Trouble mounting SAMBA share with krb5

Issues related to applications and software problems
Post Reply
Neeseius
Posts: 21
Joined: 2015/09/10 05:29:54

Trouble mounting SAMBA share with krb5

Post by Neeseius » 2016/12/23 00:37:48

I am not able to figure this one out. My computer in integrated into AD with sssd and realmd and everything works great however I would like to auto mount a shared drive on the network with my cached kerberos credentials. When I try to mount the shared directory I get a cifs.upcall error "Required key not available"
user$ klist
Ticket cache: KEYRING:persistent:5000:krb_ccache_11Tk55U
Default principal: user@EXAMPLE.LOCAL

Valid starting Expires Service principal
12/22/2016 17:19:50 12/23/2016 03:19:50 krbtgt/EXAMPLE.LOCAL@EXAMPLE.LOCAL
renew until 12/29/2016 17:19:47
user$ grep shared /etc/fstab
//example.local/shared /home/user/smb cifs username=user@EXAMPLE.LOCAL,sec=krb5,noauto,users,cruid=user 0 0
user$ mount ~/smb/
mount error(126): Required key not available
Refer to the mount.cifs(8) manual page (e.g. man mount.cifs)
logs from journal
Dec 22 17:31:55 USER-PC.example.local cifs.upcall[29166]: key description: cifs.spnego;0;0;39010000;ver=0x2;host=example.local;ip4=192.168.10.22;sec=krb5;uid=0x1e0a78f1;creduid=0x1e0a78f1;user=user@EXAMPLE.LOCAL;pid=0x71ea
Dec 22 17:31:55 USER-PC.example.local cifs.upcall[29166]: ver=2
Dec 22 17:31:55 USER-PC.example.local cifs.upcall[29166]: host=example.local
Dec 22 17:31:55 USER-PC.example.local cifs.upcall[29166]: ip=192.168.10.22
Dec 22 17:31:55 USER-PC.example.local cifs.upcall[29166]: sec=1
Dec 22 17:31:55 USER-PC.example.local cifs.upcall[29166]: uid=5000
Dec 22 17:31:55 USER-PC.example.local cifs.upcall[29166]: creduid=5000
Dec 22 17:31:55 USER-PC.example.local cifs.upcall[29166]: user=user@EXAMPLE.LOCAL
Dec 22 17:31:55 USER-PC.example.local cifs.upcall[29166]: pid=29162
Dec 22 17:31:55 USER-PC.example.local cifs.upcall[29166]: handle_krb5_mech: getting service ticket for example.local
Dec 22 17:31:55 USER-PC.example.local cifs.upcall[29166]: cifs_krb5_get_req: unable to get credentials for example.local
Dec 22 17:31:55 USER-PC.example.local cifs.upcall[29166]: handle_krb5_mech: failed to obtain service ticket (-1765328377)
Dec 22 17:31:55 USER-PC.example.local kernel: CIFS VFS: Send error in SessSetup = -126
Dec 22 17:31:55 USER-PC.example.local kernel: CIFS VFS: cifs_mount failed w/return code = -126
Dec 22 17:31:55 USER-PC.example.local cifs.upcall[29166]: Unable to obtain service ticket
Dec 22 17:31:55 USER-PC.example.local cifs.upcall[29166]: Exit status -1765328377

Post Reply