attempting to use sec=krb5 causes mount.cifs to fail with error "invalid argument"

Bug #1592996 reported by Matthew Pulliam
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
cifs-utils (Ubuntu)
New
Undecided
Unassigned

Bug Description

this bug is occurring currently with the following:
Description: Ubuntu 14.04.4 LTS
Release: 14.04

cifs-utils:
  Installed: 2:6.0-1ubuntu2
  Candidate: 2:6.0-1ubuntu2
  Version table:
 *** 2:6.0-1ubuntu2 0
        500 http://us.archive.ubuntu.com/ubuntu/ trusty/main amd64 Packages
        100 /var/lib/dpkg/status

Process to test:

install ubuntu 14.04.4 run updates,
install cifs-utils,
install and configure Kerberos (in this case via sssd configured to connect to active directory and adcli to join the domain and generate a system keytab file)

kinit -k
mount -t cifs -o sec=krb5 //smbserver.fqdn/sharename /path/to/mount
expected behaviour is either a successful mount or complaints about the keyfile or credentials if klist is not successful

what we get instead is:
mount error(22): Invalid argument
Refer to the mount.cifs(8) manual page (e.g. man mount.cifs)

as a test, the same command swapping out sec=krb5 to sec=nltm results in:
Password for USER@//smbserver.fqdn/sharename:

which if you enter valid credentials works.... however, the intended use is krb5 to use autofs to automount with sec=krb5,rw,multiuser to allow root to mount and users to write with their own kerberos credentials. this used to work in 12.04 with some effort (there were problems with what uid owned the kerberos cache files) now it just fails without even trying. Even though the man page still lists krb5 as a valid option.

additionally, using sec=krb5i results in:
mount error(524): Unknown error 524
Refer to the mount.cifs(8) manual page (e.g. man mount.cifs)

ProblemType: Bug
DistroRelease: Ubuntu 14.04
Package: cifs-utils 2:6.0-1ubuntu2
ProcVersionSignature: Ubuntu 4.2.0-38.45~14.04.1-generic 4.2.8-ckt10
Uname: Linux 4.2.0-38-generic x86_64
ApportVersion: 2.14.1-0ubuntu3.21
Architecture: amd64
Date: Wed Jun 15 16:24:19 2016
InstallationDate: Installed on 2016-06-14 (1 days ago)
InstallationMedia: Ubuntu 14.04.4 LTS "Trusty Tahr" - Release amd64 (20160217.1)
ProcEnviron:
 LANGUAGE=en_US
 TERM=xterm
 PATH=(custom, no user)
 LANG=en_US.UTF-8
 SHELL=/bin/bash
SourcePackage: cifs-utils
UpgradeStatus: No upgrade log present (probably fresh install)

Revision history for this message
Matthew Pulliam (mpulliam) wrote :
summary: attempting to use sec=krb5 causes mount.cifs to fail with error "invalid
- argument" even though it is still listed in the man page as an option
+ argument"
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.