[Samba] cifs-utils: regression in (mulituser?) mounting 'CIFS VFS: Send error in SessSetup = -126'

Chad William Seys cwseys at physics.wisc.edu
Thu Feb 9 20:45:44 UTC 2017

Hi Jeff,
Could you look at the following mailing list posting?


It looks like cifs.upcall has changed its behavior.  As described in 
that post, I can mount with root / kerberos, but then cannot access with 
another user who has credentials.

The logs indicate that cifs.upcall cannot find the kerberos ticket for 
the non-root user.

This problem does not exist in cifs-utils 6.5 and does exist in 6.6 .

My best guess ATM is that the below commit caused the problem.

Thanks for your time!

commit 9be6e885c3bd63aa6ae9e6351e1b33a4b15d9183
Author: Jeff Layton <jlayton at samba.org>
Date:   Sun Aug 21 09:42:59 2016 -0400

     cifs.upcall: use krb5 routines to get default ccname
     Currently we end up groveling around in /tmp, trying to guess what 
the credcache will be. Instead, just get the default ccname for the 
user, and then see if it has a valid tgt. If it doesn't then we try to 
use the keytab to init the credcache before proceeding.

More information about the samba mailing list