[Samba] Still can't mount Samba shares from other Samba server

Mike Leone turgon at mike-leone.com
Wed May 12 22:20:43 MDT 2010 

I am *still* unable to mount shares from a Ubuntu 10.04 server, using a 
Ubuntu 10.04 laptop. I totally re-formatted both my desktop and my 
laptop with Ubuntu 10.04 (so that they would be using the same version 
of Samba). I am using the exact same smb.conf for the 2 machines (less 
the share definitions, which exist only on the desktop, known as 
"workhorse"). wbinfo -u, wbinfo -g, wbinfo -t, wbinfo -a domainuser- 
these all work. getent passwd and getent group both work, and both 
return the exact same info, on both machines:

DACRIB+administrator:*:10002:10000:Administrator:/home/DACRIB/Administrator:/bin/sh
DACRIB+krbtgt:*:10006:10000:krbtgt:/home/DACRIB/krbtgt:/bin/sh
DACRIB+turgon:*:10003:10000:Mike Leone:/home/DACRIB/turgon:/bin/bash
DACRIB+leonem:*:10000:10000:Leone, Mike:/home/DACRIB/LeoneM:/bin/bash
DACRIB+servicerunner:*:10005:10000:ServiceRunner:/home/DACRIB/ServiceRunner:/bin/sh
DACRIB+ldap-proxy:*:10001:10000:LDAP Proxy:/home/DACRIB/ldap-proxy:/bin/sh

It returns the uid that was entered on the Unix Attributes tab of my 
Win2003 w/SFU AD entry. So it looks like domain users are being mapped 
identically, on both machines.

Yet trying to mount a share from workhorse onto Dual-Booter fails:

(on Dual-Booter)
# smbmount //workhorse/OldHome /OldHome -o username=DACRIB+turgon
Password:
mount error(13): Permission denied
Refer to the mount.cifs(8) manual page (e.g. man mount.cifs)

So I did a  "echo 1 > /proc/fs/cifs/cifsFYI"  and tried again, and then 
saw this, in syslog:

/build/buildd/linux-2.6.32/fs/cifs/cifsfs.c: Devname: 
//workhorse/OldHome flags: 64
/build/buildd/linux-2.6.32/fs/cifs/connect.c: CIFS VFS: in cifs_mount as 
Xid: 1 with uid: 0
/build/buildd/linux-2.6.32/fs/cifs/connect.c: Username: DACRIB+turgon
/build/buildd/linux-2.6.32/fs/cifs/connect.c: UNC: \\workhorse\OldHome 
ip: 10.0.0.20
/build/buildd/linux-2.6.32/fs/cifs/connect.c: Socket created
/build/buildd/linux-2.6.32/fs/cifs/connect.c: sndbuf 16384 rcvbuf 87380 
rcvtimeo 0x6d6
/build/buildd/linux-2.6.32/fs/cifs/connect.c: Existing smb sess not found
/build/buildd/linux-2.6.32/fs/cifs/cifssmb.c: secFlags 0x7
/build/buildd/linux-2.6.32/fs/cifs/transport.c: For smb_command 114
/build/buildd/linux-2.6.32/fs/cifs/transport.c: Sending smb:  total_len 82
/build/buildd/linux-2.6.32/fs/cifs/connect.c: Demultiplex PID: 1752
/build/buildd/linux-2.6.32/fs/cifs/connect.c: rfc1002 length 0x5f
/build/buildd/linux-2.6.32/fs/cifs/misc.c: Calculated size 81 vs length 
95 mismatch for mid 1
/build/buildd/linux-2.6.32/fs/cifs/cifssmb.c: Dialect: 2
/build/buildd/linux-2.6.32/fs/cifs/cifssmb.c: negprot rc 0
/build/buildd/linux-2.6.32/fs/cifs/connect.c: Security Mode: 0x3 
Capabilities: 0x80f3fc TimeAdjust: 14400
/build/buildd/linux-2.6.32/fs/cifs/sess.c: sess setup type 2
/build/buildd/linux-2.6.32/fs/cifs/transport.c: For smb_command 115
/build/buildd/linux-2.6.32/fs/cifs/transport.c: Sending smb:  total_len 260
/build/buildd/linux-2.6.32/fs/cifs/connect.c: rfc1002 length 0x5e
/build/buildd/linux-2.6.32/fs/cifs/misc.c: Null buffer passed to 
cifs_small_buf_release
/build/buildd/linux-2.6.32/fs/cifs/sess.c: ssetup rc from sendrecv2 is 0
/build/buildd/linux-2.6.32/fs/cifs/sess.c: Guest login
/build/buildd/linux-2.6.32/fs/cifs/sess.c: UID = 100
/build/buildd/linux-2.6.32/fs/cifs/sess.c: bleft 48
/build/buildd/linux-2.6.32/fs/cifs/sess.c: serverOS=Unix
/build/buildd/linux-2.6.32/fs/cifs/sess.c: serverNOS=Samba 3.4.7
/build/buildd/linux-2.6.32/fs/cifs/sess.c: serverDomain=DACRIB
/build/buildd/linux-2.6.32/fs/cifs/sess.c: ssetup freeing small buf d99201c0
/build/buildd/linux-2.6.32/fs/cifs/connect.c: CIFS Session Established 
successfully
/build/buildd/linux-2.6.32/fs/cifs/connect.c: file mode: 0x1ed  dir 
mode: 0x1ed
/build/buildd/linux-2.6.32/fs/cifs/transport.c: For smb_command 117
/build/buildd/linux-2.6.32/fs/cifs/transport.c: Sending smb:  total_len 94
/build/buildd/linux-2.6.32/fs/cifs/connect.c: rfc1002 length 0x27
/build/buildd/linux-2.6.32/fs/cifs/netmisc.c: Mapping smb error code 5 
to POSIX err -13
/build/buildd/linux-2.6.32/fs/cifs/connect.c: CIFS Tcon rc = -13
/build/buildd/linux-2.6.32/fs/cifs/connect.c: CIFS VFS: in cifs_put_tcon 
as Xid: 2 with uid: 0
/build/buildd/linux-2.6.32/fs/cifs/cifssmb.c: In tree disconnect
/build/buildd/linux-2.6.32/fs/cifs/transport.c: For smb_command 113
/build/buildd/linux-2.6.32/fs/cifs/transport.c: Sending smb:  total_len 39
/build/buildd/linux-2.6.32/fs/cifs/connect.c: rfc1002 length 0x27
/build/buildd/linux-2.6.32/fs/cifs/netmisc.c: Mapping smb error code 64 
to POSIX err -5
/build/buildd/linux-2.6.32/fs/cifs/cifssmb.c: Tree disconnect failed -5
/build/buildd/linux-2.6.32/fs/cifs/connect.c: CIFS VFS: in 
cifs_put_smb_ses as Xid: 3 with uid: 0
/build/buildd/linux-2.6.32/fs/cifs/cifssmb.c: In SMBLogoff for session 
disconnect
/build/buildd/linux-2.6.32/fs/cifs/transport.c: For smb_command 116
/build/buildd/linux-2.6.32/fs/cifs/transport.c: Sending smb:  total_len 43
/build/buildd/linux-2.6.32/fs/cifs/connect.c: rfc1002 length 0x2b
/build/buildd/linux-2.6.32/fs/cifs/connect.c: CIFS VFS: leaving 
cifs_mount (xid = 1) rc = -13
CIFS VFS: cifs_mount failed w/return code = -13

