[linux-cifs-client] Problem mounting samba shares with PLAINTEXT password

Sébastien Canchon scanchon at gmail.com
Mon Nov 30 09:08:44 MST 2009


Try with ubuntu 9.10 and it works perfectly with 'sec=lanman'.

I have recompiled cifs-module with these 3 patchs:

[CIFS] Turn off Unicode during session establishment for plaintext
authentication
[CIFS] Fix plaintext authentication
[CIFS] Re-enable Lanman security (don't sure this patch is really usefull)

And It works now.
Perhaps do I have to submit a bug in ubuntu ?

Thanks for your help in background Jeff :-)
Regards,
SC.
2009/11/30 Jeff Layton <jlayton at samba.org>:
> On Mon, 30 Nov 2009 14:41:16 +0100
> Sébastien Canchon <scanchon at gmail.com> wrote:
>
>> Hello,
>>
>> I currently try to mount a samba share with plaintext auth.
>> This works perfectly on linux box with smbfs, but I can't mount it
>> CIFS box (like kubuntu 8.04).
>> Under windows, with the good registry modification, I doesn't have problems.
>>
>> samba version installed on the client: 3.0.28a-1ubuntu4.9
>>
>> Here an output of 'modinfo cifs':
>> filename:       /lib/modules/2.6.24-24-generic/kernel/fs/cifs/cifs.ko
>> version:        1.52
>> description:    VFS to access servers complying with the SNIA CIFS
>> Specification e.g. Samba and Windows
>> license:        GPL
>> author:         Steve French <sfrench at us.ibm.com>
>> srcversion:     2CAF307257F44341D360511
>> depends:
>> vermagic:       2.6.24-24-generic SMP mod_unload 586
>> parm:           CIFSMaxBufSize:Network buffer size (not including
>> header). Default: 16384 Range: 8192 to 130048 (int)
>> parm:           cifs_min_rcv:Network buffers in pool. Default: 4
>> Range: 1 to 64 (int)
>> parm:           cifs_min_small:Small network buffers in pool. Default:
>> 30 Range: 2 to 256 (int)
>> parm:           cifs_max_pending:Simultaneous requests to server.
>> Default: 50 Range: 2 to 256 (int)
>>
>> CIFS module compiled with CONFIG_CIFS_WEAK_PW_HASH enabled
>>
>> /proc/fs/cifs/SecurityFlags setup with "39" (0x27 in Hex)
>>
>> added theses lines into /etc/samba/smb.conf:
>> client plaintext auth=yes
>> client lanman auth=yes
>> client ntlmv2 auth=no
>> and rebooted the box (and re-setup 39 in /proc/fs/cifs/SecurityFlags).
>>
>> Now, try to mount:
>> root at P126:~# mount.cifs //10.66.232.12/dev_users share/ -o
>> username=G132248 --verbose
>> Password:
>>
>> mount.cifs kernel mount options:
>> unc=//10.66.232.12\dev_users,ip=10.66.232.12,ver=1,username=G132248,pass=********
>> mount error 13 = Permission denied
>> Refer to the mount.cifs(8) manual page (e.g.man mount.cifs)
>>
>> ----- dmesg outpout -----
