[Samba] Pam_mount not working with "sec=krb5"

Ole Traupe ole.traupe at tu-berlin.de
Mon Nov 2 14:58:07 UTC 2015

Am 02.11.2015 um 15:10 schrieb buhorojo:
> On 02/11/15 14:42, Ole Traupe wrote:
>> Am 02.11.2015 um 13:12 schrieb buhorojo:
>>> On 02/11/15 12:54, Ole Traupe wrote:
>>> Why can't the user do it with his own key file?
> Only root can perform mounts and anyway, cifs upcall looks for a key, 
> not a cache.
>> Also, if the user is not mounting his home share, but somebody else, 
>> this _other_ user will be the owner of newly created files and 
>> folders, right
> No. With multiuser, acl and permissions are respected. If the user 
> would normally be the owner of newly created files, then he will be 
> also over cifs.
> One other thing, you need a recent version of cifs utils (we don't 
> think Centos has)
Can this be snatched from Fedora?

> and to make sure that you lose the -c at /etc/request-key.conf:
> create  cifs.spnego     *       * /usr/sbin/cifs.upcall -c %k
Ok, I don't have this line at all. Will copy&paste it (without -c).


More information about the samba mailing list