Re: [Samba] Trouble with mount.cifs while smbclient works (Ubuntu 12.04)
On 21 May 2012 17:44, Jeff Layton jlay...@samba.org wrote: On Mon, 21 May 2012 09:59:44 -0500 scott_purc...@dell.com wrote: Early responses are not encouraging. It sounds like this was not an accidently happening, but they *intend* to obscure the root level of the share. Might it work to try to downgrade my Samba installation to a version prior to the introduction of this bug? If so, do you know which version would be the latest to still work? No, it was not intentional, just not simple to fix. I think you misinterpreted Scott's message :) I read it to mean that the people who set up his NAS intended for the root of the share to be obscured. Not that the cifsfs developers intended to break things. -- Michael Wood esiot...@gmail.com -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Trouble with mount.cifs while smbclient works (Ubuntu 12.04)
On Tue, 22 May 2012 15:24:56 +0200 Michael Wood esiot...@gmail.com wrote: On 21 May 2012 17:44, Jeff Layton jlay...@samba.org wrote: On Mon, 21 May 2012 09:59:44 -0500 scott_purc...@dell.com wrote: Early responses are not encouraging. It sounds like this was not an accidently happening, but they *intend* to obscure the root level of the share. Might it work to try to downgrade my Samba installation to a version prior to the introduction of this bug? If so, do you know which version would be the latest to still work? No, it was not intentional, just not simple to fix. I think you misinterpreted Scott's message :) I read it to mean that the people who set up his NAS intended for the root of the share to be obscured. Not that the cifsfs developers intended to break things. Yes, he mailed that to me privately later. He also asked whether downgrading the client's kernel might help here. It might, but you'll need to go pretty far back -- pre-3.0 or so... -- Jeff Layton jlay...@samba.org -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Trouble with mount.cifs while smbclient works (Ubuntu 12.04)
Early responses are not encouraging. It sounds like this was not an accidently happening, but they *intend* to obscure the root level of the share. Might it work to try to downgrade my Samba installation to a version prior to the introduction of this bug? If so, do you know which version would be the latest to still work? -Original Message- From: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] On Behalf Of Purcell, Scott Sent: Saturday, May 19, 2012 6:21 PM To: smfre...@gmail.com Cc: samba@lists.samba.org; linux-c...@vger.kernel.org Subject: Re: [Samba] Trouble with mount.cifs while smbclient works (Ubuntu 12.04) I'll inquire. But we're a very windows-centric shop -- I may be given the old Working as designed... if it won't work on Linux you'll have to use Windows routine... Scott Purcell Content Development: Linux, Virtualization, and Cloud Solutions Dell | GSD Learning Development From: Steve French [smfre...@gmail.com] Sent: Saturday, May 19, 2012 10:25 AM To: Purcell, Scott Cc: jlay...@samba.org; li...@kukkukk.com; samba@lists.samba.org; linux-c...@vger.kernel.org Subject: Re: [Samba] Trouble with mount.cifs while smbclient works (Ubuntu 12.04) On Sat, May 19, 2012 at 9:52 AM, scott_purc...@dell.com wrote: Is there any workaround? Fixing the permissions on the parent directory so it can be traversed is not possible? From: Jeff Layton [jlay...@poochiereds.net] On Behalf Of Jeff Layton [jlay...@samba.org] Sent: Saturday, May 19, 2012 7:37 AM To: Purcell, Scott Cc: li...@kukkukk.com; samba@lists.samba.org; linux-c...@vger.kernel.org Subject: Re: [Samba] Trouble with mount.cifs while smbclient works (Ubuntu 12.04) On Fri, 18 May 2012 16:32:29 -0500 scott_purc...@dell.com wrote: Yes, I think that has been the normal behavior since our data was moved to this device. I assumed it was due to filesystem permissions -- that I don't have read access to the root level of the share, but do have r/w access to the /training/ directory below it. Using smbclient, get NT_STATUS_ACCESS_DENIED when I try: ls ls training ls /training ls /training/ but if I cd to training, I can list its contents. BTW, I've tried appending the path in my mount command as well and mount.cifs still doesn't handle it: Known problem since the superblock sharing patches went in. cifs.ko needs to establish a dentry and inode for the root of the share and then walks down to the prefixpath for the mount. Unfortunately if you don't have access to any point along that path, the mount will fail. There have been a couple of proposals to fix it, but they've had their own problems. What probably needs to happen is to do something like what NFS does in its superblock sharing model. Allow several trees of dentries within a superblock and only connect them later if we happen to stumble across the right entry. See commit 54ceac45159 for an explanation of the model NFS uses for this. -- Jeff Layton jlay...@samba.org -- To unsubscribe from this list: send the line unsubscribe linux-cifs in the body of a message to majord...@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html -- Thanks, Steve -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Trouble with mount.cifs while smbclient works (Ubuntu 12.04)
Submitted as bug 8950. -Original Message- From: Steve French [mailto:smfre...@gmail.com] Sent: Saturday, May 19, 2012 6:47 PM To: Purcell, Scott Cc: jlay...@samba.org; li...@kukkukk.com; samba@lists.samba.org; linux-c...@vger.kernel.org Subject: Re: [Samba] Trouble with mount.cifs while smbclient works (Ubuntu 12.04) Don't want to forget is to open a bug report (at bugzilla.samba.org) if you haven't already created one - even if tricky to fix safely, I don't want to lose track of this issue if we can find a way to safely handle this case. There is a lot going on in development of cifs.ko with smb2 enablement and the introduction of SMB 3 (and also some dramatic performance improvements that went in over the last four releases). On Sat, May 19, 2012 at 6:20 PM, scott_purc...@dell.com wrote: I'll inquire. But we're a very windows-centric shop -- I may be given the old Working as designed... if it won't work on Linux you'll have to use Windows routine... Scott Purcell Content Development: Linux, Virtualization, and Cloud Solutions Dell | GSD Learning Development From: Steve French [smfre...@gmail.com] Sent: Saturday, May 19, 2012 10:25 AM To: Purcell, Scott Cc: jlay...@samba.org; li...@kukkukk.com; samba@lists.samba.org; linux-c...@vger.kernel.org Subject: Re: [Samba] Trouble with mount.cifs while smbclient works (Ubuntu 12.04) On Sat, May 19, 2012 at 9:52 AM, scott_purc...@dell.com wrote: Is there any workaround? Fixing the permissions on the parent directory so it can be traversed is not possible? From: Jeff Layton [jlay...@poochiereds.net] On Behalf Of Jeff Layton [jlay...@samba.org] Sent: Saturday, May 19, 2012 7:37 AM To: Purcell, Scott Cc: li...@kukkukk.com; samba@lists.samba.org; linux-c...@vger.kernel.org Subject: Re: [Samba] Trouble with mount.cifs while smbclient works (Ubuntu 12.04) On Fri, 18 May 2012 16:32:29 -0500 scott_purc...