>> [ 2504.662550]  /build/buildd/linux-2.6.24/fs/cifs/cifsfs.c: Devname:
>> //10.66.232.12/dev_users flags: 64
>> [ 2504.662562]  /build/buildd/linux-2.6.24/fs/cifs/connect.c: CIFS
>> VFS: in cifs_mount as Xid: 14 with uid: 0
>> [ 2504.662572]  /build/buildd/linux-2.6.24/fs/cifs/connect.c: Username: G132248
>> [ 2504.662576]  /build/buildd/linux-2.6.24/fs/cifs/connect.c: UNC:
>> \\10.66.232.12\dev_users ip: 10.66.232.12
>> [ 2504.662587]  /build/buildd/linux-2.6.24/fs/cifs/connect.c: Socket created
>> [ 2504.664035]  /build/buildd/linux-2.6.24/fs/cifs/connect.c: sndbuf
>> 16384 rcvbuf 87380 rcvtimeo 0x7fffffff
>> [ 2504.664070]  /build/buildd/linux-2.6.24/fs/cifs/connect.c:
>> Demultiplex PID: 6875
>> [ 2504.664079]  /build/buildd/linux-2.6.24/fs/cifs/connect.c: Existing
>> smb sess not found
>> [ 2504.664088]  /build/buildd/linux-2.6.24/fs/cifs/cifssmb.c: secFlags 0x27
>> [ 2504.664094]  /build/buildd/linux-2.6.24/fs/cifs/transport.c: For
>> smb_command 114
>> [ 2504.664098]  /build/buildd/linux-2.6.24/fs/cifs/transport.c:
>> Sending smb of length 69
>> [ 2504.664101] | 0x00 0x00 0x00 0x45 0xff 0x53 0x4d 0x42  |  _ _ _ E � S M B
>> [ 2504.664112] | 0x72 0x00 0x00 0x00 0x00 0x00 0x01 0xc0  |  r _ _ _ _ _ _
>> �[ 2504.664122] | 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00  |  _ _ _ _ _ _ _ _
>> [ 2504.664131] | 0x00 0x00 0x00 0x00 0x00 0x00 0xda 0x1a  |  _ _ _ _ _ _ � _
>> [ 2504.664139] | 0x00 0x00 0x01 0x00 0x00 0x22 0x00 0x02  |  _ _ _ _ _ " _ _
>> [ 2504.664148] | 0x4c 0x4d 0x31 0x2e 0x32 0x58 0x30 0x30  |  L M 1 . 2 X 0 0
>> [ 2504.664157] | 0x32 0x00 0x02 0x4c 0x41 0x4e 0x4d 0x41  |  2 _ _ L A N M A
>> [ 2504.664166] | 0x4e 0x32 0x2e 0x31 0x00 0x02 0x4e 0x54  |  N 2 . 1 _ _ N T
>> [ 2504.664175] | 0x20 0x4c 0x4d 0x20 0x30 0x2e 0x31 0x32  |    L M   0 . 1 2
>> [ 2504.664183] | 0x00                                     |  _
>> [ 2504.670105]  /build/buildd/linux-2.6.24/fs/cifs/connect.c: rfc1002
>> length 0x5d
>> [ 2504.670113] | 0x59 0x00 0x00 0x00 0xff 0x53 0x4d 0x42  |  Y _ _ _ � S M B
>> [ 2504.670123] | 0x72 0x00 0x00 0x00 0x00 0x80 0x01 0xc0  |  r _ _ _ _ _ _
>> �[ 2504.670132] | 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00  |  _ _ _ _ _ _ _ _
>> [ 2504.670141] | 0x00 0x00 0x00 0x00 0x00 0x00 0xda 0x1a  |  _ _ _ _ _ _ � _
>> [ 2504.670150] | 0x00 0x00 0x01 0x00 0x11 0x02 0x00 0x01  |  _ _ _ _ _ _ _ _
>> [ 2504.670159] | 0x32 0x00 0x01 0x00 0x04 0x41 0x00 0x00  |  2 _ _ _ _ A _ _
>> [ 2504.670168] | 0x00 0x00 0x01 0x00 0x82 0x2a 0x00 0x00  |  _ _ _ _ _ * _ _
>> [ 2504.670177] | 0xfd 0xf3 0x80 0x00 0x80 0x41 0xb8 0x2e  |  � � _ _ _ A � .
