[linux-cifs-client] Problem mounting samba shares with PLAINTEXT password
Sébastien Canchon
scanchon at gmail.com
Mon Nov 30 09:08:44 MST 2009
Try with ubuntu 9.10 and it works perfectly with 'sec=lanman'.
I have recompiled cifs-module with these 3 patchs:
[CIFS] Turn off Unicode during session establishment for plaintext
authentication
[CIFS] Fix plaintext authentication
[CIFS] Re-enable Lanman security (don't sure this patch is really usefull)
And It works now.
Perhaps do I have to submit a bug in ubuntu ?
Thanks for your help in background Jeff :-)
Regards,
SC.
2009/11/30 Jeff Layton <jlayton at samba.org>:
> On Mon, 30 Nov 2009 14:41:16 +0100
> Sébastien Canchon <scanchon at gmail.com> wrote:
>
>> Hello,
>>
>> I currently try to mount a samba share with plaintext auth.
>> This works perfectly on linux box with smbfs, but I can't mount it
>> CIFS box (like kubuntu 8.04).
>> Under windows, with the good registry modification, I doesn't have problems.
>>
>> samba version installed on the client: 3.0.28a-1ubuntu4.9
>>
>> Here an output of 'modinfo cifs':
>> filename: /lib/modules/2.6.24-24-generic/kernel/fs/cifs/cifs.ko
>> version: 1.52
>> description: VFS to access servers complying with the SNIA CIFS
>> Specification e.g. Samba and Windows
>> license: GPL
>> author: Steve French <sfrench at us.ibm.com>
>> srcversion: 2CAF307257F44341D360511
>> depends:
>> vermagic: 2.6.24-24-generic SMP mod_unload 586
>> parm: CIFSMaxBufSize:Network buffer size (not including
>> header). Default: 16384 Range: 8192 to 130048 (int)
>> parm: cifs_min_rcv:Network buffers in pool. Default: 4
>> Range: 1 to 64 (int)
>> parm: cifs_min_small:Small network buffers in pool. Default:
>> 30 Range: 2 to 256 (int)
>> parm: cifs_max_pending:Simultaneous requests to server.
>> Default: 50 Range: 2 to 256 (int)
>>
>> CIFS module compiled with CONFIG_CIFS_WEAK_PW_HASH enabled
>>
>> /proc/fs/cifs/SecurityFlags setup with "39" (0x27 in Hex)
>>
>> added theses lines into /etc/samba/smb.conf:
>> client plaintext auth=yes
>> client lanman auth=yes
>> client ntlmv2 auth=no
>> and rebooted the box (and re-setup 39 in /proc/fs/cifs/SecurityFlags).
>>
>> Now, try to mount:
>> root at P126:~# mount.cifs //10.66.232.12/dev_users share/ -o
>> username=G132248 --verbose
>> Password:
>>
>> mount.cifs kernel mount options:
>> unc=//10.66.232.12\dev_users,ip=10.66.232.12,ver=1,username=G132248,pass=********
>> mount error 13 = Permission denied
>> Refer to the mount.cifs(8) manual page (e.g.man mount.cifs)
>>
>> ----- dmesg outpout -----
