* Required key not available?
@ 2013-11-25 22:41 pisymbol .
[not found] ` <CAPpy_fE=UgnVyUYA7spC7_rdPOvqeJYirKZk=CqqFcoe4e033w-JsoAwUIsXosN+BqQ9rBEUg@public.gmane.org>
0 siblings, 1 reply; 3+ messages in thread
From: pisymbol . @ 2013-11-25 22:41 UTC (permalink / raw)
To: linux-cifs
Hoping this is the right list after Googling for quite a while.
I am trying to mount a CIFS share on a Windows 7 SP1 using Kerberos
but no matter what I try, it fails with this:
# mount.cifs -o sec=krb5 //tilt.quest.com/Alex_Documents /mnt
mount error(126): Required key not available
Refer to the mount.cifs(8) manual page (e.g. man mount.cifs)
# uname -a
Linux agalloch 2.6.34.9-69.ie5.fc13.x86_64 #1 SMP Sun Aug 14 22:10:19
EDT 2011 x86_64 x86_64 x86_64 GNU/Linux
# cat /etc/redhat-release
Fedora release 13 (Goddard)
# mount.cifs -V
mount.cifs version: 4.7
# klist -e
Ticket cache: FILE:/tmp/krb5cc_0
Default principal: Administrator-LHiAKXGUGmt8zQARNC3f2A@public.gmane.org
Valid starting Expires Service principal
11/25/13 17:21:23 11/26/13 03:21:25 krbtgt/QUEST.COM-LHiAKXGUGmt8zQARNC3f2A@public.gmane.org
renew until 12/02/13 17:21:23, Etype (skey, tkt): ArcFour with
HMAC/md5, ArcFour with HMAC/md5
Some more debugging output:
fs/cifs/sess.c: sess setup type 5
fs/cifs/cifs_spnego.c: key description =
ver=0x2;host=tilt.quest.com;ip4=192.168.17.55;sec=krb5;uid=0x0;user=root;pid=0x4683
fs/cifs/sess.c: ssetup freeing small buf ffff88035ff8a700
CIFS VFS: Send error in SessSetup = -126
fs/cifs/connect.c: CIFS VFS: leaving cifs_mount (xid = 14) rc = -126
CIFS VFS: cifs_mount failed w/return code = -126
...
Slow work thread pool: Ready
CIFS VFS: Send error in SessSetup = -126
CIFS VFS: cifs_mount failed w/return code = -126
CIFS VFS: Send error in SessSetup = -126
CIFS VFS: cifs_mount failed w/return code = -126
CIFS VFS: Send error in SessSetup = -126
CIFS VFS: cifs_mount failed w/return code = -126
CIFS VFS: Send error in SessSetup = -126
CIFS VFS: cifs_mount failed w/return code = -126
CIFS VFS: Send error in SessSetup = -126
CIFS VFS: cifs_mount failed w/return code = -126
CIFS VFS: Send error in SessSetup = -126
CIFS VFS: cifs_mount failed w/return code = -126
CIFS VFS: Send error in SessSetup = -126
CIFS VFS: cifs_mount failed w/return code = -126
CIFS VFS: Send error in SessSetup = -126
CIFS VFS: cifs_mount failed w/return code = -126
CIFS VFS: signing required but server lacks support
CIFS VFS: cifs_mount failed w/return code = -95
CIFS VFS: Send error in SessSetup = -126
CIFS VFS: cifs_mount failed w/return code = -126
# cat /etc/request-keys.conf
...
create cifs.spnetgo * * /usr/sbin/cifs.upcall %k
create dns_resolver * * /usr/sbin/cifs.upcall %k
I can mount using Samba, I can mount using NTLMv1 and v2. But I can
not mount using Kerberos. I can use kvno to get a host ticket with
ease.
Folks, is there anything I'm missing here? Box is joined to AD and can
query all day long.
Thanks!
