<div dir="ltr"><br><div class="gmail_extra"><br><div class="gmail_quote">2015-01-09 18:12 GMT+01:00 Alexander Bokovoy <span dir="ltr"><<a href="mailto:abokovoy@redhat.com" target="_blank">abokovoy@redhat.com</a>></span><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
So if you have all these configs right, can you add --verbose to<br>
mount.cifs arguments _before_ -o options?<br>
<br>
mount -t cifs //ipaserver.MY.LAN/TheShare --verbose -o sec=krb5<br>
<br>
and you can enable debugging before mounting in /proc/fs/cifs/, see<br>
<a href="https://wiki.samba.org/index.php/LinuxCIFS_troubleshooting" target="_blank">https://wiki.samba.org/index.<u></u>php/LinuxCIFS_troubleshooting</a><span class=""><font color="#888888"><br>
-- <br></font></span></blockquote><div><br></div><div>[john@ipaserver ~]$ rpm -q cifs-utils</div><div>cifs-utils-6.4-2.fc21.x86_64</div><div><br></div><div>[john@ipaserver mnt]# su root</div><div>[root@ipaserver mnt]# kdestroy</div><div>[root@ipaserver mnt]# kinit admin</div><div>[root@ipaserver mnt]# klist</div><div>Ticket cache: KEYRING:persistent:1434400004:krb_ccache_As3C1bl</div><div>Default principal: admin@MY.LAN</div><div><br></div><div>Valid starting Expires Service principal</div><div>2015-01-09 22:40:37 2015-01-10 22:40:32 krbtgt/MY.LAN@MY.LAN</div><div><br></div><div>[root@ipaserver mnt]#</div><div>[root@ipaserver mnt]# mount -t cifs //ipaserver.MY.LAN/TheShare --verbose -o sec=krb5 mointpoint</div><div>mount.cifs kernel mount options: ip=192.168.0.103,unc=\\ipaserver.MY.LAN\TheShare,sec=krb5,user=john,pass=********</div><div>mount error(126): Required key not available</div><div>Refer to the mount.cifs(8) manual page (e.g. man mount.cifs)</div><div><br></div><div>[fre jan 9 22:40:15 2015] CIFS VFS: Send error in SessSetup = -126</div><div>[fre jan 9 22:40:15 2015] CIFS VFS: cifs_mount failed w/return code = -126</div><div>[fre jan 9 22:40:49 2015] CIFS VFS: Send error in SessSetup = -126</div><div>[fre jan 9 22:40:49 2015] CIFS VFS: cifs_mount failed w/return code = -126</div><div>[fre jan 9 22:42:30 2015] fs/cifs/cifsfs.c: Devname: //ipaserver.MY.LAN/TheShare flags: 0</div><div>[fre jan 9 22:42:30 2015] fs/cifs/connect.c: Username: john</div><div>[fre jan 9 22:42:30 2015] fs/cifs/connect.c: file mode: 0x1ed dir mode: 0x1ed</div><div>[fre jan 9 22:42:30 2015] fs/cifs/connect.c: CIFS VFS: in cifs_mount as Xid: 6 with uid: 0</div><div>[fre jan 9 22:42:30 2015] fs/cifs/connect.c: UNC: \\ipaserver.MY.LAN\TheShare</div><div>[fre jan 9 22:42:30 2015] fs/cifs/connect.c: Socket created</div><div>[fre jan 9 22:42:30 2015] fs/cifs/connect.c: sndbuf 16384 rcvbuf 87380 rcvtimeo 0x1b58</div><div>[fre jan 9 22:42:30 2015] fs/cifs/fscache.c: cifs_fscache_get_client_cookie: (0xffff88007a28dc00/0xffff8800736ee000)</div><div>[fre jan 9 22:42:30 2015] fs/cifs/connect.c: CIFS VFS: in cifs_get_smb_ses as Xid: 7 with uid: 0</div><div>[fre jan 9 22:42:30 2015] fs/cifs/connect.c: Existing smb sess not found</div><div>[fre jan 9 22:42:30 2015] fs/cifs/cifssmb.c: Requesting extended security.</div><div>[fre jan 9 22:42:30 2015] fs/cifs/transport.c: For smb_command 114</div><div>[fre jan 9 22:42:30 2015] fs/cifs/transport.c: Sending smb: smb_len=78</div><div>[fre jan 9 22:42:30 2015] fs/cifs/connect.c: Demultiplex PID: 20875</div><div>[fre jan 9 22:42:30 2015] fs/cifs/connect.c: RFC1002 header 0xb5</div><div>[fre jan 9 22:42:30 2015] fs/cifs/misc.c: checkSMB Length: 0xb9, smb_buf_length: 0xb5</div><div>[fre jan 9 22:42:30 2015] fs/cifs/transport.c: cifs_sync_mid_result: cmd=114 mid=1 state=4</div><div>[fre jan 9 22:42:30 2015] fs/cifs/cifssmb.c: Dialect: 2</div><div>[fre jan 9 22:42:30 2015] fs/cifs/asn1.c: OID len = 7 oid = 0x1 0x2 0x348 0xbb92</div><div>[fre jan 9 22:42:30 2015] fs/cifs/asn1.c: OID len = 7 oid = 0x1 0x2 0x348 0x1bb92</div><div>[fre jan 9 22:42:30 2015] fs/cifs/asn1.c: OID len = 10 oid = 0x1 0x3 0x6 0x1</div><div>[fre jan 9 22:42:30 2015] fs/cifs/cifssmb.c: negprot rc 0</div><div>[fre jan 9 22:42:30 2015] fs/cifs/connect.c: Security Mode: 0x3 Capabilities: 0x8080f3fd TimeAdjust: -3600</div><div>[fre jan 9 22:42:30 2015] fs/cifs/sess.c: sess setup type 5</div><div>[fre jan 9 22:42:30 2015] fs/cifs/cifs_spnego.c: key description = ver=0x2;host=ipaserver.MY.LAN;ip4=192.168.0.103;sec=krb5;uid=0x0;creduid=0x0;user=john;pid=0x5188</div><div>[fre jan 9 22:42:30 2015] CIFS VFS: Send error in SessSetup = -126</div><div>[fre jan 9 22:42:30 2015] fs/cifs/connect.c: CIFS VFS: leaving cifs_get_smb_ses (xid = 7) rc = -126</div><div>[fre jan 9 22:42:30 2015] fs/cifs/fscache.c: cifs_fscache_release_client_cookie: (0xffff88007a28dc00/0xffff8800736ee000)</div><div>[fre jan 9 22:42:30 2015] fs/cifs/connect.c: CIFS VFS: leaving cifs_mount (xid = 6) rc = -126</div><div>[fre jan 9 22:42:30 2015] CIFS VFS: cifs_mount failed w/return code = -126</div><div><br></div><div>Is it okay that the verbose output says sec=krb5,user=john,pass=******** I did su from john...</div><div><br></div><div>-- john</div><div> </div></div><br></div></div>