@dell.com wrote: Yes, I think that has been the normal behavior since our data was moved to this device. I assumed it was due to filesystem permissions -- that I don't have read access to the root level of the share, but do have r/w access to the /training/ directory below it. Using smbclient, get NT_STATUS_ACCESS_DENIED when I try: ls ls training ls /training ls /training/ but if I cd to training, I can list its contents. BTW, I've tried appending the path in my mount command as well and mount.cifs still doesn't handle it: Known problem since the superblock sharing patches went in. cifs.ko needs to establish a dentry and inode for the root of the share and then walks down to the prefixpath for the mount. Unfortunately if you don't have access to any point along that path, the mount will fail. There have been a couple of proposals to fix it, but they've had their own problems. What probably needs to happen is to do something like what NFS does in its superblock sharing model. Allow several trees of dentries within a superblock and only connect them later if we happen to stumble across the right entry. See commit 54ceac45159 for an explanation of the model NFS uses for this. -- Jeff Layton jlay...@samba.org -- To unsubscribe from this list: send the line unsubscribe linux-cifs in the body of a message to majord...@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html -- Thanks, Steve -- Thanks, Steve -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Trouble with mount.cifs while smbclient works (Ubuntu 12.04)
On Mon, 21 May 2012 09:59:44 -0500 scott_purc...@dell.com wrote: Early responses are not encouraging. It sounds like this was not an accidently happening, but they *intend* to obscure the root level of the share. Might it work to try to downgrade my Samba installation to a version prior to the introduction of this bug? If so, do you know which version would be the latest to still work? No, it was not intentional, just not simple to fix. -- Jeff Layton jlay...@samba.org -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Trouble with mount.cifs while smbclient works (Ubuntu 12.04)
On Fri, 18 May 2012 16:32:29 -0500 scott_purc...@dell.com wrote: Yes, I think that has been the normal behavior since our data was moved to this device. I assumed it was due to filesystem permissions -- that I don't have read access to the root level of the share, but do have r/w access to the /training/ directory below it. Using smbclient, get NT_STATUS_ACCESS_DENIED when I try: ls ls training ls /training ls /training/ but if I cd to training, I can list its contents. BTW, I've tried appending the path in my mount command as well and mount.cifs still doesn't handle it: Known problem since the superblock sharing patches went in. cifs.ko needs to establish a dentry and inode for the root of the share and then walks down to the prefixpath for the mount. Unfortunately if you don't have access to any point along that path, the mount will fail. There have been a couple of proposals to fix it, but they've had their own problems. What probably needs to happen is to do something like what NFS does in its superblock sharing model. Allow several trees of dentries within a superblock and only connect them later if we happen to stumble across the right entry. See commit 54ceac45159 for an explanation of the model NFS uses for this. -- Jeff Layton jlay...@samba.org -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Trouble with mount.cifs while smbclient works (Ubuntu 12.04)
Is there any workaround? Scott Purcell Content Development: Linux, Virtualization, and Cloud Solutions Dell | GSD Learning Development From: Jeff Layton [jlay...@poochiereds.net] On Behalf Of Jeff Layton [jlay...@samba.org] Sent: Saturday, May 19, 2012 7:37 AM To: Purcell, Scott Cc: li...@kukkukk.com; samba@lists.samba.org; linux-c...@vger.kernel.org Subject: Re: [Samba] Trouble with mount.cifs while smbclient works (Ubuntu 12.04) On Fri, 18 May 2012 16:32:29 -0500 scott_purc...@dell.com wrote: Yes, I think that has been the normal behavior since our data was moved to this device. I assumed it was due to filesystem permissions -- that I don't have read access to the root level of the share, but do have r/w access to the /training/ directory below it. Using smbclient, get NT_STATUS_ACCESS_DENIED when I try: ls ls training ls /training ls /training/ but if I cd to training, I can list its contents. BTW, I've tried appending the path in my mount command as well and mount.cifs still doesn't handle it: Known problem since the superblock sharing patches went in. cifs.ko needs to establish a dentry and inode for the root of the share and then walks down to the prefixpath for the mount. Unfortunately if you don't have access to any point along that path, the mount will fail. There have been a couple of proposals to fix it, but they've had their own problems. What probably needs to happen is to do something like what NFS does in its superblock sharing model. Allow several trees of dentries within a superblock and only connect them later if we happen to stumble across the right entry. See commit 54ceac45159 for an explanation of the model NFS uses for this. -- Jeff Layton jlay...@samba.org -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Trouble with mount.cifs while smbclient works (Ubuntu 12.04)
On Sat, May 19, 2012 at 9:52 AM, scott_purc...@dell.com wrote: Is there any workaround? Fixing the permissions on the parent directory so it can be traversed is not possible? From: Jeff Layton [jlay...@poochiereds.net] On Behalf Of Jeff Layton [jlay...@samba.org] Sent: Saturday, May 19, 2012 7:37 AM To: Purcell, Scott Cc: li...@kukkukk.com; samba@lists.samba.org; linux-c...@vger.kernel.org Subject: Re: [Samba] Trouble with mount.cifs while smbclient works (Ubuntu 12.04) On Fri, 18 May 2012 16:32:29 -0500 scott_purc...@dell.com wrote: Yes, I think that has been the normal behavior since our data was moved to this device. I assumed it was due to filesystem permissions -- that I don't have read access to the root level of the share, but do have r/w access to the /training/ directory below it. Using smbclient, get NT_STATUS_ACCESS_DENIED when I try: ls ls training ls /training ls /training/ but if I cd to training, I can list its contents. BTW, I've tried appending the path in my mount command as well and mount.cifs still doesn't handle it: Known problem since the superblock sharing patches went in. cifs.ko needs to establish a dentry and inode for the root of the share and then walks down to the prefixpath for the mount. Unfortunately if you don't have access to any point along that path, the mount will fail. There have been a couple of proposals to fix it, but they've had their own problems. What probably needs to happen is to do something like what NFS does in its superblock sharing model. Allow several trees of dentries within a superblock and only connect them later if we happen to stumble across the right entry. See commit 54ceac45159 for an explanation of the model NFS uses for this. -- Jeff Layton jlay...@samba.org -- To unsubscribe from this list: send the line unsubscribe linux-cifs in the body of a message to majord...@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html -- Thanks, Steve -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Trouble with mount.cifs while smbclient works (Ubuntu 12.04)
