[Bug 539791] [NEW] mount.cifs cannot mount a DFS share when using Kerberos authentication

[Etienne Goyer]

Public bug reported:

Binary package hint: smbfs

In Karmic, it is possible to mount a CIFS filesystem from a DFS
referral, but it would fail when using Kerberos authentication.
Witness:

WARTHOGS\carol at karmic-desktop:~$ mount.cifs
//warthogs.biz/namespace1/firstshare share --verbose -o sec=krb5

mount.cifs kernel mount options: unc=//warthogs.biz\namespace1,user=carol,,,,,,,,,,domain=WARTHOGS,ver=1,sec=krb5,uid=288883801,gid=288883201,prefixpath=firstshare,ip=192.168.122.200
mount error(126): Required key not available
Refer to the mount.cifs(8) manual page (e.g. man mount.cifs)


In the above example, //warthogs.biz/namespace1/firstshare is a DFS referral that points to //warthogs-adc/share1.

When not specifying "-o sec=krb5" (or when using "-o sec=ntlm"), the
mount complete just fine.  It also work is I use the direct UNC path,
//warthogs-adc/share1, with "-o sec=krb5", so it does really appear that
the problem manifest itself only when both conditions are true (the UNC
path is a DFS referral *and* we are authenticating using Kerberos).

uname -r: 2.6.31-20-generic

keyutils 1.2-10 (no change to /etc/request-key.conf)

likewise-open5 5.0.3991.1+krb5-0ubuntu2, AD functional level Win2k3
domain joined.


I assigned the bug to smbfs, but I think it might actually be in the cifs kernel module and not in smbfs at all.  I attached the relevant part of dmesg, after enabling the cifs module debug mode (echo 1 > /proc/fs/cifs/cifsFYI).

** Affects: samba (Ubuntu)
     Importance: Undecided
         Status: New

-- 
mount.cifs cannot mount a DFS share when using Kerberos authentication
https://bugs.launchpad.net/bugs/539791
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to samba in ubuntu.