-aps
^ permalink raw reply [flat|nested] 3+ messages in thread[parent not found: <CAPpy_fE=UgnVyUYA7spC7_rdPOvqeJYirKZk=CqqFcoe4e033w-JsoAwUIsXosN+BqQ9rBEUg@public.gmane.org>]
* Re: Required key not available? [not found] ` <CAPpy_fE=UgnVyUYA7spC7_rdPOvqeJYirKZk=CqqFcoe4e033w-JsoAwUIsXosN+BqQ9rBEUg@public.gmane.org> @ 2013-11-26 2:52 ` Jeff Layton [not found] ` <20131125215241.49faa310-4QP7MXygkU+dMjc06nkz3ljfA9RmPOcC@public.gmane.org> 0 siblings, 1 reply; 3+ messages in thread From: Jeff Layton @ 2013-11-26 2:52 UTC (permalink / raw) To: pisymbol .; +Cc: linux-cifs On Mon, 25 Nov 2013 17:41:43 -0500 "pisymbol ." <pisymbol-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org> wrote: > Hoping this is the right list after Googling for quite a while. > > I am trying to mount a CIFS share on a Windows 7 SP1 using Kerberos > but no matter what I try, it fails with this: > > # mount.cifs -o sec=krb5 //tilt.quest.com/Alex_Documents /mnt > mount error(126): Required key not available > Refer to the mount.cifs(8) manual page (e.g. man mount.cifs) > > # uname -a > Linux agalloch 2.6.34.9-69.ie5.fc13.x86_64 #1 SMP Sun Aug 14 22:10:19 > EDT 2011 x86_64 x86_64 x86_64 GNU/Linux > > # cat /etc/redhat-release > Fedora release 13 (Goddard) > > # mount.cifs -V > mount.cifs version: 4.7 > > # klist -e > Ticket cache: FILE:/tmp/krb5cc_0 > Default principal: Administrator-LHiAKXGUGmt8zQARNC3f2A@public.gmane.org > > Valid starting Expires Service principal > 11/25/13 17:21:23 11/26/13 03:21:25 krbtgt/QUEST.COM-LHiAKXGUGmt8zQARNC3f2A@public.gmane.org > renew until 12/02/13 17:21:23, Etype (skey, tkt): ArcFour with > HMAC/md5, ArcFour with HMAC/md5 > > Some more debugging output: > > fs/cifs/sess.c: sess setup type 5 > fs/cifs/cifs_spnego.c: key description = > ver=0x2;host=tilt.quest.com;ip4=192.168.17.55;sec=krb5;uid=0x0;user=root;pid=0x4683 > fs/cifs/sess.c: ssetup freeing small buf ffff88035ff8a700 > CIFS VFS: Send error in SessSetup = -126 > fs/cifs/connect.c: CIFS VFS: leaving cifs_mount (xid = 14) rc = -126 > CIFS VFS: cifs_mount failed w/return code = -126 > ... > Slow work thread pool: Ready > CIFS VFS: Send error in SessSetup = -126 > CIFS VFS: cifs_mount failed w/return code = -126 > CIFS VFS: Send error in SessSetup = -126 > CIFS VFS: cifs_mount failed w/return code = -126 > CIFS VFS: Send error in SessSetup = -126 > CIFS VFS: cifs_mount failed w/return code = -126 > CIFS VFS: Send error in SessSetup = -126 > CIFS VFS: cifs_mount failed w/return code = -126 > CIFS VFS: Send error in SessSetup = -126 > CIFS VFS: cifs_mount failed w/return code = -126 > CIFS VFS: Send error in SessSetup = -126 > CIFS VFS: cifs_mount failed w/return code = -126 > CIFS VFS: Send error in SessSetup = -126 > CIFS VFS: cifs_mount failed w/return code = -126 > CIFS VFS: Send error in SessSetup = -126 > CIFS VFS: cifs_mount failed w/return code = -126 > CIFS VFS: signing required but server lacks support > CIFS VFS: cifs_mount failed w/return code = -95 > CIFS VFS: Send error in SessSetup = -126 > CIFS VFS: cifs_mount failed w/return code = -126 > > # cat /etc/request-keys.conf > ... > create cifs.spnetgo * * /usr/sbin/cifs.upcall %k Check your spelling. Should be "cifs.spnego". > create dns_resolver * * /usr/sbin/cifs.upcall %k > > I can mount using Samba, I can mount using NTLMv1 and v2. But I can > not mount using Kerberos. I can use kvno to get a host ticket with > ease. > > Folks, is there anything I'm missing here? Box is joined to AD and can > query all day long. > > Thanks! > > -aps > -- > To unsubscribe from this list: send the line "unsubscribe linux-cifs" in > the body of a message to majordomo-u79uwXL29TY76Z2rM5mHXA@public.gmane.org > More majordomo info at http://vger.kernel.org/majordomo-info.html -- Jeff Layton <jlayton-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org> ^ permalink raw reply [flat|nested] 3+ messages in thread
[parent not found: <20131125215241.49faa310-4QP7MXygkU+dMjc06nkz3ljfA9RmPOcC@public.gmane.org>]
