|
I just upgraded from Ubuntu 11.04 to 12.04 and am working to restore access to the windows shares I use at work.
smbclient connects immediately: sudo smbclient //server/share -A /etc/.smb_creds.txt mount.cifs fails (with "mount error(13): Permission denied"): sudo mount.cifs //server/share /mnt/ -o credentials=/etc/.smb_creds.txt my credentials file is as follows (with the proper values, of course): username=mynamehere password=password domain=MyDomain I remember on a previous occasion having resolved a problem by including a mount option "noserverino". I've tried that to no effect. I've also tried "sec=ntlmv2" The syslog contains this message in response to each failed attempt: CIFS VFS: cifs_mount failed w/return code = -13 Whatever this glitch is, it seems pervasive. smbclient is the ONLY way I've been able to successfully connect to my shares so far. Failed methods attempted include: * mounting with "mount -t cifs ..." * mounting with "mount -t smbfs ..." * mounting directly with "mount.cifs ..." * configuring smbnetfs (supposed to make the windows network browsable from a single mountpoint -- I could see the servers and shares, but not directories on the shares) * configuring fusesmb * Nautilus' "Connect to Server" functionality * Nautilus' "smb:///..." browsing It seems like smbclient is handling authentication in one way (working) and everything else is doing it in some different way. I'm baffled and appreciative of any suggestions you can provide. Thanks in advance. Scott Purcell Dell | GSD Learning & Development Scott Purcell Content Development: Linux, Virtualization, and Cloud Solutions Dell | GSD Learning & Development All about me on PeopleSearch<http://peoplesearch.dell.com/pages/profile.aspx?accountname=AMERICAS\SCOTT_PURCELL> | Follow me on Chatter<https://na7.salesforce.com/_ui/core/userprofile/UserProfilePage?u=005A0000000buOq> -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba |
|
On 05/16/2012 10:52 PM, [hidden email] wrote:
> I just upgraded from Ubuntu 11.04 to 12.04 and am working to restore access to the windows shares I use at work. > > > > smbclient connects immediately: > > > > sudo smbclient //server/share -A /etc/.smb_creds.txt > > > > mount.cifs fails (with "mount error(13): Permission denied"): > > > > sudo mount.cifs //server/share /mnt/ -o credentials=/etc/.smb_creds.txt > > Do you have the cifs-utils package installed? sudo apt-get install cifs-utils Cheers, Steve -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba |
|
Steve said:
> Do you have the cifs-utils package installed? cifs-utils is installed (2:5.1-1ubuntu1) Shirish said: > What is the Windows server? I don't really have visibility into the specifics here -- it is a NAS appliance of some kind managed by our IT and not under my control. However, smbclient identifies it as: OS=[EMC-SNAS:T5.6.50.205] Server=[NT1] > Can you try a command like > mount -t cifs //servername/sharename <mount_point> -o sec=ntlmsspi, user=<username>,pass=<password> ntlmsspi results in "operation not supported" but it doesn't seem to object to either the default ntlm or ntlmv2 as specified below: $ sudo mount -t cifs //pc************.com/D******NAS2 /mnt/temp --verbose -o domain=a******as,user=scott_purcell,password='******!***',uid=scott,gid=scott,rw,sec=ntlmv2 mount.cifs kernel mount options: ip=10.30.25.221,unc=\\pc************.com/D******NAS2,sec=ntlmv2,uid=1000,gid=1000,ver=1,user=scott_purcell,domain=a******as,pass=******** mount error(13): Permission denied Refer to the mount.cifs(8) manual page (e.g. man mount.cifs) > You can paste your smb.conf that smbclient uses as well. With comments and blank lines stripped: $ grep -v ^# /etc/samba/smb.conf |grep -v ^$ |grep -v ^\; [global] workgroup = WORKGROUP server string = %h server (Samba, Ubuntu) dns proxy = no log file = /var/log/samba/log.%m max log size = 1000 syslog = 0 panic action = /usr/share/samba/panic-action %d encrypt passwords = true passdb backend = tdbsam obey pam restrictions = yes unix password sync = yes passwd program = /usr/bin/passwd %u passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* . pam password change = yes map to guest = bad user usershare allow guests = yes [printers] comment = All Printers browseable = no path = /var/spool/samba printable = yes guest ok = no read only = yes create mask = 0700 [print$] comment = Printer Drivers path = /var/lib/samba/printers browseable = yes read only = yes guest ok = no I can invoke smbclient successfully by either referring it to my credentials file: $ sudo smbclient //pc************.com/D******NAS2 -A /etc/.smb_creds.txt Domain=[A*****S] OS=[EMC-SNAS:T5.6.50.205] Server=[NT1] smb: \> ls training/ NT_STATUS_ACCESS_DENIED listing \training\ smb: \> cd training smb: \training\> ls . DA 0 Tue Jan 10 13:17:11 2012 .. DA 0 Thu Sep 1 11:54:48 2011 Enterprise DA 0 Fri Oct 21 07:03:08 2011 enterprise_services_offering DA 0 Mon Jun 13 16:31:21 2011 Flash_Beta DA 0 Wed Apr 14 13:46:40 2010 Functions DA 0 Sat Feb 27 09:47:17 2010 GCSS DA 0 Wed Apr 14 13:46:49 2010 Or by specifying my authentication at the command line: $ sudo smbclient //pc************.com/D******NAS2 --workgroup=a******as --user=scott_purcell Enter scott_purcell's password: Domain=[A******AS] OS=[EMC-SNAS:T5.6.50.205] Server=[NT1] smb: \> cd training smb: \training\> ls . DA 0 Tue Jan 10 13:17:11 2012 .. DA 0 Thu Sep 1 11:54:48 2011 Enterprise DA 0 Fri Oct 21 07:03:08 2011 enterprise_services_offering DA 0 Mon Jun 13 16:31:21 2011 Flash_Beta DA 0 Wed Apr 14 13:46:40 2010 Functions DA 0 Sat Feb 27 09:47:17 2010 GCSS DA 0 Wed Apr 14 13:46:49 2010 Hope that helps... -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba |
|
On Wed, May 16, 2012 at 5:29 PM, <[hidden email]> wrote:
> Steve said: >> Do you have the cifs-utils package installed? > > cifs-utils is installed (2:5.1-1ubuntu1) > > Shirish said: > >> What is the Windows server? > > I don't really have visibility into the specifics here -- it is a NAS appliance of some kind managed by our IT and not under my control. However, smbclient identifies it as: OS=[EMC-SNAS:T5.6.50.205] Server=[NT1] > >> Can you try a command like >> mount -t cifs //servername/sharename <mount_point> -o sec=ntlmsspi, user=<username>,pass=<password> > > ntlmsspi results in "operation not supported" but it doesn't seem to object to either the default ntlm or ntlmv2 as specified below: > > $ sudo mount -t cifs //pc************.com/D******NAS2 /mnt/temp --verbose -o domain=a******as,user=scott_purcell,password='******!***',uid=scott,gid=scott,rw,sec=ntlmv2 > > mount.cifs kernel mount options: ip=10.30.25.221,unc=\\pc************.com/D******NAS2,sec=ntlmv2,uid=1000,gid=1000,ver=1,user=scott_purcell,domain=a******as,pass=******** > mount error(13): Permission denied > Refer to the mount.cifs(8) manual page (e.g. man mount.cifs) > > >> You can paste your smb.conf that smbclient uses as well. > > With comments and blank lines stripped: > > $ grep -v ^# /etc/samba/smb.conf |grep -v ^$ |grep -v ^\; > [global] > workgroup = WORKGROUP > server string = %h server (Samba, Ubuntu) > dns proxy = no > log file = /var/log/samba/log.%m > max log size = 1000 > syslog = 0 > panic action = /usr/share/samba/panic-action %d > encrypt passwords = true > passdb backend = tdbsam > obey pam restrictions = yes > unix password sync = yes > passwd program = /usr/bin/passwd %u > passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* . > pam password change = yes > map to guest = bad user > usershare allow guests = yes > [printers] > comment = All Printers > browseable = no > path = /var/spool/samba > printable = yes > guest ok = no > read only = yes > create mask = 0700 > [print$] > comment = Printer Drivers > path = /var/lib/samba/printers > browseable = yes > read only = yes > guest ok = no > > > I can invoke smbclient successfully by either referring it to my credentials file: > > > $ sudo smbclient //pc************.com/D******NAS2 -A /etc/.smb_creds.txt > Domain=[A*****S] OS=[EMC-SNAS:T5.6.50.205] Server=[NT1] > smb: \> ls training/ > NT_STATUS_ACCESS_DENIED listing \training\ > smb: \> cd training > smb: \training\> ls > . DA 0 Tue Jan 10 13:17:11 2012 > .. DA 0 Thu Sep 1 11:54:48 2011 > Enterprise DA 0 Fri Oct 21 07:03:08 2011 > enterprise_services_offering DA 0 Mon Jun 13 16:31:21 2011 > Flash_Beta DA 0 Wed Apr 14 13:46:40 2010 > Functions DA 0 Sat Feb 27 09:47:17 2010 > GCSS DA 0 Wed Apr 14 13:46:49 2010 > > > Or by specifying my authentication at the command line: > > $ sudo smbclient //pc************.com/D******NAS2 --workgroup=a******as --user=scott_purcell > Enter scott_purcell's password: > Domain=[A******AS] OS=[EMC-SNAS:T5.6.50.205] Server=[NT1] > smb: \> cd training > smb: \training\> ls > . DA 0 Tue Jan 10 13:17:11 2012 > .. DA 0 Thu Sep 1 11:54:48 2011 > Enterprise DA 0 Fri Oct 21 07:03:08 2011 > enterprise_services_offering DA 0 Mon Jun 13 16:31:21 2011 > Flash_Beta DA 0 Wed Apr 14 13:46:40 2010 > Functions DA 0 Sat Feb 27 09:47:17 2010 > GCSS DA 0 Wed Apr 14 13:46:49 2010 > > > Hope that helps... > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba Scott, you can try sec=ntlmssp instead. Perhaps the NAS box does not support smb signing. What would also help is either a wireshark trace or tcpdump output in both the cases, smbclient and cifs client. tcpdump -s 0 -w <filename.pcap> can be used to gather the data. Regards, Shirish -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba |
|
In reply to this post by Scott_Purcell
Hallo, Scott_Purcell,
Du meintest am 16.05.12: > mount.cifs fails (with "mount error(13): Permission denied"): > sudo mount.cifs //server/share /mnt/ -o > credentials=/etc/.smb_creds.txt Just try sudo mount.cifs -o ... //server/share ... "mount.cifs" needs the options early. Viele Gruesse! Helmut -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba |
|
In reply to this post by Shirish Pargaonkar
Am Donnerstag, 17. Mai 2012, 05:19:09 schrieb Shirish Pargaonkar:
> On Wed, May 16, 2012 at 5:29 PM, <[hidden email]> wrote: > > Steve said: > >> Do you have the cifs-utils package installed? > > > > cifs-utils is installed (2:5.1-1ubuntu1) > > > > Shirish said: > >> What is the Windows server? > > > > I don't really have visibility into the specifics here -- it is a NAS > > appliance of some kind managed by our IT and not under my control. > > However, smbclient identifies it as: OS=[EMC-SNAS:T5.6.50.205] > > Server=[NT1] > > > >> Can you try a command like > >> mount -t cifs //servername/sharename <mount_point> -o > >> sec=ntlmsspi, user=<username>,pass=<password> > > > > ntlmsspi results in "operation not supported" but it doesn't seem to > > object to either the default ntlm or ntlmv2 as specified below: > > > > $ sudo mount -t cifs //pc************.com/D******NAS2 /mnt/temp --verbose > > -o > > domain=a******as,user=scott_purcell,password='******!