Hallo:

I use kubuntu 8.04 and smb has been replaced by cifs.

Does any know when cifs is going to support kerberos? Is there any way to use kerberos with cifs?


Thanks

CIFS is a Microsoft term for the latest generation of file sharing technology SMB. In linux, we use SAMBA to talk to CIFS and SMB shares on a Windows network. So when you ask: do you mean is Kerberos used by your kubuntu box to talk to a windows network?
There is some information on the SAMBA website which may help you out, and it talks about SAMBA 4 using Kerberos as part of the authentication process for windows clients. However, I should say to you, CIFS is a filesharing protocol, and Kerberos is an authentication protocol/mechanism. So why would CIFS support Kerberos?

At work, I am running Debian on several workstations, and Ubuntu Server on several servers. All of which are integrated as members of our AD domain. Each system is configured to use kerberos for authentication, and all AD file shares are handled using CIFS.

So to answer your questions in short: It already is, and Yes.

The configuration reference I used to set this up:

https://help.ubuntu.com/community/Ac...ryWinbindHowto

As an added bonus, I have several of our AD shares auto-mounted (using CIFS for the file-sharing protocol, and kerberos for authentication) in the user home directory upon logon through implementation of the pam_mount module. A short google query should point you in the right direction if you are interested in that as well...

In addition, manual-mounting of AD shares is accomplished through the use of mount.cifs (or mount -t cifs) and typically works for the users without the need of re-entering credentials thanks to a working kerberos configuration.

The only snag I've run into thus-far is CUPS-based printing to AD shared printers from these systems using kerberos... But that is another story...

Hope this helps some.

Thanks:

Finally, I've realized it works fine. The problem was that I was asked for a password and I thought it was not working.

I've solved the problem with:
mount.cifs //server/share mountpoint -o sec=krb5,pass=

Thanks

Sorry:

It really doesn't work.

The previous command:
mount.cifs //server/share mountpoint -o sec=krb5,pass=

isn't working as I thought.

That command works because I already had that share mounted in another mount point with:
mount.cifs //server/share another_mountpoint -o username=my_user,workgroup=dom,password=my_pass

But it that share is not mounted, then I receive this error:
mount.cifs "//server/my_user" /mnt/users/test --verbose -o sec=krb5,pass=
parsing options: sec=krb5,pass=

mount.cifs kernel mount options unc=//server\my_user,ip=10.11.23.123,user=my_user,,,,,,domain=dom,ver=1,sec=krb5,pass=,uid=1643642063,gid= 1643673393
mount error 2 = No such file or directory
Refer to the mount.cifs(8) manual page (e.g.man mount.cifs)

As I say, this command works find if the share is already mounted in another directory (or if I replace the sec=krb5,pass= by username=my_user,workgroup=dom,password=my_pass).

Any suggestion?

Thanks