I'll inquire. But we're a very windows-centric shop -- I may be given the old Working as designed... if it won't work on Linux you'll have to use Windows routine... Scott Purcell Content Development: Linux, Virtualization, and Cloud Solutions Dell | GSD Learning Development From: Steve French [smfre...@gmail.com] Sent: Saturday, May 19, 2012 10:25 AM To: Purcell, Scott Cc: jlay...@samba.org; li...@kukkukk.com; samba@lists.samba.org; linux-c...@vger.kernel.org Subject: Re: [Samba] Trouble with mount.cifs while smbclient works (Ubuntu 12.04) On Sat, May 19, 2012 at 9:52 AM, scott_purc...@dell.com wrote: Is there any workaround? Fixing the permissions on the parent directory so it can be traversed is not possible? From: Jeff Layton [jlay...@poochiereds.net] On Behalf Of Jeff Layton [jlay...@samba.org] Sent: Saturday, May 19, 2012 7:37 AM To: Purcell, Scott Cc: li...@kukkukk.com; samba@lists.samba.org; linux-c...@vger.kernel.org Subject: Re: [Samba] Trouble with mount.cifs while smbclient works (Ubuntu 12.04) On Fri, 18 May 2012 16:32:29 -0500 scott_purc...@dell.com wrote: Yes, I think that has been the normal behavior since our data was moved to this device. I assumed it was due to filesystem permissions -- that I don't have read access to the root level of the share, but do have r/w access to the /training/ directory below it. Using smbclient, get NT_STATUS_ACCESS_DENIED when I try: ls ls training ls /training ls /training/ but if I cd to training, I can list its contents. BTW, I've tried appending the path in my mount command as well and mount.cifs still doesn't handle it: Known problem since the superblock sharing patches went in. cifs.ko needs to establish a dentry and inode for the root of the share and then walks down to the prefixpath for the mount. Unfortunately if you don't have access to any point along that path, the mount will fail. There have been a couple of proposals to fix it, but they've had their own problems. What probably needs to happen is to do something like what NFS does in its superblock sharing model. Allow several trees of dentries within a superblock and only connect them later if we happen to stumble across the right entry. See commit 54ceac45159 for an explanation of the model NFS uses for this. -- Jeff Layton jlay...@samba.org -- To unsubscribe from this list: send the line unsubscribe linux-cifs in the body of a message to majord...@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html -- Thanks, Steve -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Trouble with mount.cifs while smbclient works (Ubuntu 12.04)
Don't want to forget is to open a bug report (at bugzilla.samba.org) if you haven't already created one - even if tricky to fix safely, I don't want to lose track of this issue if we can find a way to safely handle this case. There is a lot going on in development of cifs.ko with smb2 enablement and the introduction of SMB 3 (and also some dramatic performance improvements that went in over the last four releases). On Sat, May 19, 2012 at 6:20 PM, scott_purc...@dell.com wrote: I'll inquire. But we're a very windows-centric shop -- I may be given the old Working as designed... if it won't work on Linux you'll have to use Windows routine... Scott Purcell Content Development: Linux, Virtualization, and Cloud Solutions Dell | GSD Learning Development From: Steve French [smfre...@gmail.com] Sent: Saturday, May 19, 2012 10:25 AM To: Purcell, Scott Cc: jlay...@samba.org; li...@kukkukk.com; samba@lists.samba.org; linux-c...@vger.kernel.org Subject: Re: [Samba] Trouble with mount.cifs while smbclient works (Ubuntu 12.04) On Sat, May 19, 2012 at 9:52 AM, scott_purc...@dell.com wrote: Is there any workaround? Fixing the permissions on the parent directory so it can be traversed is not possible? From: Jeff Layton [jlay...@poochiereds.net] On Behalf Of Jeff Layton [jlay...@samba.org] Sent: Saturday, May 19, 2012 7:37 AM To: Purcell, Scott Cc: li...@kukkukk.com; samba@lists.samba.org; linux-c...@vger.kernel.org Subject: Re: [Samba] Trouble with mount.cifs while smbclient works (Ubuntu 12.04) On Fri, 18 May 2012 16:32:29 -0500 scott_purc...@dell.com wrote: Yes, I think that has been the normal behavior since our data was moved to this device. I assumed it was due to filesystem permissions -- that I don't have read access to the root level of the share, but do have r/w access to the /training/ directory below it. Using smbclient, get NT_STATUS_ACCESS_DENIED when I try: ls ls training ls /training ls /training/ but if I cd to training, I can list its contents. BTW, I've tried appending the path in my mount command as well and mount.cifs still doesn't handle it: Known problem since the superblock sharing patches went in. cifs.ko needs to establish a dentry and inode for the root of the share and then walks down to the prefixpath for the mount. Unfortunately if you don't have access to any point along that path, the mount will fail. There have been a couple of proposals to fix it, but they've had their own problems. What probably needs to happen is to do something like what NFS does in its superblock sharing model. Allow several trees of dentries within a superblock and only connect them later if we happen to stumble across the right entry. See commit 54ceac45159 for an explanation of the model NFS uses for this. -- Jeff Layton jlay...@samba.org -- To unsubscribe from this list: send the line unsubscribe linux-cifs in the body of a message to majord...@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html -- Thanks, Steve -- Thanks, Steve -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Trouble with mount.cifs while smbclient works (Ubuntu 12.04)
Yes, I think that has been the normal behavior since our data was moved to this device. I assumed it was due to filesystem permissions -- that I don't have read access to the root level of the share, but do have r/w access to the /training/ directory below it. Using smbclient, get NT_STATUS_ACCESS_DENIED when I try: ls ls training ls /training ls /training/ but if I cd to training, I can list its contents. BTW, I've tried appending the path in my mount command as well and mount.cifs still doesn't handle it: -Original Message- From: Günter Kukkukk [mailto:li...@kukkukk.com] Sent: Thursday, May 17, 2012 8:03 PM To: Purcell, Scott After connect you do a ls training/ and get access denied, but then you cd into that subdir and ls is working. Do you _always_ see this behavior? When you use ls directly after connect, do you get some error? Cheers, Günter -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Trouble with mount.cifs while smbclient works (Ubuntu 12.04)
That line does exist in the specified file. -Original Message- From: Shirish Pargaonkar [mailto:shirishpargaon...@gmail.com] Sent: Thursday, May 17, 2012 11:09 PM To: Purcell, Scott Perhaps you need an entry like this create dns_resolver* * /usr/sbin/cifs.upcall %k in file /etc/request-key.conf -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Trouble with mount.cifs while smbclient works (Ubuntu 12.04)
Hi Helmut
On 17 May 2012 06:16, Helmut Hullen hul...@t-online.de wrote:
Hallo, Scott_Purcell,
Du meintest am 16.05.12:
mount.cifs fails (with mount error(13): Permission denied):
sudo mount.cifs //server/share /mnt/ -o
credentials=/etc/.smb_creds.txt
Just try
sudo mount.cifs -o ... //server/share ...
mount.cifs needs the options early.
