[Samba] mount share using kerberos ticket fails

L.P.H. van Belle belle at bazuin.nl
Tue Mar 10 10:51:29 UTC 2020


> That is what I did. But it fails even when mounting manually:
> 1. Connect on the desktop using domain user "yvan.masson" (either 
> graphically / TTY / SSH). Kerberos ticket is properly created.
> 2. Running "sudo mount -t cifs //ad.FOO.BAR.LOCAL/Echange /mnt -o 
> user=yvan.masson,cruid=yvan.masson,sec=krb5" fails with "Required key 
> not available".

Offcourse, the user is not allowed to mount it. user=yvan.masson <<  
You need to delegate the computer to do it for the user.


> 3. Running "sudo mount -t cifs //foo-ad.FOO.BAR.LOCAL/Echange /mnt -o 
> user=yvan.masson,cruid=yvan.masson,sec=krb5" works.

Offcourse, here root is allowed to mount it. 


You know what todo and how to fix it properly. 


Greetz, 

Louis




More information about the samba mailing list