[linux-cifs-client] accessing domain or standard based DFS with CIFS 1.40 + mount.cifs 1.8 + 2.6.15.3 kernel

[William Law]

Hi,

I'm using RHEL4 with the latest stable kernel as of yesterday, 2.6.15.3
with the new CIFS code(s) because I couldn't get this to work with the
older versions, either.

We have a domain based MS-DFS root and a stand alone MS-DFS duplicate of
the same root.  I can successfully mount the share if I point to the
stand alone root or the shares that are used for the domain based root,
but not the domain root itself.  I'm using the syntax mount -t cifs
//servername/sharename /mnt/sharename -o user=username.

It appears that domain based dfs is not supported, and that is fine -
but I did want to confirm this.  Anyway, the real problem is that with
any of the roots, I can not get past the initial mount point.  Changing
to another directory is successful, but when I do ls, I just get the
same listing as the mounted root - I can't get past the initial level!

A separate issue is that I haven't been able to test or try to use the
Kerberos support.  I've tried using mount -t cifs //servername/sharename
/mnt/sharename -o sec=krb5 but I just get the help.  Yeah, I did compile
the experimental options into  the kernel module.  I'm hoping that they
syntax is wrong, but I honestly don't have a clue.  I'm attaching a
separate message that I have posted to samba and cifs-clients about
smbclient, where I am having similar but not exactly the same problems.
We'd really like to be able to mount these shares from our linux nodes.

Any help would be greatly appreciated!

Thanks,

Will

--
Previous subject: [Samba] DFS redirection to sub-folders beyond share
Hi,

I already posted this to smb-clients, but I believe that is a very low
volume list.

We have a very complicated dfs root.  Now I'm not positive that this is
how we should have done things, but it works very well with Windows
clients, so it hasn't been thought about here.  This does not work with
smbclient or smbmount.  I'm using freshly built smbclient from Samba
3.0.21a.

Anyway, here is the issue.  We have a very large namespace via one root
that is currently active directory based.

We have many dfs links that work like this.  Let's say our domain is
called DOMAIN, and the root is called dfs.

\\DOMAIN\dfs <file:///\\DOMAIN\dfs>  is then mapped to an empty folder.
>From there, we have many dfs links, such as:

Users\testuser which is mapped in DFS to
\\fileserver1\share\Users\testuser
<file:///\\fileserver1\share\Users\testuser> , which works easily in
windows to seamless take the user who access \\domain\dfs\users\testuser
<file:///\\domain\dfs\users\testuser>  to the folder
\\fileserver1\share\users\testuser
<file:///\\fileserver1\share\users\testuser> .

This does NOT work under smbclient.  I think that we just need to be
able to map users to something beyond the actual share.  It looks like
it could be fixed by modifying the code to handle the slashes correctly
(see the error below).  Here is the log from smbclient with the -d 3
debugging option:
 
sh-3.00$ smbclient //tc.cornell.edu/tc -k -d 3

lp_load: refreshing parameters

Initialising global parameters

params.c:pm_process() - Processing configuration file
"/etc/samba/smb.conf"

Processing section "[global]"

Can't find include file /etc/samba/smb.conf.

added interface ip=128.84.31.152 bcast=128.84.31.255 nmask=255.255.255.0
Client started (version 3.0.21a).

resolve_hosts: Attempting host lookup for name tc.cornell.edu<0x20>
Connecting to 128.84.5.22 at port 445 Doing spnego session setup (blob
length=111) got OID=1 2 840 48018 1 2 2 got OID=1 2 840 113554 1 2 2 got
OID=1 2 840 113554 1 2 2 3 got OID=1 3 6 1 4 1 311 2 2 10 got
principal=ctcdc04$@TC.CORNELL.EDU Doing kerberos session setup Ticket in
ccache[FILE:/tmp/krb5cc_16777216_onPqOV] expiration Wed, 01 Feb 2006
19:25:27 EST OS=[Windows Server 2003 3790 Service Pack 1]
Server=[Windows Server 2003 5.2]

resolve_hosts: Attempting host lookup for name tc.cornell.edu<0x20>
Connecting to 128.84.43.250 at port 445 Doing spnego session setup (blob
length=111) got OID=1 2 840 48018 1 2 2 got OID=1 2 840 113554 1 2 2 got
OID=1 2 840 113554 1 2 2 3 got OID=1 3 6 1 4 1 311 2 2 10 got
principal=ctcdc03$@TC.CORNELL.EDU Doing kerberos session setup Ticket in
ccache[FILE:/tmp/krb5cc_16777216_onPqOV] expiration Wed, 01 Feb 2006
19:25:27 EST dos_clean_name []

resolve_hosts: Attempting host lookup for name ctcfsrv10<0x20>
Connecting to 128.84.29.24 at port 445 Doing spnego session setup (blob
length=113) got OID=1 2 840 48018 1 2 2 got OID=1 2 840 113554 1 2 2 got
OID=1 2 840 113554 1 2 2 3 got OID=1 3 6 1 4 1 311 2 2 10 got
principal=ctcfsrv10$@TC.CORNELL.EDU

