Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 113184 - Samba 3.0.14a-r2 screws up mounting 2003 server shares (bug#54640 returned)
Summary: Samba 3.0.14a-r2 screws up mounting 2003 server shares (bug#54640 returned)
Status: RESOLVED WONTFIX
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: x86 Linux
: High blocker (vote)
Assignee: Gentoo's SAMBA Team
URL:
Whiteboard:
Keywords:
: 54640 (view as bug list)
Depends on:
Blocks:
 
Reported: 2005-11-21 10:24 UTC by Den_M
Modified: 2005-11-27 03:04 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Den_M 2005-11-21 10:24:05 UTC
samba-3.0.14a-r2, trying to mount Win2k3 share, error:

cli_negprot: SMB signing is mandatory and we have disabled it.
29844: protocol negotiation failed
SMB connection failed

I'm trying to play with (as were adviced in bug #54640): 
client singing
client use spnego

but results are the same.
smbclient - all's right, I can do everything with share, but the smbmount fails
to mount.

Reproducible: Always
Steps to Reproduce:
1. smbmount //win2k3server/share /mnt/share -o username=user,password=pass

Actual Results:  
error reported:

cli_negprot: SMB signing is mandatory and we have disabled it.
29844: protocol negotiation failed
SMB connection failed


Expected Results:  
successful share

win2000 server share mounting with smbmount is all right,

if I try to mount win2003 server share with smbclient - it's all right, but
smbmount with win2003 server share fails.
Comment 1 Den_M 2005-11-21 10:26:46 UTC
Gentoo Base System version 1.6.13
Portage 2.0.51.22-r3 (default-linux/x86/no-nptl/2.4, gcc-3.3.6, glibc-2.3.5-r2,
2.4.30-grsec-2.1.5 i686)
=================================================================
System uname: 2.4.30-grsec-2.1.5 i686 Pentium III (Coppermine)
dev-lang/python:     2.3.5-r2, 2.4.2
sys-apps/sandbox:    1.2.12
sys-devel/autoconf:  2.13, 2.59-r6
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r1
sys-devel/binutils:  2.15.92.0.2-r10
sys-devel/libtool:   1.4.3-r3, 1.5.20
virtual/os-headers:  2.4.22-r1
ACCEPT_KEYWORDS=""
AUTOCLEAN="yes"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-O3 -march=pentium3 -fomit-frame-pointer"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/X11R6/lib/X11/xkb /var/bind"
CONFIG_PROTECT_MASK="/etc/terminfo /usr/X11R6/bin/startx /etc/env.d"
CXXFLAGS="-O3 -march=pentium3 -fomit-frame-pointer"
DISTDIR="/usr/portage/distfiles"
FEATURES="distlocks sandbox"
GENTOO_MIRRORS="http://distfiles.gentoo.org
http://distro.ibiblio.org/pub/Linux/distributions/gentoo"
MAKEOPTS="-j2"
PKGDIR="/usr/portage/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
SYNC="rsync://rsync.gentoo.org/gentoo-portage"
USE="mmx pam sse ssl tcpd"
Unset:  ASFLAGS, CTARGET, LANG, LC_ALL, LDFLAGS, LINGUAS, PORTDIR_OVERLAY

*** This bug has been marked as a duplicate of 54640 ***
Comment 2 Den_M 2005-11-21 10:28:20 UTC
bug #54640 returned on samba 3.0.14a-r2
Comment 3 Jakub Moc (RETIRED) gentoo-dev 2005-11-21 10:32:25 UTC

*** This bug has been marked as a duplicate of 54640 ***
Comment 4 Christian Andreetta (RETIRED) gentoo-dev 2005-11-21 23:30:31 UTC
*** Bug 54640 has been marked as a duplicate of this bug. ***
Comment 5 Christian Andreetta (RETIRED) gentoo-dev 2005-11-21 23:31:48 UTC
continuing here: bug #54640 had a slightly different reason for this bug
Comment 6 Christian Andreetta (RETIRED) gentoo-dev 2005-11-21 23:54:06 UTC
Info collection:
your client: linux kernel is 2.4.x, with grsec
your server: win2k3 server (probably PDC, possibly ADS)
your protocol: smbfs

The error seems to be "not a bug, but a feature" (Bill's Statement of Rights (TM))
server side: you can play with policy editor and registry keys, but I'm not very
confident on this, provided its security implications [3] and these considerations:
client side: kernel smbfs API is a bit outdated (last year improvements were
made on 2.6.x: 2.4 VFS layer doesn't support many features by design). This is
anyway not the killer answer, since:
protocol involved: this is a known flag of smbfs vs cifs debate. CIFS is the
filesystem of choice where speaking with win2k3 ([1] and [2]) and XP sp2 or
better. smbfs is simply not designed to support these type of authentication:
your vendor of choice (Ms, that is) changed in various occasions the protocol
API of its network services, and in some cases the fallback behaviours are
discarded.

Long thing short: lower your server security settings, or better CIFS and
updated VFS api (maybe your kernel version suffices)

'man mount; mount -t cifs //srv/share /mnt/point -o ...'

To me, this bug marks as WONTFIX and innocent, unless the accuse provides more
proofs :-)


[1] http://lists.samba.org/archive/samba/2003-December/076388.html (Andrew
Bartlett is one of the core same devs)
[2] http://lists.samba.org/archive/samba/2005-March/102460.html
[3] http://wiki.colinux.org/cgi-bin/AccessingWindowsDrivesWithSamba
Comment 7 Jakub Moc (RETIRED) gentoo-dev 2005-11-22 02:03:36 UTC
This works for me w/ CIFS (and 2.6 kernel); getting it work with smbfs
*requires* tweaking of security settings on server side (not really worth the
hassle, honestly). I'd say - WONTFIX or UPSTREAM.
Comment 8 Christian Andreetta (RETIRED) gentoo-dev 2005-11-27 03:04:33 UTC
no news, so closing