[Samba] mount.cifs STATUS_NO_LOGON_SERVERS

[Mark Amundsen]

Last email (on this topic (for now)) :)

After rising the log level in the DC I noticed that what appears to be the machine account for the fileserver failed to log in to the AD.

I simply re-joined the fileserver to the AD and then great success and a cigar!
 
Thanks a lot to all that spent time on this!



Happy Mark
 
 
 

> Sent: Thursday, August 12, 2021 at 10:54 AM
> From: "L.P.H. van Belle via samba" <samba at lists.samba.org>
> To: "samba at lists.samba.org" <samba at lists.samba.org>
> Subject: Re: [Samba] mount.cifs STATUS_NO_LOGON_SERVERS
> Hai,
> 
> Do all server the spn : cifs/hostname.fqdn.tld registered in the AD and in the local /etc/krb5.keytab ?
> Offcourse the stand alone does not have it, but can add it manualy in AD and keytab file on that server.
> Make sure all your server using CIFS have A and PTR records, (even your standalone).
> 
> Then thats done, make sure all formats are like this.
> Workgroup = ADDOM_IN_CAPS
> Realm = SOME.DOM.TLD_IN_CAPS
> Check smb.conf and krb5.conf
> As far i could tell this looked good.
> 
> When above is in place, and your leting the users automount these folder.
> Did you set : allow delegate for kerberous services for the servers that do automounting?
> 
> samba-tool user
> sensitive - Set/unset or show UF_NOT_DELEGATED for an account.
> 
> If not set it.
> 
> Last, the server with samba 4.9.5, upgrade it to at least samba 4.13/14
> 
> And now, if you sure all is using kerberos auth, it should work now.
> 
> Im using the same here, CIFS and NFS4 kerberized mounts and automounting.
> This is how i setup the automouting with systemd on my debian servers.
> 
> https://michlstechblog.info/blog/systemd-mount-examples-for-cifs-shares/
> 
> See how far you get, i'll keep an eye on the list today.
> 
> Greetz,
> 
> Louis
> 
> 
> > -----Oorspronkelijk bericht-----
> > Van: samba [mailto:samba-bounces at lists.samba.org] Namens Mark
> > Amundsen via samba
> > Verzonden: donderdag 12 augustus 2021 9:55
> > Aan: samba at lists.samba.org
> > Onderwerp: Re: [Samba] mount.cifs STATUS_NO_LOGON_SERVERS
> >
> > Thanks for your time
> >
> > > OK, the two machines running 4.14.6 use SMBv2 as a minimum, your
> > > standalone server uses SMBv1 as a minimum, so you may have to add
> > > 'vers=2' to your mount command.
> >
> > I've tried vers=2.0 3.0 and even 2.1 (simply vers=2 gives an
> > invalid argument error), same as before:
> > CIFS VFS: Send error in SessSetup = -5
> > CIFS VFS: cifs_mount failed w/return code = -5
> > Status code returned 0xc000005e STATUS_NO_LOGON_SERVERS
> >
> > If I try vers=1.0 it simply says:
> > CIFS VFS: cifs_mount failed w/return code = -95
> >
> >
> > (also: mount.cifs says: Default has changed to a more secure
> > dialect, SMB2.1 or later)
> >
> >
> >
> > I created a share on one of the domain-joined windows
> > machines and I can connect to that in the same manner as I
> > used to connect to the samba fileserver, which leads me to
> > belive that something has changed in the fileserver.
> >
> > Have I disabled the authentication method that mount.cifs is using?
> >
> >
> > Mark