I'm not sure that's true. The manpage says this:
SYNOPSIS
mount.cifs {service} {mount-point} [-o options]
--
Michael Wood esiot...@gmail.com
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Trouble with mount.cifs while smbclient works (Ubuntu 12.04)
Passing sec=ntlmssp did not help. Nor did moving the options prior to the device and mount-point specifications. I'm not comfortable sending a full tcpdump to the list whose membership I do not know (but I can send it directly to formal members of the Samba team -- I see Gunter's name on the website. Shirish, are you on the team as well?) since it would reveal things about my network environment that our data security folks would not want revealed. But I have performed such a capture -- are there specific things I should be looking for? -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Trouble with mount.cifs while smbclient works (Ubuntu 12.04)
On Thu, May 17, 2012 at 11:38 AM, scott_purc...@dell.com wrote: Passing sec=ntlmssp did not help. Nor did moving the options prior to the device and mount-point specifications. I'm not comfortable sending a full tcpdump to the list whose membership I do not know (but I can send it directly to formal members of the Samba team -- I see Gunter's name on the website. Shirish, are you on the team as well?) since it would reveal things about my network environment that our data security folks would not want revealed. But I have performed such a capture -- are there specific things I should be looking for? I think your session setup is failing. Basically what does negotiate protocol response returns (capabilities etc.). Also, what is the version of cifs module? (modinfo cifs command would tell that) -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Trouble with mount.cifs while smbclient works (Ubuntu 12.04)
Modinfo reports: $ modinfo cifs filename: /lib/modules/3.2.0-24-generic/kernel/fs/cifs/cifs.ko version:1.76 description:VFS to access servers complying with the SNIA CIFS Specification e.g. Samba and Windows license:GPL author: Steve French sfre...@us.ibm.com srcversion: B869252FD0961045466332F depends: intree: Y vermagic: 3.2.0-24-generic SMP mod_unload modversions parm: CIFSMaxBufSize:Network buffer size (not including header). Default: 16384 Range: 8192 to 130048 (int) parm: cifs_min_rcv:Network buffers in pool. Default: 4 Range: 1 to 64 (int) parm: cifs_min_small:Small network buffers in pool. Default: 30 Range: 2 to 256 (int) parm: cifs_max_pending:Simultaneous requests to server. Default: 32767 Range: 2 to 32767. (int) parm: echo_retries:Number of echo attempts before giving up and reconnecting server. Default: 5. 0 means never reconnect. (ushort) parm: enable_oplocks:Enable or disable oplocks (bool). Default:y/Y/1 (bool) Scott Purcell Content Development: Linux, Virtualization, and Cloud Solutions Dell | GSD Learning Development From: Shirish Pargaonkar [shirishpargaon...@gmail.com] Sent: Thursday, May 17, 2012 12:15 PM To: Purcell, Scott Cc: samba@lists.samba.org Subject: Re: [Samba] Trouble with mount.cifs while smbclient works (Ubuntu 12.04) On Thu, May 17, 2012 at 11:38 AM, scott_purc...@dell.com wrote: Passing sec=ntlmssp did not help. Nor did moving the options prior to the device and mount-point specifications. I'm not comfortable sending a full tcpdump to the list whose membership I do not know (but I can send it directly to formal members of the Samba team -- I see Gunter's name on the website. Shirish, are you on the team as well?) since it would reveal things about my network environment that our data security folks would not want revealed. But I have performed such a capture -- are there specific things I should be looking for? I think your session setup is failing. Basically what does negotiate protocol response returns (capabilities etc.). Also, what is the version of cifs module? (modinfo cifs command would tell that) -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Trouble with mount.cifs while smbclient works (Ubuntu 12.04)
Am Donnerstag, 17. Mai 2012, 20:29:25 schrieb scott_purc...@dell.com: Modinfo reports: $ modinfo cifs filename: /lib/modules/3.2.0-24-generic/kernel/fs/cifs/cifs.ko version:1.76 description:VFS to access servers complying with the SNIA CIFS Specification e.g. Samba and Windows license:GPL author: Steve French sfre...@us.ibm.com srcversion: B869252FD0961045466332F depends: intree: Y vermagic: 3.2.0-24-generic SMP mod_unload modversions parm: CIFSMaxBufSize:Network buffer size (not including header). Default: 16384 Range: 8192 to 130048 (int) parm: cifs_min_rcv:Network buffers in pool. Default: 4 Range: 1 to 64 (int) parm: cifs_min_small:Small network buffers in pool. Default: 30 Range: 2 to 256 (int) parm: cifs_max_pending:Simultaneous requests to server. Default: 32767 Range: 2 to 32767. (int) parm: echo_retries:Number of echo attempts before giving up and reconnecting server. Default: 5. 0 means never reconnect. (ushort) parm: enable_oplocks:Enable or disable oplocks (bool). Default:y/Y/1 (bool) Scott Purcell Content Development: Linux, Virtualization, and Cloud Solutions Dell | GSD Learning Development From: Shirish Pargaonkar [shirishpargaon...@gmail.com] Sent: Thursday, May 17, 2012 12:15 PM To: Purcell, Scott Cc: samba@lists.samba.org Subject: Re: [Samba] Trouble with mount.cifs while smbclient works (Ubuntu 12.04) On Thu, May 17, 2012 at 11:38 AM, scott_purc...