[linux-cifs-client] Problem mounting samba shares with PLAINTEXT password

Jeff Layton jlayton at samba.org
Mon Nov 30 09:13:27 MST 2009


On Mon, 30 Nov 2009 17:08:44 +0100
Sébastien Canchon <scanchon at gmail.com> wrote:

> Try with ubuntu 9.10 and it works perfectly with 'sec=lanman'.
> 
> I have recompiled cifs-module with these 3 patchs:
> 
> [CIFS] Turn off Unicode during session establishment for plaintext
> authentication
> [CIFS] Fix plaintext authentication
> [CIFS] Re-enable Lanman security (don't sure this patch is really usefull)
> 
> And It works now.
> Perhaps do I have to submit a bug in ubuntu ?
> 

Probably. Unless you want to carry the fix yourself.

> Thanks for your help in background Jeff :-)

No problem.

> Regards,
> SC.
> 2009/11/30 Jeff Layton <jlayton at samba.org>:
> > On Mon, 30 Nov 2009 14:41:16 +0100
> > Sébastien Canchon <scanchon at gmail.com> wrote:
> >
> >> Hello,
> >>
> >> I currently try to mount a samba share with plaintext auth.
> >> This works perfectly on linux box with smbfs, but I can't mount it
> >> CIFS box (like kubuntu 8.04).
> >> Under windows, with the good registry modification, I doesn't have problems.
> >>
> >> samba version installed on the client: 3.0.28a-1ubuntu4.9
> >>
> >> Here an output of 'modinfo cifs':
> >> filename:       /lib/modules/2.6.24-24-generic/kernel/fs/cifs/cifs.ko
> >> version:        1.52
> >> description:    VFS to access servers complying with the SNIA CIFS
> >> Specification e.g. Samba and Windows
> >> license:        GPL
> >> author:         Steve French <sfrench at us.ibm.com>
> >> srcversion:     2CAF307257F44341D360511
> >> depends:
> >> vermagic:       2.6.24-24-generic SMP mod_unload 586
> >> parm:           CIFSMaxBufSize:Network buffer size (not including
> >> header). Default: 16384 Range: 8192 to 130048 (int)
> >> parm:           cifs_min_rcv:Network buffers in pool. Default: 4
> >> Range: 1 to 64 (int)
> >> parm:           cifs_min_small:Small network buffers in pool. Default:
> >> 30 Range: 2 to 256 (int)
> >> parm:           cifs_max_pending:Simultaneous requests to server.
> >> Default: 50 Range: 2 to 256 (int)
> >>
> >> CIFS module compiled with CONFIG_CIFS_WEAK_PW_HASH enabled
> >>
> >> /proc/fs/cifs/SecurityFlags setup with "39" (0x27 in Hex)
> >>
> >> added theses lines into /etc/samba/smb.conf:
> >> client plaintext auth=yes
> >> client lanman auth=yes
> >> client ntlmv2 auth=no
> >> and rebooted the box (and re-setup 39 in /proc/fs/cifs/SecurityFlags).
> >>
> >> Now, try to mount:
> >> root at P126:~# mount.cifs //10.66.232.12/dev_users share/ -o
> >> username=G132248 --verbose
> >> Password:
> >>
> >> mount.cifs kernel mount options:
> >> unc=//10.66.232.12\dev_users,ip=10.66.232.12,ver=1,username=G132248,pass=********