>> [ 2504.662550] /build/buildd/linux-2.6.24/fs/cifs/cifsfs.c: Devname:
>> //10.66.232.12/dev_users flags: 64
>> [ 2504.662562] /build/buildd/linux-2.6.24/fs/cifs/connect.c: CIFS
>> VFS: in cifs_mount as Xid: 14 with uid: 0
>> [ 2504.662572] /build/buildd/linux-2.6.24/fs/cifs/connect.c: Username: G132248
>> [ 2504.662576] /build/buildd/linux-2.6.24/fs/cifs/connect.c: UNC:
>> \\10.66.232.12\dev_users ip: 10.66.232.12
>> [ 2504.662587] /build/buildd/linux-2.6.24/fs/cifs/connect.c: Socket created
>> [ 2504.664035] /build/buildd/linux-2.6.24/fs/cifs/connect.c: sndbuf
>> 16384 rcvbuf 87380 rcvtimeo 0x7fffffff
>> [ 2504.664070] /build/buildd/linux-2.6.24/fs/cifs/connect.c:
>> Demultiplex PID: 6875
>> [ 2504.664079] /build/buildd/linux-2.6.24/fs/cifs/connect.c: Existing
>> smb sess not found
>> [ 2504.664088] /build/buildd/linux-2.6.24/fs/cifs/cifssmb.c: secFlags 0x27
>> [ 2504.664094] /build/buildd/linux-2.6.24/fs/cifs/transport.c: For
>> smb_command 114
>> [ 2504.664098] /build/buildd/linux-2.6.24/fs/cifs/transport.c:
>> Sending smb of length 69
>> [ 2504.664101] | 0x00 0x00 0x00 0x45 0xff 0x53 0x4d 0x42 | _ _ _ E � S M B
>> [ 2504.664112] | 0x72 0x00 0x00 0x00 0x00 0x00 0x01 0xc0 | r _ _ _ _ _ _
>> �[ 2504.664122] | 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 | _ _ _ _ _ _ _ _
>> [ 2504.664131] | 0x00 0x00 0x00 0x00 0x00 0x00 0xda 0x1a | _ _ _ _ _ _ � _
>> [ 2504.664139] | 0x00 0x00 0x01 0x00 0x00 0x22 0x00 0x02 | _ _ _ _ _ " _ _
>> [ 2504.664148] | 0x4c 0x4d 0x31 0x2e 0x32 0x58 0x30 0x30 | L M 1 . 2 X 0 0
>> [ 2504.664157] | 0x32 0x00 0x02 0x4c 0x41 0x4e 0x4d 0x41 | 2 _ _ L A N M A
>> [ 2504.664166] | 0x4e 0x32 0x2e 0x31 0x00 0x02 0x4e 0x54 | N 2 . 1 _ _ N T
>> [ 2504.664175] | 0x20 0x4c 0x4d 0x20 0x30 0x2e 0x31 0x32 | L M 0 . 1 2
>> [ 2504.664183] | 0x00 | _
>> [ 2504.670105] /build/buildd/linux-2.6.24/fs/cifs/connect.c: rfc1002
>> length 0x5d
>> [ 2504.670113] | 0x59 0x00 0x00 0x00 0xff 0x53 0x4d 0x42 | Y _ _ _ � S M B
>> [ 2504.670123] | 0x72 0x00 0x00 0x00 0x00 0x80 0x01 0xc0 | r _ _ _ _ _ _
>> �[ 2504.670132] | 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 | _ _ _ _ _ _ _ _
>> [ 2504.670141] | 0x00 0x00 0x00 0x00 0x00 0x00 0xda 0x1a | _ _ _ _ _ _ � _
>> [ 2504.670150] | 0x00 0x00 0x01 0x00 0x11 0x02 0x00 0x01 | _ _ _ _ _ _ _ _
>> [ 2504.670159] | 0x32 0x00 0x01 0x00 0x04 0x41 0x00 0x00 | 2 _ _ _ _ A _ _
>> [ 2504.670168] | 0x00 0x00 0x01 0x00 0x82 0x2a 0x00 0x00 | _ _ _ _ _ * _ _
>> [ 2504.670177] | 0xfd 0xf3 0x80 0x00 0x80 0x41 0xb8 0x2e | � � _ _ _ A � .