@dell.com wrote: Passing sec=ntlmssp did not help. Nor did moving the options prior to the device and mount-point specifications. I'm not comfortable sending a full tcpdump to the list whose membership I do not know (but I can send it directly to formal members of the Samba team -- I see Gunter's name on the website. Shirish, are you on the team as well?) since it would reveal things about my network environment that our data security folks would not want revealed. But I have performed such a capture -- are there specific things I should be looking for? I think your session setup is failing. Basically what does negotiate protocol response returns (capabilities etc.). Also, what is the version of cifs module? (modinfo cifs command would tell that) -- Hi Scott, just had a first look at your network trace: - negprot ok - sess_setup ok - treeconnect ok (for shared tree and IPC$) Then cifs is doing a QUERY_PATH_INFO (query file all info (263)) request on the shared tree (path = ), which is failing with STATUS_ACCESS_DENIED. In a former post you used: $ sudo smbclient //pc.com/D**NAS2 -A /etc/.smb_creds.txt Domain=[A*S] OS=[EMC-SNAS:T5.6.50.205] Server=[NT1] smb: \ ls training/ NT_STATUS_ACCESS_DENIED listing \training\ smb: \ cd training smb: \training\ ls . DA0 Tue Jan 10 13:17:11 2012 .. DA0 Thu Sep 1 11:54:48 2011 Enterprise DA0 Fri Oct 21 07:03:08 2011 enterprise_services_offering DA0 Mon Jun 13 16:31:21 2011 Flash_Beta DA0 Wed Apr 14 13:46:40 2010 Functions DA0 Sat Feb 27 09:47:17 2010 GCSS DA0 Wed Apr 14 13:46:49 2010 After connect you do a ls training/ and get access denied, but then you cd into that subdir and ls is working. Do you _always_ see this behavior? When you use ls directly after connect, do you get some error? Cheers, Günter -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Trouble with mount.cifs while smbclient works (Ubuntu 12.04)
On Thu, May 17, 2012 at 8:02 PM, Günter Kukkukk li...@kukkukk.com wrote: Am Donnerstag, 17. Mai 2012, 20:29:25 schrieb scott_purc...@dell.com: Modinfo reports: $ modinfo cifs filename: /lib/modules/3.2.0-24-generic/kernel/fs/cifs/cifs.ko version: 1.76 description: VFS to access servers complying with the SNIA CIFS Specification e.g. Samba and Windows license: GPL author: Steve French sfre...@us.ibm.com srcversion: B869252FD0961045466332F depends: intree: Y vermagic: 3.2.0-24-generic SMP mod_unload modversions parm: CIFSMaxBufSize:Network buffer size (not including header). Default: 16384 Range: 8192 to 130048 (int) parm: cifs_min_rcv:Network buffers in pool. Default: 4 Range: 1 to 64 (int) parm: cifs_min_small:Small network buffers in pool. Default: 30 Range: 2 to 256 (int) parm: cifs_max_pending:Simultaneous requests to server. Default: 32767 Range: 2 to 32767. (int) parm: echo_retries:Number of echo attempts before giving up and reconnecting server. Default: 5. 0 means never reconnect. (ushort) parm: enable_oplocks:Enable or disable oplocks (bool). Default:y/Y/1 (bool) Scott Purcell Content Development: Linux, Virtualization, and Cloud Solutions Dell | GSD Learning Development From: Shirish Pargaonkar [shirishpargaon...@gmail.com] Sent: Thursday, May 17, 2012 12:15 PM To: Purcell, Scott Cc: samba@lists.samba.org Subject: Re: [Samba] Trouble with mount.cifs while smbclient works (Ubuntu 12.04) On Thu, May 17, 2012 at 11:38 AM, scott_purc...@dell.com wrote: Passing sec=ntlmssp did not help. Nor did moving the options prior to the device and mount-point specifications. I'm not comfortable sending a full tcpdump to the list whose membership I do not know (but I can send it directly to formal members of the Samba team -- I see Gunter's name on the website. Shirish, are you on the team as well?) since it would reveal things about my network environment that our data security folks would not want revealed. But I have performed such a capture -- are there specific things I should be looking for? I think your session setup is failing. Basically what does negotiate protocol response returns (capabilities etc.). Also, what is the version of cifs module? (modinfo cifs command would tell that) -- Hi Scott, just had a first look at your network trace: - negprot ok - sess_setup ok - treeconnect ok (for shared tree and IPC$) Then cifs is doing a QUERY_PATH_INFO (query file all info (263)) request on the shared tree (path = ), which is failing with STATUS_ACCESS_DENIED. In a former post you used: $ sudo smbclient //pc.com/D**NAS2 -A /etc/.smb_creds.txt Domain=[A*S] OS=[EMC-SNAS:T5.6.50.205] Server=[NT1] smb: \ ls training/ NT_STATUS_ACCESS_DENIED listing \training\ smb: \ cd training smb: \training\ ls . DA 0 Tue Jan 10 13:17:11 2012 .. DA 0 Thu Sep 1 11:54:48 2011 Enterprise DA 0 Fri Oct 21 07:03:08 2011 enterprise_services_offering DA 0 Mon Jun 13 16:31:21 2011 Flash_Beta DA 0 Wed Apr 14 13:46:40 2010 Functions DA 0 Sat Feb 27 09:47:17 2010 GCSS DA 0 Wed Apr 14 13:46:49 2010 After connect you do a ls training/ and get access denied, but then you cd into that subdir and ls is working. Do you _always_ see this behavior? When you use ls directly after connect, do you get some error? Cheers, Günter -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba yes, I do not understand tree connect succeeding but query path info failing on the very same share path. The version of cifs module is 1.76 which is fairly recent. Regards, Shirish -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Trouble with mount.cifs while smbclient works (Ubuntu 12.04)
Hi all, I want to thank you for your help. I will be in class tomorrow and likely unable to test much, if at all. I'll be able to re-engage with this problem on Monday. My apologies for getting you all focused on my problem just when I have to step away from it for a bit. Scott Purcell Content Development: Linux, Virtualization, and Cloud Solutions Dell | GSD Learning Development From: Shirish Pargaonkar [shirishpargaon...@gmail.com] Sent: Thursday, May 17, 2012 8:08 PM To: Günter Kukkukk Cc: Purcell, Scott; samba@lists.samba.org Subject: Re: [Samba] Trouble with mount.cifs while smbclient works (Ubuntu 12.04) On Thu, May 17, 2012 at 8:02 PM, Günter Kukkukk li...@kukkukk.com wrote: Am Donnerstag, 17. Mai 2012, 20:29:25 schrieb scott_purc...@dell.com: Modinfo reports: $ modinfo cifs filename: /lib/modules/3.2.0-24-generic/kernel/fs/cifs/cifs.ko version:1.76 description:VFS to access servers complying with the SNIA CIFS Specification e.g. Samba and Windows license:GPL author: Steve French sfre...@us.ibm.com srcversion: B869252FD0961045466332F depends: intree: Y vermagic: 3.2.0-24-generic SMP mod_unload modversions parm: CIFSMaxBufSize:Network buffer size (not including header). Default: 16384 Range: 8192 to 130048 (int) parm: cifs_min_rcv:Network buffers in pool. Default: 4 Range: 1 to 64 (int) parm: cifs_min_small:Small network buffers in pool. Default: 30 Range: 2 to 256 (int) parm: cifs_max_pending:Simultaneous requests to server. Default: 32767 Range: 2 to 32767. (int) parm: echo_retries:Number of echo attempts before giving up and reconnecting server. Default: 5. 