Can anyone help? I'm about to throw in the towel, and just give up on 
using Samba on the laptop, if I can't mount shares from both Windows and 
Samba servers. What is that "Guest login" and "UID=100"? I specified a 
valid domain user (in fact, a Domain Admin), in the mounting line. On 
workhorse, the share is actually owned by DACRIB+turgon. :-)

Dual-Booter can mount shares from an XP machine (altho oddly, I need to 
specify username as "turgon at DACRIB", instead of "DACRIB+turgon".

smb.conf:

[global]
	workgroup = DACRIB
	realm = DACRIB.LOCAL
	server string = %h server (Samba %v, Domain: %D, Server: %L - %R)
	security = ADS
	map to guest = Bad User

	client use spnego = true
	client ntlmv2 auth = yes
	auth methods = winbind
	restrict anonymous = 0
	server signing = auto

	eventlog list = Application System Security SyslogLinux

# PAM AUTH
	encrypt passwords = Yes
	obey pam restrictions = Yes
	pam password change = true
	password server = dim-win2300.DaCrib.local
	pam password change = Yes
	passwd program = /usr/bin/passwd %u
	passwd chat = *Enter\snew\s*\spassword:* %n\n 
*Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
	unix password sync = Yes

	log level = 3
	syslog = 0
	log file = /var/log/samba/log.%m
	max log size = 1000

	preferred master = No
	domain master = No
	local master  = No
	os level = 2

	dns proxy = No
	usershare allow guests = Yes
	panic action = /usr/share/samba/panic-action %d
	hide dot files = No

# WINBIND

	idmap config DACRIB:backend = ad
	idmap config DACRIB:range = 10000 - 20000
	idmap config DACRIB:schema_mode = sfu

         idmap uid = 10000-20000
         idmap gid = 10000-20000

	winbind enum users = Yes
	winbind enum groups = Yes
	winbind use default domain = No
    	winbind nested groups = Yes
	winbind refresh tickets = true
	winbind separator = +
	winbind nss info = sfu
	allow trusted domains = No

	template homedir = /home/%D/%u
	template shell = /bin/bash

	enable privileges = Yes
	wide links = No

On workkhorse only:

[OldHome]
	path = /OldHome
	read only = No

More information about the samba mailing list