> >> mount error 13 = Permission denied
> >> Refer to the mount.cifs(8) manual page (e.g.man mount.cifs)
> >>
> >> ----- dmesg outpout -----
> >> [ 2504.662550]  /build/buildd/linux-2.6.24/fs/cifs/cifsfs.c: Devname:
> >> //10.66.232.12/dev_users flags: 64
> >> [ 2504.662562]  /build/buildd/linux-2.6.24/fs/cifs/connect.c: CIFS
> >> VFS: in cifs_mount as Xid: 14 with uid: 0
> >> [ 2504.662572]  /build/buildd/linux-2.6.24/fs/cifs/connect.c: Username: G132248
> >> [ 2504.662576]  /build/buildd/linux-2.6.24/fs/cifs/connect.c: UNC:
> >> \\10.66.232.12\dev_users ip: 10.66.232.12
> >> [ 2504.662587]  /build/buildd/linux-2.6.24/fs/cifs/connect.c: Socket created
> >> [ 2504.664035]  /build/buildd/linux-2.6.24/fs/cifs/connect.c: sndbuf
> >> 16384 rcvbuf 87380 rcvtimeo 0x7fffffff
> >> [ 2504.664070]  /build/buildd/linux-2.6.24/fs/cifs/connect.c:
> >> Demultiplex PID: 6875
> >> [ 2504.664079]  /build/buildd/linux-2.6.24/fs/cifs/connect.c: Existing
> >> smb sess not found
> >> [ 2504.664088]  /build/buildd/linux-2.6.24/fs/cifs/cifssmb.c: secFlags 0x27
> >> [ 2504.664094]  /build/buildd/linux-2.6.24/fs/cifs/transport.c: For
> >> smb_command 114
> >> [ 2504.664098]  /build/buildd/linux-2.6.24/fs/cifs/transport.c:
> >> Sending smb of length 69
> >> [ 2504.664101] | 0x00 0x00 0x00 0x45 0xff 0x53 0x4d 0x42  |  _ _ _ E � S M B
> >> [ 2504.664112] | 0x72 0x00 0x00 0x00 0x00 0x00 0x01 0xc0  |  r _ _ _ _ _ _
> >> �[ 2504.664122] | 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00  |  _ _ _ _ _ _ _ _
> >> [ 2504.664131] | 0x00 0x00 0x00 0x00 0x00 0x00 0xda 0x1a  |  _ _ _ _ _ _ � _
> >> [ 2504.664139] | 0x00 0x00 0x01 0x00 0x00 0x22 0x00 0x02  |  _ _ _ _ _ " _ _
> >> [ 2504.664148] | 0x4c 0x4d 0x31 0x2e 0x32 0x58 0x30 0x30  |  L M 1 . 2 X 0 0
> >> [ 2504.664157] | 0x32 0x00 0x02 0x4c 0x41 0x4e 0x4d 0x41  |  2 _ _ L A N M A
> >> [ 2504.664166] | 0x4e 0x32 0x2e 0x31 0x00 0x02 0x4e 0x54  |  N 2 . 1 _ _ N T
> >> [ 2504.664175] | 0x20 0x4c 0x4d 0x20 0x30 0x2e 0x31 0x32  |    L M   0 . 1 2
> >> [ 2504.664183] | 0x00                                     |  _
> >> [ 2504.670105]  /build/buildd/linux-2.6.24/fs/cifs/connect.c: rfc1002
> >> length 0x5d
> >> [ 2504.670113] | 0x59 0x00 0x00 0x00 0xff 0x53 0x4d 0x42  |  Y _ _ _ � S M B
> >> [ 2504.670123] | 0x72 0x00 0x00 0x00 0x00 0x80 0x01 0xc0  |  r _ _ _ _ _ _
> >> �[ 2504.670132] | 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00  |  _ _ _ _ _ _ _ _
> >> [ 2504.670141] | 0x00 0x00 0x00 0x00 0x00 0x00 0xda 0x1a  |  _ _ _ _ _ _ � _
> >> [ 2504.670150] | 0x00 0x00 0x01 0x00 0x11 0x02 0x00 0x01  |  _ _ _ _ _ _ _ _
> >> [ 2504.670159] | 0x32 0x00 0x01 0x00 0x04 0x41 0x00 0x00  |  2 _ _ _ _ A _ _
> >> [ 2504.670168] | 0x00 0x00 0x01 0x00 0x82 0x2a 0x00 0x00  |  _ _ _ _ _ * _ _