***',uid=scott,gid > > =scott,rw,sec=ntlmv2 > > > > mount.cifs kernel mount options: > > ip=10.30.25.221,unc=\\pc************.com/D******NAS2,sec=ntlmv2,uid=1000 > > ,gid=1000,ver=1,user=scott_purcell,domain=a******as,pass=******** mount > > error(13): Permission denied > > Refer to the mount.cifs(8) manual page (e.g. man mount.cifs) > > > >> You can paste your smb.conf that smbclient uses as well. > > > > With comments and blank lines stripped: > > > > $ grep -v ^# /etc/samba/smb.conf |grep -v ^$ |grep -v ^\; > > [global] > > workgroup = WORKGROUP > > server string = %h server (Samba, Ubuntu) > > dns proxy = no > > log file = /var/log/samba/log.%m > > max log size = 1000 > > syslog = 0 > > panic action = /usr/share/samba/panic-action %d > > encrypt passwords = true > > passdb backend = tdbsam > > obey pam restrictions = yes > > unix password sync = yes > > passwd program = /usr/bin/passwd %u > > passwd chat = *Enter\snew\s*\spassword:* %n\n > > *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* . pam > > password change = yes > > map to guest = bad user > > usershare allow guests = yes > > [printers] > > comment = All Printers > > browseable = no > > path = /var/spool/samba > > printable = yes > > guest ok = no > > read only = yes > > create mask = 0700 > > [print$] > > comment = Printer Drivers > > path = /var/lib/samba/printers > > browseable = yes > > read only = yes > > guest ok = no > > > > > > I can invoke smbclient successfully by either referring it to my > > credentials file: > > > > > > $ sudo smbclient //pc************.com/D******NAS2 -A /etc/.smb_creds.txt > > Domain=[A*****S] OS=[EMC-SNAS:T5.6.50.205] Server=[NT1] > > smb: \> ls training/ > > NT_STATUS_ACCESS_DENIED listing \training\ > > smb: \> cd training > > smb: \training\> ls > > . DA 0 Tue Jan 10 13:17:11 2012 > > .. DA 0 Thu Sep 1 11:54:48 2011 > > Enterprise DA 0 Fri Oct 21 07:03:08 2011 > > enterprise_services_offering DA 0 Mon Jun 13 16:31:21 2011 > > Flash_Beta DA 0 Wed Apr 14 13:46:40 2010 > > Functions DA 0 Sat Feb 27 09:47:17 2010 > > GCSS DA 0 Wed Apr 14 13:46:49 2010 > > > > > > Or by specifying my authentication at the command line: > > > > $ sudo smbclient //pc************.com/D******NAS2 --workgroup=a******as > > --user=scott_purcell Enter scott_purcell's password: > > Domain=[A******AS] OS=[EMC-SNAS:T5.6.50.205] Server=[NT1] > > smb: \> cd training > > smb: \training\> ls > > . DA 0 Tue Jan 10 13:17:11 2012 > > .. DA 0 Thu Sep 1 11:54:48 2011 > > Enterprise DA 0 Fri Oct 21 07:03:08 2011 > > enterprise_services_offering DA 0 Mon Jun 13 16:31:21 2011 > > Flash_Beta DA 0 Wed Apr 14 13:46:40 2010 > > Functions DA 0 Sat Feb 27 09:47:17 2010 > > GCSS DA 0 Wed Apr 14 13:46:49 2010 > > > > > > Hope that helps... > > > > -- > > To unsubscribe from this list go to the following URL and read the > > instructions: https://lists.samba.org/mailman/options/samba > > Scott, you can try sec=ntlmssp instead. > Perhaps the NAS box does not support smb signing. > > What would also help is either a wireshark trace or tcpdump output > in both the cases, smbclient and cifs client. > tcpdump -s 0 -w <filename.pcap> can be used to gather the data. > > Regards, > > Shirish i also guess using "sec=ntlmssp" could solve the issue. Using defaults - current cifs vfs does not offer the "extended security negotiation" bit in flags2 during negprot... So atm "sec=..." stuff is needed. Cheers, Günter -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba |
|
In reply to this post by Helmut Hullen
Hi Helmut
On 17 May 2012 06:16, Helmut Hullen <[hidden email]> wrote: > Hallo, Scott_Purcell, > > Du meintest am 16.05.12: > >> mount.cifs fails (with "mount error(13): Permission denied"): > > >> sudo mount.cifs //server/share /mnt/ -o >> credentials=/etc/.smb_creds.txt > > > Just try > > sudo mount.cifs -o ... //server/share ... > > "mount.cifs" needs the options early. I'm not sure that's true. The manpage says this: SYNOPSIS mount.cifs {service} {mount-point} [-o options] -- Michael Wood <[hidden email]> -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba |
|
In reply to this post by Scott_Purcell
Passing "sec=ntlmssp" did not help. Nor did moving the options prior to the device and mount-point specifications. I'm not comfortable sending a full tcpdump to the list whose membership I do not know (but I can send it directly to formal members of the Samba team -- I see Gunter's name on the website. Shirish, are you on the team as well?) since it would reveal things about my network environment that our data security folks would not want revealed. But I have performed such a capture -- are there specific things I should be looking for? -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba |
|
On Thu, May 17, 2012 at 11:38 AM, <[hidden email]> wrote:
> > Passing "sec=ntlmssp" did not help. Nor did moving the options prior to the device and mount-point specifications. > > I'm not comfortable sending a full tcpdump to the list whose membership I do not know (but I can send it directly to formal members of the Samba team -- I see Gunter's name on the website. Shirish, are you on the team as well?) since it would reveal things about my network environment that our data security folks would not want revealed. But I have performed such a capture -- are there specific things I should be looking for? I think your session setup is failing. Basically what does negotiate protocol response returns (capabilities etc.). Also, what is the version of cifs module? (modinfo cifs command would tell that) > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba |
|
Modinfo reports:
$ modinfo cifs filename: /lib/modules/3.2.0-24-generic/kernel/fs/cifs/cifs.ko version: 1.76 description: VFS to access servers complying with the SNIA CIFS Specification e.g. Samba and Windows license: GPL author: Steve French <[hidden email]> srcversion: B869252FD0961045466332F depends: intree: Y vermagic: 3.2.0-24-generic SMP mod_unload modversions parm: CIFSMaxBufSize:Network buffer size (not including header). Default: 16384 Range: 8192 to 130048 (int) parm: cifs_min_rcv:Network buffers in pool. Default: 4 Range: 1 to 64 (int) parm: cifs_min_small:Small network buffers in pool. Default: 30 Range: 2 to 256 (int) parm: cifs_max_pending:Simultaneous requests to server. Default: 32767 Range: 2 to 32767. (int) parm: echo_retries:Number of echo attempts before giving up and reconnecting server. Default: 5. 0 means never reconnect. (ushort) parm: enable_oplocks:Enable or disable oplocks (bool). Default:y/Y/1 (bool) Scott Purcell Content Development: Linux, Virtualization, and Cloud Solutions Dell | GSD Learning & Development ________________________________________ From: Shirish Pargaonkar [[hidden email]] Sent: Thursday, May 17, 2012 12:15 PM To: Purcell, Scott Cc: [hidden email] Subject: Re: [Samba] Trouble with mount.cifs while smbclient works (Ubuntu 12.04) On Thu, May 17, 2012 at 11:38 AM, <[hidden email]> wrote: > > Passing "sec=ntlmssp" did not help. Nor did moving the options prior to the device and mount-point specifications. > > I'm not comfortable sending a full tcpdump to the list whose membership I do not know (but I can send it directly to formal members of the Samba team -- I see Gunter's name on the website. Shirish, are you on the team as well?) since it would reveal things about my network environment that our data security folks would not want revealed. But I have performed such a capture -- are there specific things I should be looking for? I think your session setup is failing. Basically what does negotiate protocol response returns (capabilities etc.). Also, what is the version of cifs module? (modinfo cifs command would tell that) > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba |
|
Am Donnerstag, 17. Mai 2012, 20:29:25 schrieb [hidden email]:
> Modinfo reports: > > $ modinfo cifs > filename: /lib/modules/3.2.0-24-generic/kernel/fs/cifs/cifs.ko > version: 1.76 > description: VFS to access servers complying with the SNIA CIFS > Specification e.g. Samba and Windows license: GPL > author: Steve French <[hidden email]> > srcversion: B869252FD0961045466332F > depends: > intree: Y > vermagic: 3.2.0-24-generic SMP mod_unload modversions > parm: CIFSMaxBufSize:Network buffer size (not including header). > Default: 16384 Range: 8192 to 130048 (int) parm: > cifs_min_rcv:Network buffers in pool. Default: 4 Range: 1 to 64 (int) > parm: cifs_min_small:Small network buffers in pool. Default: 30 > Range: 2 to 256 (int) parm: cifs_max_pending:Simultaneous > requests to server. Default: 32767 Range: 2 to 32767. (int) parm: > echo_retries:Number of echo attempts before giving up and reconnecting > server. Default: 5. 0 means never reconnect. (ushort) parm: > enable_oplocks:Enable or disable oplocks (bool). Default:y/Y/1 (bool) > > > > Scott Purcell > Content Development: Linux, Virtualization, and Cloud Solutions > Dell | GSD Learning & Development > ________________________________________ > From: Shirish Pargaonkar [[hidden email]] > Sent: Thursday, May 17, 2012 12:15 PM > To: Purcell, Scott > Cc: [hidden email] > Subject: Re: [Samba] Trouble with mount.cifs while smbclient works (Ubuntu > 12.04) > > On Thu, May 17, 2012 at 11:38 AM, <[hidden email]> wrote: > > Passing "sec=ntlmssp" did not help. Nor did moving the options prior to > > the device and mount-point specifications. > > > > I'm not comfortable sending a full tcpdump to the list whose membership I > > do not know (but I can send it directly to formal members of the Samba > > team -- I see Gunter's name on the website. Shirish, are you on the team > > as well?) since it would reveal things about my network environment that > > our data security folks would not want revealed. But I have performed > > such a capture -- are there specific things I should be looking for? > > I think your session setup is failing. Basically what does negotiate > protocol response > returns (capabilities etc.). > Also, what is the version of cifs module? (modinfo cifs command > would tell that) > > > -- just had a first look at your network trace: - negprot ok - sess_setup ok - treeconnect ok (for shared tree and IPC$) Then cifs is doing a QUERY_PATH_INFO (query file all info (263)) request on the shared tree (path = ""), which is failing with STATUS_ACCESS_DENIED. In a former post you used: $ sudo smbclient //pc************.com/D******NAS2 -A /etc/.smb_creds.txt Domain=[A*****S] OS=[EMC-SNAS:T5.6.50.205] Server=[NT1] smb: \> ls training/ NT_STATUS_ACCESS_DENIED listing \training\ smb: \> cd training smb: \training\> ls . DA 0 Tue Jan 10 13:17:11 2012 .. DA 0 Thu Sep 1 11:54:48 2011 Enterprise DA 0 Fri Oct 21 07:03:08 2011 enterprise_services_offering DA 0 Mon Jun 13 16:31:21 2011 Flash_Beta DA 0 Wed Apr 14 13:46:40 2010 Functions DA 0 Sat Feb 27 09:47:17 2010 GCSS DA 0 Wed Apr 14 13:46:49 2010 After connect you do a "ls training/" and get access denied, but then you cd into that subdir and "ls" is working. Do you _always_ see this behavior? When you use "ls" directly after connect, do you get some error? Cheers, Günter -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba |
|
On Thu, May 17, 2012 at 8:02 PM, Günter Kukkukk <[hidden email]> wrote:
> Am Donnerstag, 17. Mai 2012, 20:29:25 schrieb [hidden email]: >> Modinfo reports: >> >> $ modinfo cifs >> filename: /lib/modules/3.2.0-24-generic/kernel/fs/cifs/cifs.ko >> version: 1.76 >> description: VFS to access servers complying with the SNIA CIFS >> Specification e.g. Samba and Windows license: GPL >> author: Steve French <[hidden email]> >> srcversion: B869252FD0961045466332F >> depends: >> intree: Y >> vermagic: 3.2.0-24-generic SMP mod_unload modversions >> parm: CIFSMaxBufSize:Network buffer size (not including header). >> Default: 16384 Range: 8192 to 130048 (int) parm: >> cifs_min_rcv:Network buffers in pool. Default: 4 Range: 1 to 64 (int) >> parm: cifs_min_small:Small network buffers in pool. Default: 30 >> Range: 2 to 256 (int) parm: cifs_max_pending:Simultaneous >> requests to server. Default: 32767 Range: 2 to 32767. (int) parm: >> echo_retries:Number of echo attempts before giving up and reconnecting >> server. Default: 5. 0 means never reconnect. (ushort) parm: >> enable_oplocks:Enable or disable oplocks (bool). Default:y/Y/1 (bool) >> >> >> >> Scott Purcell >> Content Development: Linux, Virtualization, and Cloud Solutions >> Dell | GSD Learning & Development >> ________________________________________ >> From: Shirish Pargaonkar [[hidden email]] >> Sent: Thursday, May 17, 2012 12:15 PM >> To: Purcell, Scott >> Cc: [hidden email] >> Subject: Re: [Samba] Trouble with mount.cifs while smbclient works (Ubuntu >> 12.04) >> >> On Thu, May 17, 2012 at 11:38 AM, <[hidden email]> wrote: >> > Passing "sec=ntlmssp" did not help. Nor did moving the options prior to >> > the device and mount-point specifications. >> > >> > I'm not comfortable sending a full tcpdump to the list whose membership I >> > do not know (but I can send it directly to formal members of the Samba >> > team -- I see Gunter's name on the website. Shirish, are you on the team >> > as well?) since it would reveal things about my network environment that >> > our data security folks would not want revealed. But I have performed >> > such a capture -- are there specific things I should be looking for? >> >> I think your session setup is failing. Basically what does negotiate >> protocol response >> returns (capabilities etc.). >> Also, what is the version of cifs module? (modinfo cifs command >> would tell that) >> >> > -- > Hi Scott, > > just had a first look at your network trace: > - negprot ok > - sess_setup ok > - treeconnect ok (for shared tree and IPC$) > > Then cifs is doing a QUERY_PATH_INFO (query file all info (263)) > request on the shared tree (path = ""), which is failing with > STATUS_ACCESS_DENIED. > > In a former post you used: > > $ sudo smbclient //pc************.com/D******NAS2 -A /etc/.smb_creds.txt > Domain=[A*****S] OS=[EMC-SNAS:T5.6.50.205] Server=[NT1] > smb: \> ls training/ > NT_STATUS_ACCESS_DENIED listing \training\ > smb: \> cd training > smb: \training\> ls > . DA 0 Tue Jan 10 13:17:11 2012 > .. DA 0 Thu Sep 1 11:54:48 2011 > Enterprise DA 0 Fri Oct 21 07:03:08 2011 > enterprise_services_offering DA 0 Mon Jun 13 16:31:21 2011 > Flash_Beta DA 0 Wed Apr 14 13:46:40 2010 > Functions DA 0 Sat Feb 27 09:47:17 2010 > GCSS DA 0 Wed Apr 14 13:46:49 2010 > > After connect you do a "ls training/" and get access denied, but then you > cd into that subdir and "ls" is working. > Do you _always_ see this behavior? > > When you use "ls" directly after connect, do you get some error? > > Cheers, Günter > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba yes, I do not understand tree connect succeeding but query path info failing on the very same share path. The version of cifs module is 1.76 which is fairly recent. Regards, Shirish -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba |
|
Hi all,
I want to thank you for your help. I will be in class tomorrow and likely unable to test much, if at all. I'll be able to re-engage with this problem on Monday. My apologies for getting you all focused on my problem just when I have to step away from it for a bit. Scott Purcell Content Development: Linux, Virtualization, and Cloud Solutions Dell | GSD Learning & Development ________________________________________ From: Shirish Pargaonkar [[hidden email]] Sent: Thursday, May 17, 2012 8:08 PM To: Günter Kukkukk Cc: Purcell, Scott; [hidden email] Subject: Re: [Samba] Trouble with mount.cifs while smbclient works (Ubuntu 12.04) On Thu, May 17, 2012 at 8:02 PM, Günter Kukkukk <[hidden email]> wrote: > Am Donnerstag, 17. Mai 2012, 20:29:25 schrieb [hidden email]: >> Modinfo reports: >> >> $ modinfo cifs >> filename: /lib/modules/3.2.0-24-generic/kernel/fs/cifs/cifs.ko >> version: 1.76 >> description: VFS to access servers complying with the SNIA CIFS >> Specification e.g. Samba and Windows license: GPL >> author: Steve French <[hidden email]> >> srcversion: B869252FD0961045466332F >> depends: >> intree: Y >> vermagic: 3.2.0-24-generic SMP mod_unload modversions >> parm: CIFSMaxBufSize:Network buffer size (not including header). >> Default: 16384 Range: 8192 to 130048 (int) parm: >> cifs_min_rcv:Network buffers in pool. Default: 4 Range: 1 to 64 (int) >> parm: cifs_min_small:Small network buffers in pool. Default: 30 >> Range: 2 to 256 (int) parm: cifs_max_pending:Simultaneous >> requests to server. Default: 32767 Range: 2 to 32767. (int) parm: >> echo_retries:Number of echo attempts before giving up and reconnecting >> server. Default: 5. 