[Bug 236830] Re: cifs does not support kerberos authentication

[Patrick Spinler]

I'm still experiencing this issue.  Ubuntu hardy, patched up to date as
of this writing.

pjs11 at patslinux01 ~ $ lsb_release -a
No LSB modules are available.
Distributor ID:	Ubuntu
Description:	Ubuntu 8.04.3 LTS
Release:	8.04
Codename:	hardy

pjs11 at patslinux01 ~ $ uname -a
Linux patslinux01.mayo.edu 2.6.24-23-generic #1 SMP Wed Apr 1 21:43:24 UTC 2009 x86_64 GNU/Linux

pjs11 at patslinux01 ~ $ klist
Credentials cache: FILE:/tmp/krb5cc_1000
        Principal: pjs11 at MFAD.MFROOT.ORG

  Issued           Expires          Principal
Sep  3 14:48:04  Sep  4 00:48:04  krbtgt/MFAD.MFROOT.ORG at MFAD.MFROOT.ORG
Sep  3 14:48:09  Sep  4 00:48:04  rchnas06n2$@MFAD.MFROOT.ORG

# SMB Client connects using kerberos credentials

pjs11 at patslinux01 ~ $ smbclient -k //rchnas06n2/Users500M 
OS=[Windows 5.0] Server=[Windows 2000 LAN Manager]
smb: \> 
pjs11 at patslinux01 ~ $ 

# mount.cifs does not, and prompts for a password:

pjs11 at patslinux01 ~ $ mount.cifs //rchnas06n2/Users500M/PJS11 mnt/pjs11 -o sec=krb5 --verbose
parsing options: sec=krb5
Password: (simply pressed return, here)

mount.cifs kernel mount options unc=//rchnas06n2\Users500M,ip=129.176.156.20,user=pjs11,pass=,ver=1,sec=krb5,uid=1000,gid=1000,prefixpath=PJS11 
mount error 5 = Input/output error
Refer to the mount.cifs(8) manual page (e.g.man mount.cifs)

pjs11 at patslinux01 ~ $ more /etc/request-key.conf
(...snip copious comments)
#OP	TYPE	DESCRIPTION	CALLOUT INFO	PROGRAM ARG1 ARG2 ARG3 ...
#======	=======	===============	===============	===============================
create	user	debug:*		negate		/bin/keyctl negate %k 30 %S
create	user	debug:loop:*	*		|/bin/cat
create	user	debug:*		*		/usr/share/keyutils/request-key-debug.sh %k %d %c %S
#create	cifs.spnego * 		* 		/usr/sbin/cifs.upcall -c %k %d
create	cifs.spnego * 		* 		/usr/sbin/cifs.upcall %k %d
negate	*	*		*		/bin/keyctl negate %k 30 %S

Do the 64 bit packages have the necessary patches in them?
-- Pat

-- 
cifs does not support kerberos authentication
https://bugs.launchpad.net/bugs/236830
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to samba in ubuntu.