> >> [ 2504.670177] | 0xfd 0xf3 0x80 0x00 0x80 0x41 0xb8 0x2e  |  � � _ _ _ A � .
> >> [ 2504.670187] | 0xbf 0x71 0xca 0x01 0xc4 0xff 0x00 0x14  |  � q � _ � � _ _
> >> [ 2504.670196] | 0x00 0x57 0x00 0x4f 0x00 0x52 0x00 0x4b  |  _ W _ O _ R _ K
> >> [ 2504.670205] | 0x00 0x47 0x00 0x52 0x00 0x4f 0x00 0x55  |  _ G _ R _ O _ U
> >> [ 2504.670214] | 0x00 0x50 0x00 0x00 0x00                 |  _ P _ _ _
> >> [ 2504.670252] | 0x59 0x00 0x00 0x00 0xff 0x53 0x4d 0x42  |  Y _ _ _ � S M B
> >> [ 2504.670262] | 0x72 0x00 0x00 0x00 0x00 0x80 0x01 0xc0  |  r _ _ _ _ _ _
> >> �[ 2504.670270] | 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00  |  _ _ _ _ _ _ _ _
> >> [ 2504.670279] | 0x00 0x00 0x00 0x00 0x00 0x00 0xda 0x1a  |  _ _ _ _ _ _ � _
> >> [ 2504.670288] | 0x00 0x00 0x01 0x00 0x11 0x02 0x00 0x01  |  _ _ _ _ _ _ _ _
> >> [ 2504.670297] | 0x32 0x00 0x01 0x00 0x04 0x41 0x00 0x00  |  2 _ _ _ _ A _ _
> >> [ 2504.670306] | 0x00 0x00 0x01 0x00 0x82 0x2a 0x00 0x00  |  _ _ _ _ _ * _ _
> >> [ 2504.670314] | 0xfd 0xf3 0x80 0x00 0x80 0x41 0xb8 0x2e  |  � � _ _ _ A � .
> >> [ 2504.670324] | 0xbf 0x71 0xca 0x01 0xc4 0xff 0x00 0x14  |  � q � _ � � _ _
> >> [ 2504.670332] | 0x00 0x57 0x00 0x4f 0x00 0x52 0x00 0x4b  |  _ W _ O _ R _ K
> >> [ 2504.670341] | 0x00 0x47 0x00 0x52 0x00 0x4f 0x00 0x55  |  _ G _ R _ O _ U
> >> [ 2504.670348] | 0x00 0x50 0x00 0x00                      |  _ P _ _
> >> [ 2504.670358]  /build/buildd/linux-2.6.24/fs/cifs/cifssmb.c: Dialect: 2
> >> [ 2504.670363]  /build/buildd/linux-2.6.24/fs/cifs/cifssmb.c: negprot rc 0
> >> [ 2504.670367]  /build/buildd/linux-2.6.24/fs/cifs/connect.c: Security
> >> Mode: 0x1 Capabilities: 0x80f3fd TimeAdjust: -3600
> >> [ 2504.670371]  /build/buildd/linux-2.6.24/fs/cifs/sess.c: sess setup type 2
> >> [ 2504.670484]  /build/buildd/linux-2.6.24/fs/cifs/transport.c: For
> >> smb_command 115
> >> [ 2504.670488]  /build/buildd/linux-2.6.24/fs/cifs/transport.c:
> >> Sending smb:  total_len 248
> >> [ 2504.670491] | 0x00 0x00 0x00 0xf4 0xff 0x53 0x4d 0x42  |  _ _ _ � � S M B
> >> [ 2504.670500] | 0x73 0x00 0x00 0x00 0x00 0x00 0x01 0xd0  |  s _ _ _ _ _ _
> >> �[ 2504.670509] | 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00  |  _ _ _ _ _ _ _ _
> >> [ 2504.670517] | 0x00 0x00 0x00 0x00 0x00 0x00 0xda 0x1a  |  _ _ _ _ _ _ � _
> >> [ 2504.670526] | 0x00 0x00 0x02 0x00 0x0d 0xff 0x00 0x00  |  _ _ _ _ _ � _ _
> >> [ 2504.670535] | 0x00 0x58 0x40 0x32 0x00 0x00 0x00 0x00  |  _ X @ 2 _ _ _ _
> >> [ 2504.670544] | 0x00 0x00 0x00 0x18 0x00 0x18 0x00 0x00  |  _ _ _ _ _ _ _ _
> >> [ 2504.670553] | 0x00 0x00 0x00 0xdc 0xd0 0x80 0x00 0xb7  |  _ _ _ � � _ _ �
> >> [ 2504.670562] | 0x00                                     |  _
> >> [ 2506.945967]  /build/buildd/linux-2.6.24/fs/cifs/connect.c: rfc1002