0 means never reconnect. (ushort) parm: >> enable_oplocks:Enable or disable oplocks (bool). Default:y/Y/1 (bool) >> >> >> >> Scott Purcell >> Content Development: Linux, Virtualization, and Cloud Solutions >> Dell | GSD Learning & Development >> ________________________________________ >> From: Shirish Pargaonkar [[hidden email]] >> Sent: Thursday, May 17, 2012 12:15 PM >> To: Purcell, Scott >> Cc: [hidden email] >> Subject: Re: [Samba] Trouble with mount.cifs while smbclient works (Ubuntu >> 12.04) >> >> On Thu, May 17, 2012 at 11:38 AM, <[hidden email]> wrote: >> > Passing "sec=ntlmssp" did not help. Nor did moving the options prior to >> > the device and mount-point specifications. >> > >> > I'm not comfortable sending a full tcpdump to the list whose membership I >> > do not know (but I can send it directly to formal members of the Samba >> > team -- I see Gunter's name on the website. Shirish, are you on the team >> > as well?) since it would reveal things about my network environment that >> > our data security folks would not want revealed. But I have performed >> > such a capture -- are there specific things I should be looking for? >> >> I think your session setup is failing. Basically what does negotiate >> protocol response >> returns (capabilities etc.). >> Also, what is the version of cifs module? (modinfo cifs command >> would tell that) >> >> > -- > Hi Scott, > > just had a first look at your network trace: > - negprot ok > - sess_setup ok > - treeconnect ok (for shared tree and IPC$) > > Then cifs is doing a QUERY_PATH_INFO (query file all info (263)) > request on the shared tree (path = ""), which is failing with > STATUS_ACCESS_DENIED. > > In a former post you used: > > $ sudo smbclient //pc************.com/D******NAS2 -A /etc/.smb_creds.txt > Domain=[A*****S] OS=[EMC-SNAS:T5.6.50.205] Server=[NT1] > smb: \> ls training/ > NT_STATUS_ACCESS_DENIED listing \training\ > smb: \> cd training > smb: \training\> ls > . DA 0 Tue Jan 10 13:17:11 2012 > .. DA 0 Thu Sep 1 11:54:48 2011 > Enterprise DA 0 Fri Oct 21 07:03:08 2011 > enterprise_services_offering DA 0 Mon Jun 13 16:31:21 2011 > Flash_Beta DA 0 Wed Apr 14 13:46:40 2010 > Functions DA 0 Sat Feb 27 09:47:17 2010 > GCSS DA 0 Wed Apr 14 13:46:49 2010 > > After connect you do a "ls training/" and get access denied, but then you > cd into that subdir and "ls" is working. > Do you _always_ see this behavior? > > When you use "ls" directly after connect, do you get some error? > > Cheers, Günter > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba yes, I do not understand tree connect succeeding but query path info failing on the very same share path. The version of cifs module is 1.76 which is fairly recent. Regards, Shirish -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba |
|
On Thu, May 17, 2012 at 11:07 PM, <[hidden email]> wrote:
> Hi all, > > I want to thank you for your help. I will be in class tomorrow and likely unable to test much, if at all. I'll be able to re-engage with this problem on Monday. My apologies for getting you all focused on my problem just when I have to step away from it for a bit. > > > > Scott Purcell > Content Development: Linux, Virtualization, and Cloud Solutions > Dell | GSD Learning & Development > ________________________________________ > From: Shirish Pargaonkar [[hidden email]] > Sent: Thursday, May 17, 2012 8:08 PM > To: Günter Kukkukk > Cc: Purcell, Scott; [hidden email] > Subject: Re: [Samba] Trouble with mount.cifs while smbclient works (Ubuntu 12.04) > > On Thu, May 17, 2012 at 8:02 PM, Günter Kukkukk <[hidden email]> wrote: >> Am Donnerstag, 17. Mai 2012, 20:29:25 schrieb [hidden email]: >>> Modinfo reports: >>> >>> $ modinfo cifs >>> filename: /lib/modules/3.2.0-24-generic/kernel/fs/cifs/cifs.ko >>> version: 1.76 >>> description: VFS to access servers complying with the SNIA CIFS >>> Specification e.g. Samba and Windows license: GPL >>> author: Steve French <[hidden email]> >>> srcversion: B869252FD0961045466332F >>> depends: >>> intree: Y >>> vermagic: 3.2.0-24-generic SMP mod_unload modversions >>> parm: CIFSMaxBufSize:Network buffer size (not including header). >>> Default: 16384 Range: 8192 to 130048 (int) parm: >>> cifs_min_rcv:Network buffers in pool. Default: 4 Range: 1 to 64 (int) >>> parm: cifs_min_small:Small network buffers in pool. Default: 30 >>> Range: 2 to 256 (int) parm: cifs_max_pending:Simultaneous >>> requests to server. Default: 32767 Range: 2 to 32767. (int) parm: >>> echo_retries:Number of echo attempts before giving up and reconnecting >>> server. Default: 5. 