>> [ 2504.670187] | 0xbf 0x71 0xca 0x01 0xc4 0xff 0x00 0x14 | � q � _ � � _ _
>> [ 2504.670196] | 0x00 0x57 0x00 0x4f 0x00 0x52 0x00 0x4b | _ W _ O _ R _ K
>> [ 2504.670205] | 0x00 0x47 0x00 0x52 0x00 0x4f 0x00 0x55 | _ G _ R _ O _ U
>> [ 2504.670214] | 0x00 0x50 0x00 0x00 0x00 | _ P _ _ _
>> [ 2504.670252] | 0x59 0x00 0x00 0x00 0xff 0x53 0x4d 0x42 | Y _ _ _ � S M B
>> [ 2504.670262] | 0x72 0x00 0x00 0x00 0x00 0x80 0x01 0xc0 | r _ _ _ _ _ _
>> �[ 2504.670270] | 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 | _ _ _ _ _ _ _ _
>> [ 2504.670279] | 0x00 0x00 0x00 0x00 0x00 0x00 0xda 0x1a | _ _ _ _ _ _ � _
>> [ 2504.670288] | 0x00 0x00 0x01 0x00 0x11 0x02 0x00 0x01 | _ _ _ _ _ _ _ _
>> [ 2504.670297] | 0x32 0x00 0x01 0x00 0x04 0x41 0x00 0x00 | 2 _ _ _ _ A _ _
>> [ 2504.670306] | 0x00 0x00 0x01 0x00 0x82 0x2a 0x00 0x00 | _ _ _ _ _ * _ _
>> [ 2504.670314] | 0xfd 0xf3 0x80 0x00 0x80 0x41 0xb8 0x2e | � � _ _ _ A � .
>> [ 2504.670324] | 0xbf 0x71 0xca 0x01 0xc4 0xff 0x00 0x14 | � q � _ � � _ _
>> [ 2504.670332] | 0x00 0x57 0x00 0x4f 0x00 0x52 0x00 0x4b | _ W _ O _ R _ K
>> [ 2504.670341] | 0x00 0x47 0x00 0x52 0x00 0x4f 0x00 0x55 | _ G _ R _ O _ U
>> [ 2504.670348] | 0x00 0x50 0x00 0x00 | _ P _ _
>> [ 2504.670358] /build/buildd/linux-2.6.24/fs/cifs/cifssmb.c: Dialect: 2
>> [ 2504.670363] /build/buildd/linux-2.6.24/fs/cifs/cifssmb.c: negprot rc 0
>> [ 2504.670367] /build/buildd/linux-2.6.24/fs/cifs/connect.c: Security
>> Mode: 0x1 Capabilities: 0x80f3fd TimeAdjust: -3600
>> [ 2504.670371] /build/buildd/linux-2.6.24/fs/cifs/sess.c: sess setup type 2
>> [ 2504.670484] /build/buildd/linux-2.6.24/fs/cifs/transport.c: For
>> smb_command 115
>> [ 2504.670488] /build/buildd/linux-2.6.24/fs/cifs/transport.c:
>> Sending smb: total_len 248
>> [ 2504.670491] | 0x00 0x00 0x00 0xf4 0xff 0x53 0x4d 0x42 | _ _ _ � � S M B
>> [ 2504.670500] | 0x73 0x00 0x00 0x00 0x00 0x00 0x01 0xd0 | s _ _ _ _ _ _
>> �[ 2504.670509] | 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 | _ _ _ _ _ _ _ _
>> [ 2504.670517] | 0x00 0x00 0x00 0x00 0x00 0x00 0xda 0x1a | _ _ _ _ _ _ � _
>> [ 2504.670526] | 0x00 0x00 0x02 0x00 0x0d 0xff 0x00 0x00 | _ _ _ _ _ � _ _
>> [ 2504.670535] | 0x00 0x58 0x40 0x32 0x00 0x00 0x00 0x00 | _ X @ 2 _ _ _ _
>> [ 2504.670544] | 0x00 0x00 0x00 0x18 0x00 0x18 0x00 0x00 | _ _ _ _ _ _ _ _
>> [ 2504.670553] | 0x00 0x00 0x00 0xdc 0xd0 0x80 0x00 0xb7 | _ _ _ � � _ _ �
>> [ 2504.670562] | 0x00 | _
>> [ 2506.945967] /build/buildd/linux-2.6.24/fs/cifs/connect.c: rfc1002
>> length 0x27
