I use Kerberos to log in to my Fedora 6 machine, which is on a network with a Windows server. I'd like to mount some shared folders from the server automatically when I log in, but the shared folder is password protected with the same Kerberos username and password.

In Windows, I can log in, navigate to the server, browse it, map it as a network drive, etc. Without putting in my username and password again. I'd like to be able to do this in Fedora as well.

I can mount it manually, but I have to give it my username and password, the same ones as I use when I log in.

I'm sure I can do this in fstab, but I'd rather not put my username and password in a credentials file because I am required to change my password frequently and I don't want to hunt down every instance of it on the machine.

Is there some way to tell it to use my Kerberos username and password to give me access to the network share?

Thanks.

I am not really into that microsoft thing, but I think there is a flag for samba..

Try reading through:
http://www.linuxquestions.org/questi...59#post1115859

I did some poking around the samba website and found nothing of use - you might looking into the man pages or other docs that should be installed. Also, I recall having some kerberos trouble (microsoft had to use some newfangled enctype), and bumping to a newer version of kerberos fixed it up for me.

The only thing of interest on that thread is the -k flag for smbclient.

The server throws back an error

ads_krb5_mk_req: krb5_get_credentials failed for SERVER$@DOMAIN(Cannot find KDC for requested realm)
spnego_gen_negTokenTarg failed: Cannot find KDC for requested realm
session setup failed: SUCCESS - 0

Which seems like it's looking for the kerberos server on the same domain as the server I'm trying to connect to, which is not the case.

Even if it did work, that doesn't really change anything, but thanks for the help anyway!

The only way I've every heard of doing what you describe is either modifying fstab or using autofs, but I believe they both require credentials files.

I think that it shows why nothing else you try will work, since some portion of the kerberos auth is failing. You can use the normal client to debug that part, and then possibly add the filesystem mounting command into one of your init scripts. That way you will pick up your ticket(s), and then samba can use them for the fileserver.

How much information can you get for looking at what the microsoft client does vs. what samba does?