0 means never reconnect. (ushort) parm: >>> enable_oplocks:Enable or disable oplocks (bool). Default:y/Y/1 (bool) >>> >>> >>> >>> Scott Purcell >>> Content Development: Linux, Virtualization, and Cloud Solutions >>> Dell | GSD Learning & Development >>> ________________________________________ >>> From: Shirish Pargaonkar [[hidden email]] >>> Sent: Thursday, May 17, 2012 12:15 PM >>> To: Purcell, Scott >>> Cc: [hidden email] >>> Subject: Re: [Samba] Trouble with mount.cifs while smbclient works (Ubuntu >>> 12.04) >>> >>> On Thu, May 17, 2012 at 11:38 AM, <[hidden email]> wrote: >>> > Passing "sec=ntlmssp" did not help. Nor did moving the options prior to >>> > the device and mount-point specifications. >>> > >>> > I'm not comfortable sending a full tcpdump to the list whose membership I >>> > do not know (but I can send it directly to formal members of the Samba >>> > team -- I see Gunter's name on the website. Shirish, are you on the team >>> > as well?) since it would reveal things about my network environment that >>> > our data security folks would not want revealed. But I have performed >>> > such a capture -- are there specific things I should be looking for? >>> >>> I think your session setup is failing. Basically what does negotiate >>> protocol response >>> returns (capabilities etc.). >>> Also, what is the version of cifs module? (modinfo cifs command >>> would tell that) >>> >>> > -- >> Hi Scott, >> >> just had a first look at your network trace: >> - negprot ok >> - sess_setup ok >> - treeconnect ok (for shared tree and IPC$) >> >> Then cifs is doing a QUERY_PATH_INFO (query file all info (263)) >> request on the shared tree (path = ""), which is failing with >> STATUS_ACCESS_DENIED. >> >> In a former post you used: >> >> $ sudo smbclient //pc************.com/D******NAS2 -A /etc/.smb_creds.txt >> Domain=[A*****S] OS=[EMC-SNAS:T5.6.50.205] Server=[NT1] >> smb: \> ls training/ >> NT_STATUS_ACCESS_DENIED listing \training\ >> smb: \> cd training >> smb: \training\> ls >> . DA 0 Tue Jan 10 13:17:11 2012 >> .. DA 0 Thu Sep 1 11:54:48 2011 >> Enterprise DA 0 Fri Oct 21 07:03:08 2011 >> enterprise_services_offering DA 0 Mon Jun 13 16:31:21 2011 >> Flash_Beta DA 0 Wed Apr 14 13:46:40 2010 >> Functions DA 0 Sat Feb 27 09:47:17 2010 >> GCSS DA 0 Wed Apr 14 13:46:49 2010 >> >> After connect you do a "ls training/" and get access denied, but then you >> cd into that subdir and "ls" is working. >> Do you _always_ see this behavior? >> >> When you use "ls" directly after connect, do you get some error? >> >> Cheers, Günter >> -- >> To unsubscribe from this list go to the following URL and read the >> instructions: https://lists.samba.org/mailman/options/samba > > yes, I do not understand tree connect succeeding but query path info > failing on the very same share path. > The version of cifs module is 1.76 which is fairly recent. > > Regards, > > Shirish Perhaps you need an entry like this create dns_resolver * * /usr/sbin/cifs.upcall %k in file /etc/request-key.conf -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba |
|
In reply to this post by Günter Kukkukk-2
Yes, I think that has been the normal behavior since our data was moved to this device. I assumed it was due to filesystem permissions -- that I don't have read access to the root level of the share, but do have r/w access to the /training/ directory below it.
Using smbclient, get "NT_STATUS_ACCESS_DENIED" when I try: ls ls training ls /training ls /training/ but if I cd to training, I can list its contents. BTW, I've tried appending the path in my mount command as well and mount.cifs still doesn't handle it: -----Original Message----- From: Günter Kukkukk [mailto:[hidden email]] Sent: Thursday, May 17, 2012 8:03 PM To: Purcell, Scott After connect you do a "ls training/" and get access denied, but then you cd into that subdir and "ls" is working. Do you _always_ see this behavior? When you use "ls" directly after connect, do you get some error? Cheers, Günter -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba |
|
In reply to this post by Shirish Pargaonkar
That line does exist in the specified file.
-----Original Message----- From: Shirish Pargaonkar [mailto:[hidden email]] Sent: Thursday, May 17, 2012 11:09 PM To: Purcell, Scott Perhaps you need an entry like this create dns_resolver * * /usr/sbin/cifs.upcall %k in file /etc/request-key.conf -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba |
|
In reply to this post by Scott_Purcell
On Fri, 18 May 2012 16:32:29 -0500
<[hidden email]> wrote: > Yes, I think that has been the normal behavior since our data was moved to this device. I assumed it was due to filesystem permissions -- that I don't have read access to the root level of the share, but do have r/w access to the /training/ directory below it. > > Using smbclient, get "NT_STATUS_ACCESS_DENIED" when I try: > > ls > ls training > ls /training > ls /training/ > > but if I cd to training, I can list its contents. > > BTW, > > I've tried appending the path in my mount command as well and mount.cifs still doesn't handle it: > > Known problem since the superblock sharing patches went in. cifs.ko needs to establish a dentry and inode for the root of the share and then walks down to the "prefixpath" for the mount. Unfortunately if you don't have access to any point along that path, the mount will fail. There have been a couple of proposals to fix it, but they've had their own problems. What probably needs to happen is to do something like what NFS does in its superblock sharing model. Allow several trees of dentries within a superblock and only connect them later if we happen to stumble across the right entry. See commit 54ceac45159 for an explanation of the model NFS uses for this. -- Jeff Layton <[hidden email]> -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba |
|
Is there any workaround?
