -k -d10

This actually increased the number of credentials klist shows so looks
good in that regard. Howeever, I got the error:

"""
SPNEGO login failed: NT_STATUS_MORE_PROCESSING_REQUIRED
lang_tdb_init: /usr/share/samba/en_US.UTF-8.msg: No such file or directory
session setup failed: NT_STATUS_MORE_PROCESSING_REQUIRED
did you forget to run kinit?
"""

Searching around I found this relating to this error on NetApp:

http://lists.samba.org/archive/smb-clients/2008-September/000785.html

Seems like it doesn't like the workgroup name, even though here I'm
not using one. I've tried 20 different combinations of how to do it,
with and without the workgroup name (which should be "win") and it
still wouldn't work.

I also tried using this without kerberos like so:

$ smbclient -U win/pedrocr%mypassword //gsb-filer2/pedrocr

this actually returns NT_STATUS_WRONG_PASSWORD although the password
is indeed correct.

I'm running Ubuntu 9.10 with smbclient version 3.4.0-3ubuntu5.4. Do I
need to actually install samba itself and connect it to the domain for
this to work? I'm doing all this on the Stanford campus network in
case anyone knows anything about that install in particular.

Cheers,

Pedro

On Fri, Feb 19, 2010 at 07:08:48PM -0800, Pedro C?rte-Real
wrote:
> Hi,
> 
> I'm trying to access a file share on what I believe is a netapp server
> using kerberos authentication. I've done a kinit and gotten
> credentials and then ran:
> 
> $ smbclient -U pedrocr //gsb-filer2/pedrocr -k -d10
> 
> This actually increased the number of credentials klist shows so looks
> good in that regard. Howeever, I got the error:
> 
> """
> SPNEGO login failed: NT_STATUS_MORE_PROCESSING_REQUIRED
> lang_tdb_init: /usr/share/samba/en_US.UTF-8.msg: No such file or directory
> session setup failed: NT_STATUS_MORE_PROCESSING_REQUIRED
> did you forget to run kinit?
> """
> 
> Searching around I found this relating to this error on NetApp:
> 
> http://lists.samba.org/archive/smb-clients/2008-September/000785.html
> 
> Seems like it doesn't like the workgroup name, even though here I'm
> not using one. I've tried 20 different combinations of how to do it,
> with and without the workgroup name (which should be "win") and
it
> still wouldn't work.
> 
> I also tried using this without kerberos like so:
> 
> $ smbclient -U win/pedrocr%mypassword //gsb-filer2/pedrocr
> 
> this actually returns NT_STATUS_WRONG_PASSWORD although the password
> is indeed correct.
> 
> I'm running Ubuntu 9.10 with smbclient version 3.4.0-3ubuntu5.4. Do I
> need to actually install samba itself and connect it to the domain for
> this to work? I'm doing all this on the Stanford campus network in
> case anyone knows anything about that install in particular.
Should work. What version of the NetApp OS release is this ?

Can you get a debug level 10 trace from smbclient so we might
be able to track this down ?

I'm local to you, but will be at Connectathon all next week
(might get to test with some NetApp folks), but after that
could come take a look on campus.

Jeremy.

On Fri, Feb 19, 2010 at 9:44 PM, Jeremy Allison <jra at samba.org>
wrote:
> Should work. What version of the NetApp OS release is this ?
I don't have access to the server to find out and nmap doesn't seem to
be able to make heads or tails of it.
> Can you get a debug level 10 trace from smbclient so we might
> be able to track this down ?
Debug log attached.
> I'm local to you, but will be at Connectathon all next week
> (might get to test with some NetApp folks), but after that
> could come take a look on campus.
I'm just a student trying to get some windows shares to work after the
campus IT folks were less than helpful.

Cheers,

Pedro

PS: I mistakenly did not reply to the list as a whole before. Resending now.