>> [ 2506.945975] | 0x23 0x00 0x00 0x00 0xff 0x53 0x4d 0x42 | # _ _ _ � S M B
>> [ 2506.945985] | 0x73 0x6d 0x00 0x00 0xc0 0x80 0x01 0xc0 | s m _ _ � _ _
>> �[ 2506.945994] | 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 | _ _ _ _ _ _ _ _
>> [ 2506.946003] | 0x00 0x00 0x00 0x00 0x00 0x00 0xda 0x1a | _ _ _ _ _ _ � _
>> [ 2506.946012] | 0x00 0x00 0x02 0x00 0x00 0x00 0x00 | _ _ _ _ _ _ _
>> [ 2506.946038] | 0x23 0x00 0x00 0x00 0xff 0x53 0x4d 0x42 | # _ _ _ � S M B
>> [ 2506.946048] | 0x73 0x6d 0x00 0x00 0xc0 0x80 0x01 0xc0 | s m _ _ � _ _
>> �[ 2506.946056] | 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 | _ _ _ _ _ _ _ _
>> [ 2506.946063] | 0x00 0x00 0x00 0x00 0x00 0x00 0xda 0x1a | _ _ _ _ _ _ � _
>> [ 2506.946070] | 0x00 0x00 0x02 0x00 0x00 0x00 0x00 0xf6 | _ _ _ _ _ _ _
>> �[ 2506.946077] | 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 | _ _ _ _ _ _ _ _
>> [ 2506.946084] | 0x1b 0x00 0x00 0x00 0x00 0x00 0x00 0x00 | _ _ _ _ _ _ _ _
>> [ 2506.946091] | 0x01 0x00 0x00 0x00 0x3c 0x60 0xb4 0xf6 | _ _ _ _ < ` �
>> �[ 2506.946098] | 0x3c 0x60 0xb4 0xf6 0x01 0x00 0x00 0x00 | < ` � � _ _ _ _
>> [ 2506.946105] | 0x48 0x60 0xb4 0xf6 0x48 0x60 0xb4 0xf6 | H ` � � H ` �
>> �[ 2506.946112] | H ` � � H ` �
>> �[ 2506.946115] Status code returned 0xc000006d NT_STATUS_LOGON_FAILURE
>> [ 2506.946121] /build/buildd/linux-2.6.24/fs/cifs/netmisc.c: Mapping
>> smb error code 5 to POSIX err -13
>> [ 2506.946124] /build/buildd/linux-2.6.24/fs/cifs/misc.c: Null buffer
>> passed to cifs_small_buf_release
>> [ 2506.946129] /build/buildd/linux-2.6.24/fs/cifs/sess.c: ssetup rc
>> from sendrecv2 is -13
>> [ 2506.946133] /build/buildd/linux-2.6.24/fs/cifs/sess.c: ssetup
>> freeing small buf f6b46000
>> [ 2506.946137] CIFS VFS: Send error in SessSetup = -13
>> [ 2507.076409] /build/buildd/linux-2.6.24/fs/cifs/connect.c: No
>> session or bad tcon
>> [ 2507.076417] /build/buildd/linux-2.6.24/fs/cifs/connect.c: CIFS
>> VFS: leaving cifs_mount (xid = 14) rc = -13
>> [ 2507.076421] CIFS VFS: cifs_mount failed w/return code = -13
>>
>> with sec=lanman result is the same (error 13) but with this message in
>> the dmesg:
>> [ 2656.284995] CIFS VFS: Server requests plain text password but
>> client support disabled
>>
>> Thanks,
>> SC
>
> 2.6.24 is pretty ancient at this point. There were a number of patches
> that went in to fix plaintext auth a year or so ago. You might want to
> try a more recent kernel.
>
> --
> Jeff Layton <jlayton at samba.org>
>
More information about the linux-cifs-client
mailing list