Scott Purcell Content Development: Linux, Virtualization, and Cloud Solutions Dell | GSD Learning & Development ________________________________________ From: Jeff Layton [[hidden email]] On Behalf Of Jeff Layton [[hidden email]] Sent: Saturday, May 19, 2012 7:37 AM To: Purcell, Scott Cc: [hidden email]; [hidden email]; [hidden email] Subject: Re: [Samba] Trouble with mount.cifs while smbclient works (Ubuntu 12.04) On Fri, 18 May 2012 16:32:29 -0500 <[hidden email]> wrote: > Yes, I think that has been the normal behavior since our data was moved to this device. I assumed it was due to filesystem permissions -- that I don't have read access to the root level of the share, but do have r/w access to the /training/ directory below it. > > Using smbclient, get "NT_STATUS_ACCESS_DENIED" when I try: > > ls > ls training > ls /training > ls /training/ > > but if I cd to training, I can list its contents. > > BTW, > > I've tried appending the path in my mount command as well and mount.cifs still doesn't handle it: > > Known problem since the superblock sharing patches went in. cifs.ko needs to establish a dentry and inode for the root of the share and then walks down to the "prefixpath" for the mount. Unfortunately if you don't have access to any point along that path, the mount will fail. There have been a couple of proposals to fix it, but they've had their own problems. What probably needs to happen is to do something like what NFS does in its superblock sharing model. Allow several trees of dentries within a superblock and only connect them later if we happen to stumble across the right entry. See commit 54ceac45159 for an explanation of the model NFS uses for this. -- Jeff Layton <[hidden email]> -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba |
|
On Sat, May 19, 2012 at 9:52 AM, <[hidden email]> wrote:
> Is there any workaround? Fixing the permissions on the parent directory so it can be traversed is not possible? > ________________________________________ > From: Jeff Layton [[hidden email]] On Behalf Of Jeff Layton [[hidden email]] > Sent: Saturday, May 19, 2012 7:37 AM > To: Purcell, Scott > Cc: [hidden email]; [hidden email]; [hidden email] > Subject: Re: [Samba] Trouble with mount.cifs while smbclient works (Ubuntu 12.04) > > On Fri, 18 May 2012 16:32:29 -0500 > <[hidden email]> wrote: > >> Yes, I think that has been the normal behavior since our data was moved to this device. I assumed it was due to filesystem permissions -- that I don't have read access to the root level of the share, but do have r/w access to the /training/ directory below it. >> >> Using smbclient, get "NT_STATUS_ACCESS_DENIED" when I try: >> >> ls >> ls training >> ls /training >> ls /training/ >> >> but if I cd to training, I can list its contents. >> >> BTW, >> >> I've tried appending the path in my mount command as well and mount.cifs still doesn't handle it: >> >> > > Known problem since the superblock sharing patches went in. cifs.ko > needs to establish a dentry and inode for the root of the share and > then walks down to the "prefixpath" for the mount. Unfortunately if you > don't have access to any point along that path, the mount will fail. > > There have been a couple of proposals to fix it, but they've had their > own problems. What probably needs to happen is to do something like > what NFS does in its superblock sharing model. Allow several trees of > dentries within a superblock and only connect them later if we happen > to stumble across the right entry. See commit 54ceac45159 for an > explanation of the model NFS uses for this. > > -- > Jeff Layton <[hidden email]> > -- > To unsubscribe from this list: send the line "unsubscribe linux-cifs" in > the body of a message to [hidden email] > More majordomo info at http://vger.kernel.org/majordomo-info.html -- Thanks, Steve -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba |
|
I'll inquire. But we're a very windows-centric shop -- I may be given the old "Working as designed... if it won't work on Linux you'll have to use Windows" routine...
Scott Purcell Content Development: Linux, Virtualization, and Cloud Solutions Dell | GSD Learning & Development ________________________________________ From: Steve French [[hidden email]] Sent: Saturday, May 19, 2012 10:25 AM To: Purcell, Scott Cc: [hidden email]; [hidden email]; [hidden email]; [hidden email] Subject: Re: [Samba] Trouble with mount.cifs while smbclient works (Ubuntu 12.04) On Sat, May 19, 2012 at 9:52 AM, <[hidden email]> wrote: > Is there any workaround? Fixing the permissions on the parent directory so it can be traversed is not possible? > ________________________________________ > From: Jeff Layton [[hidden email]] On Behalf Of Jeff Layton [[hidden email]] > Sent: Saturday, May 19, 2012 7:37 AM > To: Purcell, Scott > Cc: [hidden email]; [hidden email]; [hidden email] > Subject: Re: [Samba] Trouble with mount.cifs while smbclient works (Ubuntu 12.04) > > On Fri, 18 May 2012 16:32:29 -0500 > <[hidden email]> wrote: > >> Yes, I think that has been the normal behavior since our data was moved to this device. I assumed it was due to filesystem permissions -- that I don't have read access to the root level of the share, but do have r/w access to the /training/ directory below it. >> >> Using smbclient, get "NT_STATUS_ACCESS_DENIED" when I try: >> >> ls >> ls training >> ls /training >> ls /training/ >> >> but if I cd to training, I can list its contents. >> >> BTW, >> >> I've tried appending the path in my mount command as well and mount.cifs still doesn't handle it: >> >> > > Known problem since the superblock sharing patches went in. cifs.ko > needs to establish a dentry and inode for the root of the share and > then walks down to the "prefixpath" for the mount. Unfortunately if you > don't have access to any point along that path, the mount will fail. > > There have been a couple of proposals to fix it, but they've had their > own problems. What probably needs to happen is to do something like > what NFS does in its superblock sharing model. Allow several trees of > dentries within a superblock and only connect them later if we happen > to stumble across the right entry. See commit 54ceac45159 for an > explanation of the model NFS uses for this. > > -- > Jeff Layton <[hidden email]> > -- > To unsubscribe from this list: send the line "unsubscribe linux-cifs" in > the body of a message to [hidden email] > More majordomo info at http://vger.kernel.org/majordomo-info.html -- Thanks, Steve -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba |
| Powered by Nabble | Edit this page |
