Welcome to OStack Knowledge Sharing Community for programmer and developer-Open, Learning and Share
Welcome To Ask or Share your Answers For Others

Categories

0 votes
682 views
in Technique[技术] by (71.8m points)

mount - Mounting cifs share using kerberos fails with 'Operation not supported'

I'm trying to mount a network share using cifs and kerberos on a CentOS 8 distro. I am able to mount the share correctly using my explicit credentials, but passing the option of sec=krb5 doesn't work. The response from the operation says: 'mount error(95): Operation not supported.' I'm also not able to see any info about the failed operation when calling dmesg.

Other SO answers have said to add 'vers' to the options string, but that doesn't seem to work either. If I add vers=1.0, I get the error 'Function not implemented', which I assume is because SMB 1.0 is disabled. Any other value for vers give the 'operation not supported error.'

Here is the command I'm using: mount -t cifs //server/folder /mnt/prog -o sec=krb5,vers=3.02

Not sure if it's relevant, but when I enable verbose messaging in the mount, it shows it has added user=root,pass=**** to the options.

I know the kerberos ticket is fine as I'm able to connect and list the shares using smbclient -k -L //server. When I change the debug level on smbclient to something higher, I can see the dialect negotiated with the server to be [SMB3_02], so I assume my SMB dialect is 3.02, which is what I used in the vers option for the mount.

FWIW, I get the same error within a privileged docker container and WSL2 on Windows using Ubuntu. I also get the same error when trying it through fstab.

My first question is how to get more explicit errors (or any) to show in dmesg so I can troubleshoot more effectively.

The other question is more generally how to fix the mount issue I mentioned above. Any help is appreciated. Thanks!


与恶龙缠斗过久,自身亦成为恶龙;凝视深渊过久,深渊将回以凝视…
Welcome To Ask or Share your Answers For Others

1 Answer

0 votes
by (71.8m points)
等待大神答复

与恶龙缠斗过久,自身亦成为恶龙;凝视深渊过久,深渊将回以凝视…
Welcome to OStack Knowledge Sharing Community for programmer and developer-Open, Learning and Share
Click Here to Ask a Question

...