>> [ 2504.670187] | 0xbf 0x71 0xca 0x01 0xc4 0xff 0x00 0x14  |  � q � _ � � _ _
>> [ 2504.670196] | 0x00 0x57 0x00 0x4f 0x00 0x52 0x00 0x4b  |  _ W _ O _ R _ K
>> [ 2504.670205] | 0x00 0x47 0x00 0x52 0x00 0x4f 0x00 0x55  |  _ G _ R _ O _ U
>> [ 2504.670214] | 0x00 0x50 0x00 0x00 0x00                 |  _ P _ _ _
>> [ 2504.670252] | 0x59 0x00 0x00 0x00 0xff 0x53 0x4d 0x42  |  Y _ _ _ � S M B
>> [ 2504.670262] | 0x72 0x00 0x00 0x00 0x00 0x80 0x01 0xc0  |  r _ _ _ _ _ _
>> �[ 2504.670270] | 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00  |  _ _ _ _ _ _ _ _
>> [ 2504.670279] | 0x00 0x00 0x00 0x00 0x00 0x00 0xda 0x1a  |  _ _ _ _ _ _ � _
>> [ 2504.670288] | 0x00 0x00 0x01 0x00 0x11 0x02 0x00 0x01  |  _ _ _ _ _ _ _ _
>> [ 2504.670297] | 0x32 0x00 0x01 0x00 0x04 0x41 0x00 0x00  |  2 _ _ _ _ A _ _
>> [ 2504.670306] | 0x00 0x00 0x01 0x00 0x82 0x2a 0x00 0x00  |  _ _ _ _ _ * _ _
>> [ 2504.670314] | 0xfd 0xf3 0x80 0x00 0x80 0x41 0xb8 0x2e  |  � � _ _ _ A � .
>> [ 2504.670324] | 0xbf 0x71 0xca 0x01 0xc4 0xff 0x00 0x14  |  � q � _ � � _ _
>> [ 2504.670332] | 0x00 0x57 0x00 0x4f 0x00 0x52 0x00 0x4b  |  _ W _ O _ R _ K
>> [ 2504.670341] | 0x00 0x47 0x00 0x52 0x00 0x4f 0x00 0x55  |  _ G _ R _ O _ U
>> [ 2504.670348] | 0x00 0x50 0x00 0x00                      |  _ P _ _
>> [ 2504.670358]  /build/buildd/linux-2.6.24/fs/cifs/cifssmb.c: Dialect: 2
>> [ 2504.670363]  /build/buildd/linux-2.6.24/fs/cifs/cifssmb.c: negprot rc 0
>> [ 2504.670367]  /build/buildd/linux-2.6.24/fs/cifs/connect.c: Security
>> Mode: 0x1 Capabilities: 0x80f3fd TimeAdjust: -3600
>> [ 2504.670371]  /build/buildd/linux-2.6.24/fs/cifs/sess.c: sess setup type 2
>> [ 2504.670484]  /build/buildd/linux-2.6.24/fs/cifs/transport.c: For
>> smb_command 115
>> [ 2504.670488]  /build/buildd/linux-2.6.24/fs/cifs/transport.c:
>> Sending smb:  total_len 248
>> [ 2504.670491] | 0x00 0x00 0x00 0xf4 0xff 0x53 0x4d 0x42  |  _ _ _ � � S M B
>> [ 2504.670500] | 0x73 0x00 0x00 0x00 0x00 0x00 0x01 0xd0  |  s _ _ _ _ _ _
>> �[ 2504.670509] | 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00  |  _ _ _ _ _ _ _ _
>> [ 2504.670517] | 0x00 0x00 0x00 0x00 0x00 0x00 0xda 0x1a  |  _ _ _ _ _ _ � _
>> [ 2504.670526] | 0x00 0x00 0x02 0x00 0x0d 0xff 0x00 0x00  |  _ _ _ _ _ � _ _
>> [ 2504.670535] | 0x00 0x58 0x40 0x32 0x00 0x00 0x00 0x00  |  _ X @ 2 _ _ _ _
>> [ 2504.670544] | 0x00 0x00 0x00 0x18 0x00 0x18 0x00 0x00  |  _ _ _ _ _ _ _ _
>> [ 2504.670553] | 0x00 0x00 0x00 0xdc 0xd0 0x80 0x00 0xb7  |  _ _ _ � � _ _ �
>> [ 2504.670562] | 0x00                                     |  _
>> [ 2506.945967]  /build/buildd/linux-2.6.24/fs/cifs/connect.c: rfc1002