* Re: Required key not available? [not found] ` <20131125215241.49faa310-4QP7MXygkU+dMjc06nkz3ljfA9RmPOcC@public.gmane.org> @ 2013-11-26 12:16 ` pisymbol . 0 siblings, 0 replies; 3+ messages in thread From: pisymbol . @ 2013-11-26 12:16 UTC (permalink / raw) To: Jeff Layton; +Cc: linux-cifs On Mon, Nov 25, 2013 at 9:52 PM, Jeff Layton <jlayton-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org> wrote: > On Mon, 25 Nov 2013 17:41:43 -0500 > "pisymbol ." <pisymbol-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org> wrote: > >> Hoping this is the right list after Googling for quite a while. >> >> I am trying to mount a CIFS share on a Windows 7 SP1 using Kerberos >> but no matter what I try, it fails with this: >> >> # mount.cifs -o sec=krb5 //tilt.quest.com/Alex_Documents /mnt >> mount error(126): Required key not available >> Refer to the mount.cifs(8) manual page (e.g. man mount.cifs) >> >> # uname -a >> Linux agalloch 2.6.34.9-69.ie5.fc13.x86_64 #1 SMP Sun Aug 14 22:10:19 >> EDT 2011 x86_64 x86_64 x86_64 GNU/Linux >> >> # cat /etc/redhat-release >> Fedora release 13 (Goddard) >> >> # mount.cifs -V >> mount.cifs version: 4.7 >> >> # klist -e >> Ticket cache: FILE:/tmp/krb5cc_0 >> Default principal: Administrator-LHiAKXGUGmt8zQARNC3f2A@public.gmane.org >> >> Valid starting Expires Service principal >> 11/25/13 17:21:23 11/26/13 03:21:25 krbtgt/QUEST.COM-LHiAKXGUGmt8zQARNC3f2A@public.gmane.org >> renew until 12/02/13 17:21:23, Etype (skey, tkt): ArcFour with >> HMAC/md5, ArcFour with HMAC/md5 >> >> Some more debugging output: >> >> fs/cifs/sess.c: sess setup type 5 >> fs/cifs/cifs_spnego.c: key description = >> ver=0x2;host=tilt.quest.com;ip4=192.168.17.55;sec=krb5;uid=0x0;user=root;pid=0x4683 >> fs/cifs/sess.c: ssetup freeing small buf ffff88035ff8a700 >> CIFS VFS: Send error in SessSetup = -126 >> fs/cifs/connect.c: CIFS VFS: leaving cifs_mount (xid = 14) rc = -126 >> CIFS VFS: cifs_mount failed w/return code = -126 >> ... >> Slow work thread pool: Ready >> CIFS VFS: Send error in SessSetup = -126 >> CIFS VFS: cifs_mount failed w/return code = -126 >> CIFS VFS: Send error in SessSetup = -126 >> CIFS VFS: cifs_mount failed w/return code = -126 >> CIFS VFS: Send error in SessSetup = -126 >> CIFS VFS: cifs_mount failed w/return code = -126 >> CIFS VFS: Send error in SessSetup = -126 >> CIFS VFS: cifs_mount failed w/return code = -126 >> CIFS VFS: Send error in SessSetup = -126 >> CIFS VFS: cifs_mount failed w/return code = -126 >> CIFS VFS: Send error in SessSetup = -126 >> CIFS VFS: cifs_mount failed w/return code = -126 >> CIFS VFS: Send error in SessSetup = -126 >> CIFS VFS: cifs_mount failed w/return code = -126 >> CIFS VFS: Send error in SessSetup = -126 >> CIFS VFS: cifs_mount failed w/return code = -126 >> CIFS VFS: signing required but server lacks support >> CIFS VFS: cifs_mount failed w/return code = -95 >> CIFS VFS: Send error in SessSetup = -126 >> CIFS VFS: cifs_mount failed w/return code = -126 >> >> # cat /etc/request-keys.conf >> ... >> create cifs.spnetgo * * /usr/sbin/cifs.upcall %k > > Check your spelling. Should be "cifs.spnego". > >> create dns_resolver * * /usr/sbin/cifs.upcall %k >> >> I can mount using Samba, I can mount using NTLMv1 and v2. But I can >> not mount using Kerberos. I can use kvno to get a host ticket with >> ease. >> >> Folks, is there anything I'm missing here? Box is joined to AD and can >> query all day long. >> I don't know HOW that happened. But thank you Jeff, now it works. Boy do I feel dumb. -aps ^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2013-11-26 12:16 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2013-11-25 22:41 Required key not available? pisymbol .
[not found] ` <CAPpy_fE=UgnVyUYA7spC7_rdPOvqeJYirKZk=CqqFcoe4e033w-JsoAwUIsXosN+BqQ9rBEUg@public.gmane.org>
2013-11-26 2:52 ` Jeff Layton
[not found] ` <20131125215241.49faa310-4QP7MXygkU+dMjc06nkz3ljfA9RmPOcC@public.gmane.org>
2013-11-26 12:16 ` pisymbol .
This is a public inbox, see mirroring instructions for how to clone and mirror all data and code used for this inbox