0 means never reconnect. (ushort) parm: enable_oplocks:Enable or disable oplocks (bool). Default:y/Y/1 (bool) Scott Purcell Content Development: Linux, Virtualization, and Cloud Solutions Dell | GSD Learning Development From: Shirish Pargaonkar [shirishpargaon...@gmail.com] Sent: Thursday, May 17, 2012 12:15 PM To: Purcell, Scott Cc: samba@lists.samba.org Subject: Re: [Samba] Trouble with mount.cifs while smbclient works (Ubuntu 12.04) On Thu, May 17, 2012 at 11:38 AM, scott_purc...@dell.com wrote: Passing sec=ntlmssp did not help. Nor did moving the options prior to the device and mount-point specifications. I'm not comfortable sending a full tcpdump to the list whose membership I do not know (but I can send it directly to formal members of the Samba team -- I see Gunter's name on the website. Shirish, are you on the team as well?) since it would reveal things about my network environment that our data security folks would not want revealed. But I have performed such a capture -- are there specific things I should be looking for? I think your session setup is failing. Basically what does negotiate protocol response returns (capabilities etc.). Also, what is the version of cifs module? (modinfo cifs command would tell that) -- Hi Scott, just had a first look at your network trace: - negprot ok - sess_setup ok - treeconnect ok (for shared tree and IPC$) Then cifs is doing a QUERY_PATH_INFO (query file all info (263)) request on the shared tree (path = ), which is failing with STATUS_ACCESS_DENIED. In a former post you used: $ sudo smbclient //pc.com/D**NAS2 -A /etc/.smb_creds.txt Domain=[A*S] OS=[EMC-SNAS:T5.6.50.205] Server=[NT1] smb: \ ls training/ NT_STATUS_ACCESS_DENIED listing \training\ smb: \ cd training smb: \training\ ls . DA0 Tue Jan 10 13:17:11 2012 .. DA0 Thu Sep 1 11:54:48 2011 Enterprise DA0 Fri Oct 21 07:03:08 2011 enterprise_services_offering DA0 Mon Jun 13 16:31:21 2011 Flash_Beta DA0 Wed Apr 14 13:46:40 2010 Functions DA0 Sat Feb 27 09:47:17 2010 GCSS DA0 Wed Apr 14 13:46:49 2010 After connect you do a ls training/ and get access denied, but then you cd into that subdir and ls is working. Do you _always_ see this behavior? When you use ls directly after connect, do you get some error? Cheers, Günter -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba yes, I do not understand tree connect succeeding but query path info failing on the very same share path. The version of cifs module is 1.76 which is fairly recent. Regards, Shirish -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Trouble with mount.cifs while smbclient works (Ubuntu 12.04)
On Thu, May 17, 2012 at 11:07 PM, scott_purc...@dell.com wrote: Hi all, I want to thank you for your help. I will be in class tomorrow and likely unable to test much, if at all. I'll be able to re-engage with this problem on Monday. My apologies for getting you all focused on my problem just when I have to step away from it for a bit. Scott Purcell Content Development: Linux, Virtualization, and Cloud Solutions Dell | GSD Learning Development From: Shirish Pargaonkar [shirishpargaon...@gmail.com] Sent: Thursday, May 17, 2012 8:08 PM To: Günter Kukkukk Cc: Purcell, Scott; samba@lists.samba.org Subject: Re: [Samba] Trouble with mount.cifs while smbclient works (Ubuntu 12.04) On Thu, May 17, 2012 at 8:02 PM, Günter Kukkukk li...@kukkukk.com wrote: Am Donnerstag, 17. Mai 2012, 20:29:25 schrieb scott_purc...@dell.com: Modinfo reports: $ modinfo cifs filename: /lib/modules/3.2.0-24-generic/kernel/fs/cifs/cifs.ko version: 1.76 description: VFS to access servers complying with the SNIA CIFS Specification e.g. Samba and Windows license: GPL author: Steve French sfre...@us.ibm.com srcversion: B869252FD0961045466332F depends: intree: Y vermagic: 3.2.0-24-generic SMP mod_unload modversions parm: CIFSMaxBufSize:Network buffer size (not including header). Default: 16384 Range: 8192 to 130048 (int) parm: cifs_min_rcv:Network buffers in pool. Default: 4 Range: 1 to 64 (int) parm: cifs_min_small:Small network buffers in pool. Default: 30 Range: 2 to 256 (int) parm: cifs_max_pending:Simultaneous requests to server. Default: 32767 Range: 2 to 32767. (int) parm: echo_retries:Number of echo attempts before giving up and reconnecting server. Default: 5. 0 means never reconnect. (ushort) parm: enable_oplocks:Enable or disable oplocks (bool). Default:y/Y/1 (bool) Scott Purcell Content Development: Linux, Virtualization, and Cloud Solutions Dell | GSD Learning Development From: Shirish Pargaonkar [shirishpargaon...@gmail.com] Sent: Thursday, May 17, 2012 12:15 PM To: Purcell, Scott Cc: samba@lists.samba.org Subject: Re: [Samba] Trouble with mount.cifs while smbclient works (Ubuntu 12.04) On Thu, May 17, 2012 at 11:38 AM, scott_purc...@dell.com wrote: Passing sec=ntlmssp did not help. Nor did moving the options prior to the device and mount-point specifications. I'm not comfortable sending a full tcpdump to the list whose membership I do not know (but I can send it directly to formal members of the Samba team -- I see Gunter's name on the website. Shirish, are you on the team as well?) since it would reveal things about my network environment that our data security folks would not want revealed. But I have performed such a capture -- are there specific things I should be looking for? I think your session setup is failing. Basically what does negotiate protocol response returns (capabilities etc.). Also, what is the version of cifs module? (modinfo cifs command would tell that) -- Hi Scott, just had a first look at your network trace: - negprot ok - sess_setup ok - treeconnect ok (for shared tree and IPC$) Then cifs is doing a QUERY_PATH_INFO (query file all info (263)) request on the shared tree (path = ), which is failing with STATUS_ACCESS_DENIED. In a former post you used: $ sudo smbclient //pc.com/D**NAS2 -A /etc/.smb_creds.txt Domain=[A*S] OS=[EMC-SNAS:T5.6.50.205] Server=[NT1] smb: \ ls training/ NT_STATUS_ACCESS_DENIED listing \training\ smb: \ cd training smb: \training\ ls . DA 0 Tue Jan 10 13:17:11 2012 .. DA 0 Thu Sep 1 11:54:48 2011 Enterprise DA 0 Fri Oct 21 07:03:08 2011 enterprise_services_offering DA 0 Mon Jun 13 16:31:21 2011 Flash_Beta DA 0 Wed Apr 14 13:46:40 2010 Functions DA 0 Sat Feb 27 09:47:17 2010 GCSS DA 0 Wed Apr 14 13:46:49 2010 After connect you do a ls training/ and get access denied, but then you cd into that subdir and ls is working. Do you _always_ see this behavior? When you use ls directly after connect, do you get some error? Cheers, Günter -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba yes, I do not understand tree connect succeeding but query path info failing on the very same share path. The version of cifs module is 1.76 which is fairly recent. Regards, Shirish Perhaps you need an entry like this create dns_resolver* * /usr/sbin/cifs.upcall %k in file /etc/request-key.conf -- To unsubscribe from this list go
