LinuxQuestions.org
Did you know LQ has a Linux Hardware Compatibility List?
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices

Reply
 
Search this Thread
Old 04-07-2007, 03:14 PM   #1
MALDATA
Member
 
Registered: Mar 2005
Posts: 103

Rep: Reputation: 17
Kerberos and CIFS network share


I use Kerberos to log in to my Fedora 6 machine, which is on a network with a Windows server. I'd like to mount some shared folders from the server automatically when I log in, but the shared folder is password protected with the same Kerberos username and password.

In Windows, I can log in, navigate to the server, browse it, map it as a network drive, etc. Without putting in my username and password again. I'd like to be able to do this in Fedora as well.

I can mount it manually, but I have to give it my username and password, the same ones as I use when I log in.

I'm sure I can do this in fstab, but I'd rather not put my username and password in a credentials file because I am required to change my password frequently and I don't want to hunt down every instance of it on the machine.

Is there some way to tell it to use my Kerberos username and password to give me access to the network share?

Thanks.
 
Old 04-09-2007, 04:44 AM   #2
nmh+linuxquestions.o
Member
 
Registered: Feb 2007
Posts: 135

Rep: Reputation: 15
I am not really into that microsoft thing, but I think there is a flag for samba..

Try reading through:
http://www.linuxquestions.org/questi...59#post1115859

I did some poking around the samba website and found nothing of use - you might looking into the man pages or other docs that should be installed. Also, I recall having some kerberos trouble (microsoft had to use some newfangled enctype), and bumping to a newer version of kerberos fixed it up for me.
 
Old 04-10-2007, 02:31 PM   #3
MALDATA
Member
 
Registered: Mar 2005
Posts: 103

Original Poster
Rep: Reputation: 17
The only thing of interest on that thread is the -k flag for smbclient.

The server throws back an error

ads_krb5_mk_req: krb5_get_credentials failed for SERVER$@DOMAIN(Cannot find KDC for requested realm)
spnego_gen_negTokenTarg failed: Cannot find KDC for requested realm
session setup failed: SUCCESS - 0

Which seems like it's looking for the kerberos server on the same domain as the server I'm trying to connect to, which is not the case.

Even if it did work, that doesn't really change anything, but thanks for the help anyway!

Last edited by MALDATA; 04-10-2007 at 02:38 PM.
 
Old 04-10-2007, 03:42 PM   #4
zytsef
Member
 
Registered: Apr 2006
Location: Vancouver, Canada
Distribution: Slackware, Ubuntu
Posts: 168

Rep: Reputation: 30
The only way I've every heard of doing what you describe is either modifying fstab or using autofs, but I believe they both require credentials files.
 
Old 04-10-2007, 04:43 PM   #5
nmh+linuxquestions.o
Member
 
Registered: Feb 2007
Posts: 135

Rep: Reputation: 15
Quote:
Originally Posted by MALDATA
The only thing of interest on that thread is the -k flag for smbclient.

The server throws back an error

ads_krb5_mk_req: krb5_get_credentials failed for SERVER$@DOMAIN(Cannot find KDC for requested realm)
spnego_gen_negTokenTarg failed: Cannot find KDC for requested realm
session setup failed: SUCCESS - 0

Which seems like it's looking for the kerberos server on the same domain as the server I'm trying to connect to, which is not the case.

Even if it did work, that doesn't really change anything, but thanks for the help anyway!
I think that it shows why nothing else you try will work, since some portion of the kerberos auth is failing. You can use the normal client to debug that part, and then possibly add the filesystem mounting command into one of your init scripts. That way you will pick up your ticket(s), and then samba can use them for the fileserver.

How much information can you get for looking at what the microsoft client does vs. what samba does?
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Mount cifs share problems BarryLinux Linux - Newbie 11 06-04-2012 12:42 AM
Share Path Depth Restriction using CIFS? tluc1225 Linux - Networking 0 08-31-2006 09:23 PM
no writing permission to mounted cifs share on windows XP ntfs folder zpcanada Linux - General 1 08-30-2006 11:30 PM
Access CIFS Share from Linux johnnybhoy67 Linux - Networking 0 11-30-2005 09:30 AM
CIFS samba share ronanio Linux - Software 1 11-06-2005 11:22 AM


All times are GMT -5. The time now is 04:39 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration