On 19-4-2016 9:18, Denis Cardon wrote:> Hi lists at merit.unu.edu, > >> I updated our servers to 4.2.11, and I have a problem, but I'm not sure >> if the problem is related to the update. > > I've had a call from a client yesterday who had issue with his copiers' > scan2folder feature after badlock samba file server upgrade. The > mount.cifs ntlm basic auth was not working either, and we had to > configure "server signing=disabled" as a temporary workaround. Could you > try that?Reading the release notes for the samba badlock release, we are advised to use mount.cifs with "sec=krb5(i)" or "sec=ntlmssp(i)", and not "sec=ntlmv2". I am using those, but still receive the "mount error(112): Host is down" error. I tried mount.cifs to connect to a real windows machine, and that one works as expected. So the problem seems to be samba-specific..?
Found some more info: mount.cifs to mount shares from my DCs (samba 4.2.11) works mount.cifs to mount shares from smbserver (also 4.2.11) does NOT work. Here is the debug log it produces:> root at epo:/proc/fs/cifs# mount.cifs //smbserver.domain.com/share /mnt -o username=username,domain=WRKGRP,sec=ntlmsspi > Password: > Apr 19 15:19:58 epo kernel: [74522.479080] /build/linux-4wkEzn/linux-3.2.68/fs/cifs/cifsfs.c: Devname: //smbserver.domain.com/share flags: 0 > Apr 19 15:19:58 epo kernel: [74522.479098] /build/linux-4wkEzn/linux-3.2.68/fs/cifs/connect.c: Domain name set > Apr 19 15:19:58 epo kernel: [74522.479103] /build/linux-4wkEzn/linux-3.2.68/fs/cifs/connect.c: Username: username > Apr 19 15:19:58 epo kernel: [74522.479111] /build/linux-4wkEzn/linux-3.2.68/fs/cifs/connect.c: file mode: 0x1ed dir mode: 0x1ed > Apr 19 15:19:58 epo kernel: [74522.479229] /build/linux-4wkEzn/linux-3.2.68/fs/cifs/connect.c: CIFS VFS: in cifs_mount as Xid: 133 with uid: 0 > Apr 19 15:19:58 epo kernel: [74522.479234] /build/linux-4wkEzn/linux-3.2.68/fs/cifs/connect.c: UNC: \\smbserver.domain.com\share ip: 1.2.3.4 > Apr 19 15:19:58 epo kernel: [74522.479268] /build/linux-4wkEzn/linux-3.2.68/fs/cifs/connect.c: Socket created > Apr 19 15:19:58 epo kernel: [74522.479272] /build/linux-4wkEzn/linux-3.2.68/fs/cifs/connect.c: sndbuf 16384 rcvbuf 87380 rcvtimeo 0x6d6 > Apr 19 15:19:58 epo kernel: [74522.479748] /build/linux-4wkEzn/linux-3.2.68/fs/cifs/fscache.c: cifs_fscache_get_client_cookie: (0xffff88105ddb8000/0xffff88085cdf6c00) > Apr 19 15:19:58 epo kernel: [74522.479758] /build/linux-4wkEzn/linux-3.2.68/fs/cifs/connect.c: CIFS VFS: in cifs_get_smb_ses as Xid: 134 with uid: 0 > Apr 19 15:19:58 epo kernel: [74522.479763] /build/linux-4wkEzn/linux-3.2.68/fs/cifs/connect.c: Existing smb sess not found > Apr 19 15:19:58 epo kernel: [74522.479776] /build/linux-4wkEzn/linux-3.2.68/fs/cifs/cifssmb.c: secFlags 0x1081 > Apr 19 15:19:58 epo kernel: [74522.479780] /build/linux-4wkEzn/linux-3.2.68/fs/cifs/cifssmb.c: NTLMSSP only mechanism, enable extended security > Apr 19 15:19:58 epo kernel: [74522.479788] /build/linux-4wkEzn/linux-3.2.68/fs/cifs/connect.c: Demultiplex PID: 13704 > Apr 19 15:19:58 epo kernel: [74522.479798] /build/linux-4wkEzn/linux-3.2.68/fs/cifs/transport.c: For smb_command 114 > Apr 19 15:19:58 epo kernel: [74522.479809] /build/linux-4wkEzn/linux-3.2.68/fs/cifs/transport.c: Sending smb: total_len 82 > Apr 19 15:19:58 epo kernel: [74522.491173] /build/linux-4wkEzn/linux-3.2.68/fs/cifs/connect.c: Received no data or error: expecting 4 got 0 > mount error(112): Host is down > Refer to the mount.cifs(8) manual page (e.g. man mount.cifs) > root at epo:/proc/fs/cifs#And even though mount.cifs complains and refuses to mount stuff, the smbserver ACTUALLY works fine, all windows clients map their drives to it, I can also browse it with smbclient. It's just mount.cifs that complains. As for smb.conf options: similar on the DCs and the smbserver, with: server signing = mandatory ntlm auth = yes server min protocol = SMB2 client max protocol = SMB3 Any ideas why mount.cifs doesn't connect to our smbserver? MJ