Re: [Samba] Trouble with mount.cifs while smbclient works (Ubuntu 12.04)
On 05/16/2012 10:52 PM, scott_purc...@dell.com wrote: I just upgraded from Ubuntu 11.04 to 12.04 and am working to restore access to the windows shares I use at work. smbclient connects immediately: sudo smbclient //server/share -A /etc/.smb_creds.txt mount.cifs fails (with mount error(13): Permission denied): sudo mount.cifs //server/share /mnt/ -o credentials=/etc/.smb_creds.txt Hi Do you have the cifs-utils package installed? sudo apt-get install cifs-utils Cheers, Steve -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Trouble with mount.cifs while smbclient works (Ubuntu 12.04)
Steve said: Do you have the cifs-utils package installed? cifs-utils is installed (2:5.1-1ubuntu1) Shirish said: What is the Windows server? I don't really have visibility into the specifics here -- it is a NAS appliance of some kind managed by our IT and not under my control. However, smbclient identifies it as: OS=[EMC-SNAS:T5.6.50.205] Server=[NT1] Can you try a command like mount -t cifs //servername/sharename mount_point -o sec=ntlmsspi, user=username,pass=password ntlmsspi results in operation not supported but it doesn't seem to object to either the default ntlm or ntlmv2 as specified below: $ sudo mount -t cifs //pc.com/D**NAS2 /mnt/temp --verbose -o domain=a**as,user=scott_purcell,password='**!***',uid=scott,gid=scott,rw,sec=ntlmv2 mount.cifs kernel mount options: ip=10.30.25.221,unc=\\pc.com/D**NAS2,sec=ntlmv2,uid=1000,gid=1000,ver=1,user=scott_purcell,domain=a**as,pass= mount error(13): Permission denied Refer to the mount.cifs(8) manual page (e.g. man mount.cifs) You can paste your smb.conf that smbclient uses as well. With comments and blank lines stripped: $ grep -v ^# /etc/samba/smb.conf |grep -v ^$ |grep -v ^\; [global] workgroup = WORKGROUP server string = %h server (Samba, Ubuntu) dns proxy = no log file = /var/log/samba/log.%m max log size = 1000 syslog = 0 panic action = /usr/share/samba/panic-action %d encrypt passwords = true passdb backend = tdbsam obey pam restrictions = yes unix password sync = yes passwd program = /usr/bin/passwd %u passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* . pam password change = yes map to guest = bad user usershare allow guests = yes [printers] comment = All Printers browseable = no path = /var/spool/samba printable = yes guest ok = no read only = yes create mask = 0700 [print$] comment = Printer Drivers path = /var/lib/samba/printers browseable = yes read only = yes guest ok = no I can invoke smbclient successfully by either referring it to my credentials file: $ sudo smbclient //pc.com/D**NAS2 -A /etc/.smb_creds.txt Domain=[A*S] OS=[EMC-SNAS:T5.6.50.205] Server=[NT1] smb: \ ls training/ NT_STATUS_ACCESS_DENIED listing \training\ smb: \ cd training smb: \training\ ls . DA0 Tue Jan 10 13:17:11 2012 .. DA0 Thu Sep 1 11:54:48 2011 Enterprise DA0 Fri Oct 21 07:03:08 2011 enterprise_services_offering DA0 Mon Jun 13 16:31:21 2011 Flash_Beta DA0 Wed Apr 14 13:46:40 2010 Functions DA0 Sat Feb 27 09:47:17 2010 GCSS DA0 Wed Apr 14 13:46:49 2010 Or by specifying my authentication at the command line: $ sudo smbclient //pc.com/D**NAS2 --workgroup=a**as --user=scott_purcell Enter scott_purcell's password: Domain=[A**AS] OS=[EMC-SNAS:T5.6.50.205] Server=[NT1] smb: \ cd training smb: \training\ ls . DA0 Tue Jan 10 13:17:11 2012 .. DA0 Thu Sep 1 11:54:48 2011 Enterprise DA0 Fri Oct 21 07:03:08 2011 enterprise_services_offering DA0 Mon Jun 13 16:31:21 2011 Flash_Beta DA0 Wed Apr 14 13:46:40 2010 Functions DA0 Sat Feb 27 09:47:17 2010 GCSS DA0 Wed Apr 14 13:46:49 2010 Hope that helps... -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Trouble with mount.cifs while smbclient works (Ubuntu 12.04)
On Wed, May 16, 2012 at 5:29 PM, scott_purc...@dell.com wrote: Steve said: Do you have the cifs-utils package installed? cifs-utils is installed (2:5.1-1ubuntu1) Shirish said: What is the Windows server? I don't really have visibility into the specifics here -- it is a NAS appliance of some kind managed by our IT and not under my control. However, smbclient identifies it as: OS=[EMC-SNAS:T5.6.50.205] Server=[NT1] Can you try a command like mount -t cifs //servername/sharename mount_point -o sec=ntlmsspi, user=username,pass=password ntlmsspi results in operation not supported but it doesn't seem to object to either the default ntlm or ntlmv2 as specified below: $ sudo mount -t cifs //pc.com/D**NAS2 /mnt/temp --verbose -o domain=a**as,user=scott_purcell,password='**!***',uid=scott,gid=scott,rw,sec=ntlmv2 mount.cifs kernel mount options: ip=10.30.25.221,unc=\\pc.com/D**NAS2,sec=ntlmv2,uid=1000,gid=1000,ver=1,user=scott_purcell,domain=a**as,pass= mount error(13): Permission denied Refer to the mount.cifs(8) manual page (e.g. man mount.cifs) You can paste your smb.conf that smbclient uses as well. With comments and blank lines stripped: $ grep -v ^# /etc/samba/smb.conf |grep -v ^$ |grep -v ^\; [global] workgroup = WORKGROUP server string = %h server (Samba, Ubuntu) dns proxy = no log file = /var/log/samba/log.