[Samba] smbclient -k works; mount -t cifs does not

[Jeff Layton]

On Mon, 03 May 2010 23:25:13 -0400
Mike Leone <turgon at mike-leone.com> wrote:

> I am confused (nothing new there ...). I have 2 Ubuntu 9.10 Samba
> servers. I am trying to mount a share from the other (i.e., "workhorse"
> is trying to mount a share on "dual-booter"). If I specify a smbmount
> command with a -k option, I can mount the share:
> 
> turgon at workhorse:~$ klist
> Ticket cache: FILE:/tmp/krb5cc_1000
> Default principal: turgon at DACRIB.LOCAL
> 
> Valid starting     Expires            Service principal
> 05/03/10 18:55:31  05/04/10 04:55:31  krbtgt/DACRIB.LOCAL at DACRIB.LOCAL
> 	renew until 05/09/10 22:56:03
> 05/03/10 23:07:07  05/04/10 04:55:31
> cifs/dual-booter.dacrib.local at DACRIB.LOCAL
> 	renew until 05/09/10 22:56:03
> 
> 
> turgon at workhorse:~$ smbclient //dual-booter/TestShare /mnt -k
> Domain=[DACRIB] OS=[Unix] Server=[Samba 3.4.0]
> smb: \> ls
>   .                              D        0  Sat May  1 19:27:48 2010
>   ..                             D        0  Mon May  3 19:58:00 2010
>   TestFile                                0  Sat May  1 19:27:48 2010
> 
> 		37555 blocks of size 524288. 22379 blocks available
> 
> However, I can't seem to mount it using mount -t cifs:
> 
> $ sudo mount -t cifs //dual-booter/TestShare /mnt -o username=DACRIB+turgon
> [sudo] password for turgon:
> Password:
> mount error(13): Permission denied
> Refer to the mount.cifs(8) manual page (e.g. man mount.cifs)
> 
> What I'd like to do is to set this in /etc/fstab. But there seems to be
> no way to use Kerberos to authenticate the mounting, and it's only
> Kerberos (and smbmount) that seems to work. And using the "-o sec=krb5"
> options on mount doesn't seem to work, either.
> 
> $ sudo mount -t cifs //dual-booter/TestShare /mnt -o sec=krb5
> mount error(2): No such file or directory
> Refer to the mount.cifs(8) manual page (e.g. man mount.cifs)
> 

Try using the FQDN of the server in the UNC. For instance:

   //dual-booter.dacrib.local/TestShare

> Anyone? I really don't want to have to make a script that uses smbmount
> -k, running on login, rather than in /etc/fstab.
> 
> Thanks


-- 
Jeff Layton <jlayton at poochiereds.net>