On 04/19/2016 8:39 AM, lists wrote:> Found some more info: > > mount.cifs to mount shares from my DCs (samba 4.2.11) works > mount.cifs to mount shares from smbserver (also 4.2.11) does NOT work. > > Here is the debug log it produces: > >> root at epo:/proc/fs/cifs# mount.cifs //smbserver.domain.com/share /mnt >> -o username=username,domain=WRKGRP,sec=ntlmsspi >> Password: >> Apr 19 15:19:58 epo kernel: [74522.479080] >> /build/linux-4wkEzn/linux-3.2.68/fs/cifs/cifsfs.c: Devname: >> //smbserver.domain.com/share flags: 0 >> Apr 19 15:19:58 epo kernel: [74522.479098] >> /build/linux-4wkEzn/linux-3.2.68/fs/cifs/connect.c: Domain name set >> Apr 19 15:19:58 epo kernel: [74522.479103] >> /build/linux-4wkEzn/linux-3.2.68/fs/cifs/connect.c: Username: username >> Apr 19 15:19:58 epo kernel: [74522.479111] >> /build/linux-4wkEzn/linux-3.2.68/fs/cifs/connect.c: file mode: 0x1ed >> dir mode: 0x1ed >> Apr 19 15:19:58 epo kernel: [74522.479229] >> /build/linux-4wkEzn/linux-3.2.68/fs/cifs/connect.c: CIFS VFS: in >> cifs_mount as Xid: 133 with uid: 0 >> Apr 19 15:19:58 epo kernel: [74522.479234] >> /build/linux-4wkEzn/linux-3.2.68/fs/cifs/connect.c: UNC: >> \\smbserver.domain.com\share ip: 1.2.3.4 >> Apr 19 15:19:58 epo kernel: [74522.479268] >> /build/linux-4wkEzn/linux-3.2.68/fs/cifs/connect.c: Socket created >> Apr 19 15:19:58 epo kernel: [74522.479272] >> /build/linux-4wkEzn/linux-3.2.68/fs/cifs/connect.c: sndbuf 16384 >> rcvbuf 87380 rcvtimeo 0x6d6 >> Apr 19 15:19:58 epo kernel: [74522.479748] >> /build/linux-4wkEzn/linux-3.2.68/fs/cifs/fscache.c: >> cifs_fscache_get_client_cookie: (0xffff88105ddb8000/0xffff88085cdf6c00) >> Apr 19 15:19:58 epo kernel: [74522.479758] >> /build/linux-4wkEzn/linux-3.2.68/fs/cifs/connect.c: CIFS VFS: in >> cifs_get_smb_ses as Xid: 134 with uid: 0 >> Apr 19 15:19:58 epo kernel: [74522.479763] >> /build/linux-4wkEzn/linux-3.2.68/fs/cifs/connect.c: Existing smb sess >> not found >> Apr 19 15:19:58 epo kernel: [74522.479776] >> /build/linux-4wkEzn/linux-3.2.68/fs/cifs/cifssmb.c: secFlags 0x1081 >> Apr 19 15:19:58 epo kernel: [74522.479780] >> /build/linux-4wkEzn/linux-3.2.68/fs/cifs/cifssmb.c: NTLMSSP only >> mechanism, enable extended security >> Apr 19 15:19:58 epo kernel: [74522.479788] >> /build/linux-4wkEzn/linux-3.2.68/fs/cifs/connect.c: Demultiplex PID: >> 13704 >> Apr 19 15:19:58 epo kernel: [74522.479798] >> /build/linux-4wkEzn/linux-3.2.68/fs/cifs/transport.c: For smb_command >> 114 >> Apr 19 15:19:58 epo kernel: [74522.479809] >> /build/linux-4wkEzn/linux-3.2.68/fs/cifs/transport.c: Sending smb: >> total_len 82 >> Apr 19 15:19:58 epo kernel: [74522.491173] >> /build/linux-4wkEzn/linux-3.2.68/fs/cifs/connect.c: Received no data >> or error: expecting 4 got 0 >> mount error(112): Host is down >> Refer to the mount.cifs(8) manual page (e.g. man mount.cifs) >> root at epo:/proc/fs/cifs# > > And even though mount.cifs complains and refuses to mount stuff, the > smbserver ACTUALLY works fine, all windows clients map their drives to > it, I can also browse it with smbclient. It's just mount.cifs that > complains. > > As for smb.conf options: similar on the DCs and the smbserver, with: > > server signing = mandatory > ntlm auth = yes > server min protocol = SMB2 > client max protocol = SMB3 > > Any ideas why mount.cifs doesn't connect to our smbserver? > > MJI echo MJ's request, what is now needed to mount a CIFS share? Using krb5 was mentioned, but what about standalone servers that don't use kerberos? Dale