[Samba] SMB Signing issues... smbclient works, mount does not...

[Günter Kukkukk]

Am Montag, 26. Januar 2009 schrieb Julian Houghton:
> --- On Sun, 25/1/09, Kai Blin <kai at samba.org> wrote:
> <snip>
> > smbfs has been deprecated quite a while ago. Please try
> > using cifs.
> <snip>
> 
> Hi Kai
> 
> Thanks for the reply... I will stick to CIFS as you suggest.
> 
> Thus, as per my previous posting, smbclient works fine. However, trying to mount with the following command results in the usual error:
> <snip>
> [root at localhost ~]# mount -t cifs -o username=user,password=pass,ip=192.200.200.10,servern=SERVER //server/share /mnt/share/
> mount error 13 = Permission denied
> Refer to the mount.cifs(8) manual page (e.g.man mount.cifs)
> <snip>
> 
> A look at messages shows:
> <snip>
> [root at localhost cifs]# tail -n 3 /var/log/messages
> Jan 26 21:22:15 localhost kernel:  CIFS VFS: Unexpected SMB signature
> Jan 26 21:22:15 localhost kernel:  CIFS VFS: Send error in SessSetup = -13
> Jan 26 21:22:15 localhost kernel:  CIFS VFS: cifs_mount failed w/return code = -13
> <snip>
> 
> My question is, how do I enable SMB Signing for the CIFS kernel module. I'm guessing that I need to add something to the /proc/fs/cifs/ directory?
> 
> I cannot find an online resource that lists all the possible module parameters... does one exist (the user manual isn't exhuastive)?
> 
> Thanks.
> 
> ***************************
> Other info that may relate:
> 
> I am running kernel 2.6.22.17.tex2, with tools mount-cifs-3.0.30-3pclos2007 installed. Running modprobe returns the following:
> <snip>
> [root at localhost ~]# modinfo cifs.ko
> filename:       /lib/modules/2.6.22.17.tex2/kernel/fs/cifs/cifs.ko.gz
> author:         Steve French <sfrench at us.ibm.com>
> license:        GPL
> description:    VFS to access servers complying with the SNIA CIFS Specification e.g. Samba and Windows
> version:        1.49
> vermagic:       2.6.22.17.tex2 SMP mod_unload 686
> depends:
> srcversion:     30616BA7D30E1F22CF9B850
> parm:           cifs_max_pending:Simultaneous requests to server. Default: 50 Range: 2 to 256 (int)
> parm:           cifs_min_small:Small network buffers in pool. Default: 30 Range: 2 to 256 (int)
> parm:           cifs_min_rcv:Network buffers in pool. Default: 4 Range: 1 to 64 (int)
> parm:           CIFSMaxBufSize:Network buffer size (not including header). Default: 16384 Range: 8192 to 130048 (int)
> <snip>
> 
> 
>       

at least most recent cifs vfs (version 1.56) from kernel 2.6.28 does
support the mount option "sign".
Have a look at the following url for the files README and CHANGES
to see the full details regarding options and change notes:
(should be _one_ long url line!)
http://git.kernel.org/?p=linux/kernel/git/sfrench/cifs-2.6.git;a=tree;f=fs/cifs;h=34a787a31402775e2dffc6f3f3c50aaf2e6e24b9;hb=c996d2b116a0f3e1c4d09cfc0e2c926558fece79

You'll also notice the description of the pseudo file at
  /proc/fs/cifs/PacketSigningEnabled

Cheers, Günter