Doing kerberos session setup

Ticket in ccache[FILE:/tmp/krb5cc_16777216_onPqOV] expiration Wed, 01
Feb 2006 19:25:27 EST

resolve_hosts: Attempting host lookup for name ctcfsrv10<0x20>
Connecting to 128.84.29.24 at port 445 Doing spnego session setup (blob
length=113) got OID=1 2 840 48018 1 2 2 got OID=1 2 840 113554 1 2 2 got
OID=1 2 840 113554 1 2 2 3 got OID=1 3 6 1 4 1 311 2 2 10 got
principal=ctcfsrv10$@TC.CORNELL.EDU

Doing kerberos session setup

Ticket in ccache[FILE:/tmp/krb5cc_16777216_onPqOV] expiration Wed, 01
Feb 2006 19:25:27 EST dos_clean_name []

resolve_hosts: Attempting host lookup for name CTCFSRV11<0x20>
Connecting to 128.84.29.25 at port 445 Doing spnego session setup (blob
length=113) got OID=1 2 840 48018 1 2 2 got OID=1 2 840 113554 1 2 2 got
OID=1 2 840 113554 1 2 2 3 got OID=1 3 6 1 4 1 311 2 2 10 got
principal=ctcfsrv11$@TC.CORNELL.EDU

Doing kerberos session setup

Ticket in ccache[FILE:/tmp/krb5cc_16777216_onPqOV] expiration Wed, 01
Feb 2006 19:25:27 EST

resolve_hosts: Attempting host lookup for name CTCFSRV11<0x20>
Connecting to 128.84.29.25 at port 445 Doing spnego session setup (blob
length=113) got OID=1 2 840 48018 1 2 2 got OID=1 2 840 113554 1 2 2 got
OID=1 2 840 113554 1 2 2 3 got OID=1 3 6 1 4 1 311 2 2 10 got
principal=ctcfsrv11$@TC.CORNELL.EDU

Doing kerberos session setup

Ticket in ccache[FILE:/tmp/krb5cc_16777216_onPqOV] expiration Wed, 01
Feb 2006 19:25:27 EST dos_clean_name [] dos_clean_name []

smb: \> cd cbsu

dos_clean_name [\cbsu\]

dos_clean_name [\cbsu\\]

resolve_hosts: Attempting host lookup for name
ctcfsrv6.tc.cornell.edu<0x20> Connecting to 128.84.40.20 at port 445
Doing spnego session setup (blob length=112) got OID=1 2 840 48018 1 2 2
got OID=1 2 840 113554 1 2 2 got OID=1 2 840 113554 1 2 2 3 got OID=1 3
6 1 4 1 311 2 2 10 got principal=ctcfsrv6$@TC.CORNELL.EDU

Doing kerberos session setup

Ticket in ccache[FILE:/tmp/krb5cc_16777216_onPqOV] expiration Wed, 01
Feb 2006 19:25:27 EST

resolve_hosts: Attempting host lookup for name
ctcfsrv6.tc.cornell.edu<0x20> Connecting to 128.84.40.20 at port 445
Doing spnego session setup (blob length=112) got OID=1 2 840 48018 1 2 2
got OID=1 2 840 113554 1 2 2 got OID=1 2 840 113554 1 2 2 3 got OID=1 3
6 1 4 1 311 2 2 10 got principal=ctcfsrv6$@TC.CORNELL.EDU

Doing kerberos session setup

Ticket in ccache[FILE:/tmp/krb5cc_16777216_onPqOV] expiration Wed, 01
Feb 2006 19:25:27 EST dos_clean_name [] dos_clean_name [] dos_clean_name
[\CTCFSRV11\tc\cbsu] dos_clean_name [\cbsu]

smb: \cbsu\> cd /

dos_clean_name [\]

dos_clean_name [\\]

smb: \> cd users\law

dos_clean_name [\users\law\]

dos_clean_name [\users\law\\]

resolve_hosts: Attempting host lookup for name
ctcfsrv9.tc.cornell.edu\tc_q\users<0x20>

Connection to ctcfsrv9.tc.cornell.edu\tc_q\users failed Unable to follow
dfs referral [//ctcfsrv9.tc.cornell.edu\tc_q\users/law]

cd \users\law\: NT_STATUS_PATH_NOT_COVERED

 

Thanks!

 

William Law