>> length 0x27
>> [ 2506.945975] | 0x23 0x00 0x00 0x00 0xff 0x53 0x4d 0x42  |  # _ _ _ � S M B
>> [ 2506.945985] | 0x73 0x6d 0x00 0x00 0xc0 0x80 0x01 0xc0  |  s m _ _ � _ _
>> �[ 2506.945994] | 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00  |  _ _ _ _ _ _ _ _
>> [ 2506.946003] | 0x00 0x00 0x00 0x00 0x00 0x00 0xda 0x1a  |  _ _ _ _ _ _ � _
>> [ 2506.946012] | 0x00 0x00 0x02 0x00 0x00 0x00 0x00       |  _ _ _ _ _ _ _
>> [ 2506.946038] | 0x23 0x00 0x00 0x00 0xff 0x53 0x4d 0x42  |  # _ _ _ � S M B
>> [ 2506.946048] | 0x73 0x6d 0x00 0x00 0xc0 0x80 0x01 0xc0  |  s m _ _ � _ _
>> �[ 2506.946056] | 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00  |  _ _ _ _ _ _ _ _
>> [ 2506.946063] | 0x00 0x00 0x00 0x00 0x00 0x00 0xda 0x1a  |  _ _ _ _ _ _ � _
>> [ 2506.946070] | 0x00 0x00 0x02 0x00 0x00 0x00 0x00 0xf6  |  _ _ _ _ _ _ _
>> �[ 2506.946077] | 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00  |  _ _ _ _ _ _ _ _
>> [ 2506.946084] | 0x1b 0x00 0x00 0x00 0x00 0x00 0x00 0x00  |  _ _ _ _ _ _ _ _
>> [ 2506.946091] | 0x01 0x00 0x00 0x00 0x3c 0x60 0xb4 0xf6  |  _ _ _ _ < ` �
>> �[ 2506.946098] | 0x3c 0x60 0xb4 0xf6 0x01 0x00 0x00 0x00  |  < ` � � _ _ _ _
>> [ 2506.946105] | 0x48 0x60 0xb4 0xf6 0x48 0x60 0xb4 0xf6  |  H ` � � H ` �
>> �[ 2506.946112]  |  H ` � � H ` �
>> �[ 2506.946115] Status code returned 0xc000006d NT_STATUS_LOGON_FAILURE
>> [ 2506.946121]  /build/buildd/linux-2.6.24/fs/cifs/netmisc.c: Mapping
>> smb error code 5 to POSIX err -13
>> [ 2506.946124]  /build/buildd/linux-2.6.24/fs/cifs/misc.c: Null buffer
>> passed to cifs_small_buf_release
>> [ 2506.946129]  /build/buildd/linux-2.6.24/fs/cifs/sess.c: ssetup rc
>> from sendrecv2 is -13
>> [ 2506.946133]  /build/buildd/linux-2.6.24/fs/cifs/sess.c: ssetup
>> freeing small buf f6b46000
>> [ 2506.946137]  CIFS VFS: Send error in SessSetup = -13
>> [ 2507.076409]  /build/buildd/linux-2.6.24/fs/cifs/connect.c: No
>> session or bad tcon
>> [ 2507.076417]  /build/buildd/linux-2.6.24/fs/cifs/connect.c: CIFS
>> VFS: leaving cifs_mount (xid = 14) rc = -13
>> [ 2507.076421]  CIFS VFS: cifs_mount failed w/return code = -13
>>
>> with sec=lanman result is the same (error 13) but with this message in
>> the dmesg:
>> [ 2656.284995]  CIFS VFS: Server requests plain text password but
>> client support disabled
>>
>> Thanks,
>> SC
>
> 2.6.24 is pretty ancient at this point. There were a number of patches
> that went in to fix plaintext auth a year or so ago. You might want to
> try a more recent kernel.
>
> --
> Jeff Layton <jlayton at samba.org>
>


More information about the linux-cifs-client mailing list