Cannot connect to Solaris 11.4 server using SMBv3

Issues related to configuring your network
Post Reply
Achelon
Posts: 4
Joined: 2016/10/28 13:12:21

Cannot connect to Solaris 11.4 server using SMBv3

Post by Achelon » 2018/09/02 12:39:00

Hi,

Solaris 11.4 has recently been released with support for SMBv3 and SMB encryption and I have tried testing connectivity between a CentOS 7 VM (with latest update: 3.10.0-862.11.6.el7.x86_64) and a Solaris 11.4 fileserver.

Connecting using SMBv2 works fine, for instance:

Code: Select all

//myserver/myshare /mnt/myshare cifs nounix,noserverino,ro,_netdev,nosuid,perm,nodev,noexec,cache=strict,sec=ntlmssp,vers=2.1,context="system_u:object_r:my_content_t:s0",credentials=/root/creds_smb_library_core,port=445,forceuid,forcegid,file_mode=0444,dir_mode=0555,uid=5000,gid=6000 0 0
Unfortunately, connecting using SMBv3 (e.g. setting vers=3.0 or vers=3.02) causes errors. I have experimented with adding the "seal" parameter or by additionally setting sec=ntlmsspi or sec=ntlmv2i but this doesn't work either). The errors I see are:

Code: Select all

Sep  2 05:17:34 starscream kernel: CIFS VFS: cifs_mount failed w/return code = -11
Sep  2 05:17:34 starscream kernel: CIFS VFS: cifs_mount failed w/return code = -11
Sep  2 05:17:35 starscream kernel: CIFS VFS: cifs_mount failed w/return code = -11
Sep  2 05:17:35 starscream kernel: CIFS VFS: cifs_mount failed w/return code = -11
The Solaris servers SMB server is configured with the following settings:

Code: Select all

server_lmauth_level=5
oplock_enable=true
server_signing_enabled=true
server_signing_required=false
server_encrypt_data=true
server_reject_unencrypt=false
server_minprotocol=2
server_maxprotocol=3
restrict_anonymous=true
I'd appreciate some advice in how to debug this problem. I believe the Solaris 11.4 fileserver is working correctly because I can connect to it from a MacBook and have verified in WireShark that it is negotiating SMBv3 and encryption.

Regards,
Achelon

Post Reply