similar to: Can samba mount to SBS2003?

Has anyone got FC5 to mount to an SBS2003 server? kinit .. Works net ads join ...works mount -t cifs does the mount, but files cannot be read. I can cd to any directory, even create files, but cannot read any file, just get access denied. smbclient -k..works and reads files ok. I've tried krb5, krb5i as options to mount, but still no joy. Has anyone seen this problem? Thanks Mark

Hi all, Has anyone been able to mount windows shares with mount.cifs using kerberos credentials? I can get a kerberos ticket at login or use kinit and then connect via smbclient: > kinit username > smbclient -k \\server\share I'd like to be able to mount the share like this: > mount.cifs //server/share /mnt -o user=username,sec=krb5 The above command returns: mount error 95 =

Hai, I'm getting somewhere, here you go, a snap of what i have atm. And what works atm. Im asuming you have winbind already running. Obligated is A+PTR record in the DNS. You can turn or the rdns check in krb5.conf but i did not test that. # Tested on Debian Stretch - NFSv4 SERVER apt-get install --auto-remove nfs-kernel-server systemctl stop nfs-* Added in krb5.conf below the

Hai, Hmm.. Bummer.. I just discovered the debian package dont have the vfs_nfs4acl include in the build. And because of that it's not in my packages. I'll have a look into it, see what i can make of it. Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > L.P.H. van Belle via samba > Verzonden: dinsdag 9

Hi, I need to run a Samba CIFS proxy (not DFS) in an AD environment. What we tried so far is mounting the remote share with mount.cifs and "-o sec=krb5i,multiuser" and share it through samba. But mount.cifs's multiuser option requires local access to the domain user's kerberos tickets, i.e, if I login as a domain user and run kinit to get a ticket, everything works. If the

Thank you for that, i did have a good look at that one. And i use Debian 9, if you test what i posted below in the thread, you will see NFSv4 works fine. Below is missing one more thing, the "allow to delegate (kerberos only) " on the computer object in the AD, should be enabled. And yes, i've see bugchecks also but only on my debian .. Lenny.. Stt.. ;-) .. Its my last lenny

Does it work if you test like this. kinit testuser at EXAMPLE.COM mount -t cifs -o sec=krb5 //server.example.com/export /mnt/cifs Have a look here : https://runops.wordpress.com/2015/03/05/setup-linux-cifs-autofs-automount-using-kerberos-authentication/ I cant tell much about automount, i use it but through systemd for my nfsv4 mounts. Greetz, Louis > -----Oorspronkelijk

Hi @all, I have some problems when using pam_mount.conf.xml to mount shares via kerberos (and also for ntlm) regarding reliability of the mount. I have tested the issue with 2 different environments. My environments are: 2 Microsoft Domain Controllers + a separate fileserver and Ubuntu 18.04 or 22.04 as clients. My other tested environment is one Microsoft Server 2019 (as domain controller and

On Wed, 11 Oct 2017 11:51:02 +0200 "L.P.H. van Belle via samba" <samba at lists.samba.org> wrote: > > > > -----Oorspronkelijk bericht----- > > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > > Rowland Penny via samba > > Verzonden: woensdag 11 oktober 2017 11:39 > > Aan: samba at lists.samba.org > > Onderwerp: Re: [Samba]

Hi, I have a Debian Stretch computer which is a "samba4 member server" of an Samba4 AD domain (versions etc. are mentioned at the end of the message). I think my config is OK and I can open a _graphical_ session with an AD account user. The display manager of the computer is Lightdm. For for instance, I can open a graphical session with the AD account bob (uid == 14001). In this case, I

Hi, Is mount.cifs with sec-krb5 or krb5i work with samna 3.2 and cifs.spnego upcall ? Regards, Brice Rouanet. **************************************** Brice Rouanet Technicien informatique D?partement Genie Chimique Centre de Ressources Informatiques **************************************** Tel : 05.62.25.89.97 Tel : 05.62.25.89.19

Hi All, I seem to have exactly the same problem which was described in this thread a while ago. I have gone through every piece of information I was able to find on mailing list archives but all I found was people reporting similar problems and not a solution to it. As in the original discussion if I use smbclient it works fine but if I use mount.cifs it does not work at all. To make smbclient

> -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Rowland Penny via samba > Verzonden: woensdag 11 oktober 2017 11:39 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] Using GPO to mount shares on Linux > > On Wed, 11 Oct 2017 11:00:59 +0200 > Michael Wandel <m.wandel at t-online.de> wrote: > > >

Hi, when I try to mount a windows share with a valide kerberos ticket : mount.cifs //auberge.iut.lan/install_autocad /mnt/test/ -o user='IUT\Administrateur',password=toto,sec=krb5i I get this error : Jun 2 12:32:51 brice-deb kernel: fs/cifs/cifs_spnego.c: key description = ver=0x1;host=auberge.iut.lan;ip4=10.31.0.12;sec=krb5;uid=0x0 Jun 2 12:32:51 brice-deb cifs.spnego:

Hi guys, This seems to be a well-known problem with mount.cifs on Ubuntu 12.04. Unfortunately, although I have applied the suggestions I found with google, I can't seem to be able to get mount.cifs to work with kerberos. I am trying to use kerberos to mount my Windows shares because this is the only allowed secure way in my company to connect to shares. Before anyone asks, I can successfully

Hi Marco, You will hit muliple problems, most can be solved. Im installing a new member here with samba 4.8.5 and building new samba 4.8.6 atm. ;-). Im (trying to ) fix this also again in this new setup. Below it a bit of what i know. > Client are in DHCP, so it is hard to use 'normal' NFSv3 mount, eg > security by IP. If they register ( or are registered) in the dns correctly

Anastasios, I've done exactly what you want to do, only starting from SBS2008. Our office went down this road in 2014 when we investigated upgrading from SBS2008 only to find that MS replacement, Server Essentials, did not support Exchange. We currently have a "no cloud" policy, so going to Office 365, as you have done, was not an option (and btw, have you not considered Server

My target is virtualized SBS2003 on dell PE T410 Now I test xen on my desktop. Centos 6 as dom0 - kernel: 2.6.32-131.12.1.el6.xendom0.x86_64 from http://xenbits.xen.org/people/mayoung/testing/x86_64/ hypervisor 4.1.1.3 from http://xenbits.xen.org/people/mayoung/EL6.xen/x86_64/ One NIC simple bridge-network configuration dom0 uses static IP with ISP router as gateway domU have also static IP

After re-join kinit Administrator net ads keytab add cifs/$(hostname -f) -k net ads keytab add_update_ads -k samba-tool delegation for-any-service COMPUTERNAME$ on ( or use : delegation add-service accountname principal [options] ) Reboot Should work now. ;-) Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens Yvan

Did you "deleated the computer object" to allow kerberos services. And did you add the CIFS/spn to the computer and keytab ? https://wiki.samba.org/index.php/Generating_Keytabs If its a member, which i assume. kinit Administrator net ads keytab add cifs/$(hostname -f) -k net ads keytab add_update_ads -k Add these and it should work. You might need to restart or reboot., sometimes