> >> length 0x27
> >> [ 2506.945975] | 0x23 0x00 0x00 0x00 0xff 0x53 0x4d 0x42  |  # _ _ _ � S M B
> >> [ 2506.945985] | 0x73 0x6d 0x00 0x00 0xc0 0x80 0x01 0xc0  |  s m _ _ � _ _
> >> �[ 2506.945994] | 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00  |  _ _ _ _ _ _ _ _
> >> [ 2506.946003] | 0x00 0x00 0x00 0x00 0x00 0x00 0xda 0x1a  |  _ _ _ _ _ _ � _
> >> [ 2506.946012] | 0x00 0x00 0x02 0x00 0x00 0x00 0x00       |  _ _ _ _ _ _ _
> >> [ 2506.946038] | 0x23 0x00 0x00 0x00 0xff 0x53 0x4d 0x42  |  # _ _ _ � S M B
> >> [ 2506.946048] | 0x73 0x6d 0x00 0x00 0xc0 0x80 0x01 0xc0  |  s m _ _ � _ _
> >> �[ 2506.946056] | 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00  |  _ _ _ _ _ _ _ _
> >> [ 2506.946063] | 0x00 0x00 0x00 0x00 0x00 0x00 0xda 0x1a  |  _ _ _ _ _ _ � _
> >> [ 2506.946070] | 0x00 0x00 0x02 0x00 0x00 0x00 0x00 0xf6  |  _ _ _ _ _ _ _
> >> �[ 2506.946077] | 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00  |  _ _ _ _ _ _ _ _
> >> [ 2506.946084] | 0x1b 0x00 0x00 0x00 0x00 0x00 0x00 0x00  |  _ _ _ _ _ _ _ _
> >> [ 2506.946091] | 0x01 0x00 0x00 0x00 0x3c 0x60 0xb4 0xf6  |  _ _ _ _ < ` �
> >> �[ 2506.946098] | 0x3c 0x60 0xb4 0xf6 0x01 0x00 0x00 0x00  |  < ` � � _ _ _ _
> >> [ 2506.946105] | 0x48 0x60 0xb4 0xf6 0x48 0x60 0xb4 0xf6  |  H ` � � H ` �
> >> �[ 2506.946112]  |  H ` � � H ` �
> >> �[ 2506.946115] Status code returned 0xc000006d NT_STATUS_LOGON_FAILURE
> >> [ 2506.946121]  /build/buildd/linux-2.6.24/fs/cifs/netmisc.c: Mapping
> >> smb error code 5 to POSIX err -13
> >> [ 2506.946124]  /build/buildd/linux-2.6.24/fs/cifs/misc.c: Null buffer
> >> passed to cifs_small_buf_release
> >> [ 2506.946129]  /build/buildd/linux-2.6.24/fs/cifs/sess.c: ssetup rc
> >> from sendrecv2 is -13
> >> [ 2506.946133]  /build/buildd/linux-2.6.24/fs/cifs/sess.c: ssetup
> >> freeing small buf f6b46000
> >> [ 2506.946137]  CIFS VFS: Send error in SessSetup = -13
> >> [ 2507.076409]  /build/buildd/linux-2.6.24/fs/cifs/connect.c: No
> >> session or bad tcon
> >> [ 2507.076417]  /build/buildd/linux-2.6.24/fs/cifs/connect.c: CIFS
> >> VFS: leaving cifs_mount (xid = 14) rc = -13
> >> [ 2507.076421]  CIFS VFS: cifs_mount failed w/return code = -13
> >>
> >> with sec=lanman result is the same (error 13) but with this message in
> >> the dmesg:
> >> [ 2656.284995]  CIFS VFS: Server requests plain text password but
> >> client support disabled
> >>
> >> Thanks,
> >> SC
> >
> > 2.6.24 is pretty ancient at this point. There were a number of patches
> > that went in to fix plaintext auth a year or so ago. You might want to
> > try a more recent kernel.
> >
> > --
> > Jeff Layton <jlayton at samba.org>
> >
> 


-- 
Jeff Layton <jlayton at samba.org>


More information about the linux-cifs-client mailing list