FS#40308 - [cifs-utils] Mounting with Kerberos needs an entry in request-key

Attached to Project: Arch Linux
Opened by Johannes Löthberg (demize) - Sunday, 11 May 2014, 16:19 GMT
Last edited by Tobias Powalowski (tpowa) - Wednesday, 04 June 2014, 12:02 GMT
Task Type Bug Report
Category Packages: Extra
Status Closed
Assigned To Tobias Powalowski (tpowa)
Architecture All
Severity Medium
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

To mount CIFS mounts with Kerberos authentication you need to add a line to request-key for mount.cifs to be able to find the Kerberos ticket needed, otherwise it will just complain about the required keys not being available.

The easiest fix would be to just add the following file to a file named cifs.spnego.conf in /etc/request-key.d:

create cifs.spnego * * /usr/sbin/cifs.upcall %k


Steps to reproduce:

% sudo mount.cifs //cylon.kyriasis.com/kyrias /mnt -o sec=krb5,uid=1000 --verbose
mount.cifs kernel mount options: ip=192.168.0.240,unc=\\cylon.kyriasis.com\kyrias,sec=krb5,uid=1000,user=root,pass=********
mount error(126): Required key not available
This task depends upon

Closed by  Tobias Powalowski (tpowa)
Wednesday, 04 June 2014, 12:02 GMT
Reason for closing:  Fixed
Additional comments about closing:  6.3-1

Loading...