[Samba] mount.cfs mount error(13): Permission denied

[L.P.H. van Belle]

Hai, 

> I am using the following command to mount the share.
> 
> # mount -t cifs  //xxxxxxxxxxxxxxxxxxxx/paulg /tmp/1 -o 
> user=paulg,uid=2381,gid=1000,sec=ntlmsspi
> Password for paulg@//xxxxx/paulg:  *********
> mount error(13): Permission denied
> Refer to the mount.cifs(8) manual page (e.g. man mount.cifs)
> 
> I tried the following security options.
> sec=ntlmsspi
> sec=ntlmssp
> sec=ntlmv2
> sec=ntlmv2i
> 
> With the same results. 
And in my opinion thats all correct. 

Of you gave to little info or you missed this part below. ;-) 


First, did you define the cifs SPN/UPN? 
Setup for a member : 
kinit Administrator
net ads keytab add cifs/srv-a1.your.dnsdomain.tld -k

( optional : net ads keytab add root/srv-a1.your.dnsdomain.tld -k ) 

And make sure the cifs/spn is also listed in the AD. 
I set this manualy through ADUC.

And i would try with just :
mount -t cifs  //xxxxxxxxxxxxxxxxxxxx/paulg /tmp/1  -o sec=ntlmsspi


Greetz, 

Louis



> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens Paul 
> Griffith via samba
> Verzonden: maandag 22 april 2019 20:01
> Aan: samba at lists.samba.org
> Onderwerp: Re: [Samba] mount.cfs mount error(13): Permission denied
> 
> On 4/22/19 10:18 AM, Rowland Penny via samba wrote:
> > On Mon, 22 Apr 2019 09:48:31 -0400
> > Paul Griffith via samba <samba at lists.samba.org> wrote:
> >
> >> Hi All,
> >>
> >>      I am running into an issue mounting a Samba share 
> from our Linux
> >> server. We are running Samba 4.8.8 on CentOS  7.6.1810. I 
> have done a
> >> some testing, and I can't get the root cause of the error.
> >>
> >> Testing:
> >>
> >> CentOS 7.6 client -> Samba server, mounting fails - mount.cfs mount
> >> error(13): Permission denied
> >> CentOS 7.6 client -> Win10 desktop share, mounting works
> >>
> >> Fedora 29 client  -> Samba  server, mounting fails - 
> mount.cfs mount
> >> error(13): Permission denied
> >> Fedora 29 client  -> Win10 desktop share, mounting works
> >>
> > Are you using sssd ?
> >
> > If so, then I suggest asking on the sssd-users mailing list, Samba
> > isn't doing the authentication.
> >
> > If you aren't using sssd, then the Unix domain members smb.conf is
> > missing all the 'idmap config' lines, see here:
> >
> > https://wiki.samba.org/index.php/Setting_up_Samba_as_a_Domain_Member
> >
> > Rowland
> >
> Thank you Rowland,
> 
> We are not using sssd, I was handed this Samba server. It  
> seems I some 
> home work to do to make it work
> 
> 
> Paul
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
> 
>