%m max log size = 1000 syslog = 0 panic action = /usr/share/samba/panic-action %d encrypt passwords = true passdb backend = tdbsam obey pam restrictions = yes unix password sync = yes passwd program = /usr/bin/passwd %u passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* . pam password change = yes map to guest = bad user usershare allow guests = yes [printers] comment = All Printers browseable = no path = /var/spool/samba printable = yes guest ok = no read only = yes create mask = 0700 [print$] comment = Printer Drivers path = /var/lib/samba/printers browseable = yes read only = yes guest ok = no I can invoke smbclient successfully by either referring it to my credentials file: $ sudo smbclient //pc.com/D**NAS2 -A /etc/.smb_creds.txt Domain=[A*S] OS=[EMC-SNAS:T5.6.50.205] Server=[NT1] smb: \ ls training/ NT_STATUS_ACCESS_DENIED listing \training\ smb: \ cd training smb: \training\ ls . DA 0 Tue Jan 10 13:17:11 2012 .. DA 0 Thu Sep 1 11:54:48 2011 Enterprise DA 0 Fri Oct 21 07:03:08 2011 enterprise_services_offering DA 0 Mon Jun 13 16:31:21 2011 Flash_Beta DA 0 Wed Apr 14 13:46:40 2010 Functions DA 0 Sat Feb 27 09:47:17 2010 GCSS DA 0 Wed Apr 14 13:46:49 2010 Or by specifying my authentication at the command line: $ sudo smbclient //pc.com/D**NAS2 --workgroup=a**as --user=scott_purcell Enter scott_purcell's password: Domain=[A**AS] OS=[EMC-SNAS:T5.6.50.205] Server=[NT1] smb: \ cd training smb: \training\ ls . DA 0 Tue Jan 10 13:17:11 2012 .. DA 0 Thu Sep 1 11:54:48 2011 Enterprise DA 0 Fri Oct 21 07:03:08 2011 enterprise_services_offering DA 0 Mon Jun 13 16:31:21 2011 Flash_Beta DA 0 Wed Apr 14 13:46:40 2010 Functions DA 0 Sat Feb 27 09:47:17 2010 GCSS DA 0 Wed Apr 14 13:46:49 2010 Hope that helps... -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba Scott, you can try sec=ntlmssp instead. Perhaps the NAS box does not support smb signing. What would also help is either a wireshark trace or tcpdump output in both the cases, smbclient and cifs client. tcpdump -s 0 -w filename.pcap can be used to gather the data. Regards, Shirish -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Trouble with mount.cifs while smbclient works (Ubuntu 12.04)
Hallo, Scott_Purcell, Du meintest am 16.05.12: mount.cifs fails (with mount error(13): Permission denied): sudo mount.cifs //server/share /mnt/ -o credentials=/etc/.smb_creds.txt Just try sudo mount.cifs -o ... //server/share ... mount.cifs needs the options early. Viele Gruesse! Helmut -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Trouble with mount.cifs while smbclient works (Ubuntu 12.04)
Am Donnerstag, 17. Mai 2012, 05:19:09 schrieb Shirish Pargaonkar: On Wed, May 16, 2012 at 5:29 PM, scott_purc...@dell.com wrote: Steve said: Do you have the cifs-utils package installed? cifs-utils is installed (2:5.1-1ubuntu1) Shirish said: What is the Windows server? I don't really have visibility into the specifics here -- it is a NAS appliance of some kind managed by our IT and not under my control. However, smbclient identifies it as: OS=[EMC-SNAS:T5.6.50.205] Server=[NT1] Can you try a command like mount -t cifs //servername/sharename mount_point -o sec=ntlmsspi, user=username,pass=password ntlmsspi results in operation not supported but it doesn't seem to object to either the default ntlm or ntlmv2 as specified below: $ sudo mount -t cifs //pc.com/D**NAS2 /mnt/temp --verbose -o domain=a**as,user=scott_purcell,password='**!***',uid=scott,gid =scott,rw,sec=ntlmv2 mount.cifs kernel mount options: ip=10.30.25.221,unc=\\pc.com/D**NAS2,sec=ntlmv2,uid=1000 ,gid=1000,ver=1,user=scott_purcell,domain=a**as,pass= mount error(13): Permission denied Refer to the mount.cifs(8) manual page (e.g. man mount.cifs) You can paste your smb.conf that smbclient uses as well. With comments and blank lines stripped: $ grep -v ^# /etc/samba/smb.conf |grep -v ^$ |grep -v ^\; [global] workgroup = WORKGROUP server string = %h server (Samba, Ubuntu) dns proxy = no log file = /var/log/samba/log.%m max log size = 1000 syslog = 0 panic action = /usr/share/samba/panic-action %d encrypt passwords = true passdb backend = tdbsam obey pam restrictions = yes unix password sync = yes passwd program = /usr/bin/passwd %u passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* . pam password change = yes map to guest = bad user usershare allow guests = yes [printers] comment = All Printers browseable = no path = /var/spool/samba printable = yes guest ok = no read only = yes create mask = 0700 [print$] comment = Printer Drivers path = /var/lib/samba/printers browseable = yes read only = yes guest ok = no I can invoke smbclient successfully by either referring it to my credentials file: $ sudo smbclient //pc.com/D**NAS2 -A /etc/.smb_creds.txt Domain=[A*S] OS=[EMC-SNAS:T5.6.50.205] Server=[NT1] smb: \ ls training/ NT_STATUS_ACCESS_DENIED listing \training\ smb: \ cd training smb: \training\ ls . DA0 Tue Jan 10 13:17:11 2012 .. DA0 Thu Sep 1 11:54:48 2011 Enterprise DA0 Fri Oct 21 07:03:08 2011 enterprise_services_offering DA0 Mon Jun 13 16:31:21 2011 Flash_Beta DA0 Wed Apr 14 13:46:40 2010 Functions DA0 Sat Feb 27 09:47:17 2010 GCSS DA0 Wed Apr 14 13:46:49 2010 Or by specifying my authentication at the command line: $ sudo smbclient //pc.com/D**NAS2 --workgroup=a**as --user=scott_purcell Enter scott_purcell's password: Domain=[A**AS] OS=[EMC-SNAS:T5.6.50.205] Server=[NT1] smb: \ cd training smb: \training\ ls . DA0 Tue Jan 10 13:17:11 2012 .. DA0 Thu Sep 1 11:54:48 2011 Enterprise DA0 Fri Oct 21 07:03:08 2011 enterprise_services_offering DA0 Mon Jun 13 16:31:21 2011 Flash_Beta DA0 Wed Apr 14 13:46:40 2010 Functions DA0 Sat Feb 27 09:47:17 2010 GCSS DA0 Wed Apr 14 13:46:49 2010 Hope that helps... -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba Scott, you can try sec=ntlmssp instead. Perhaps the NAS box does not support smb signing. What would also help is either a wireshark trace or tcpdump output in both the cases, smbclient and cifs client. tcpdump -s 0 -w filename.pcap can be used to gather the data. Regards, Shirish i also guess using sec=ntlmssp could solve the issue. Using defaults - current cifs vfs does not offer the extended security negotiation bit in flags2 during negprot... So atm sec=... stuff is needed. Cheers, Günter -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
