Home Forums OS X Server and Client Discussion Active Directory mount_smbfs error 10.5.2

Viewing 5 posts - 1 through 5 (of 5 total)
  • Author
    Posts
  • #372101
    macmattias
    Participant

    Hello all!
    I am trying to create a loginhook that mounts volumes from a Win 2008 server.
    The loginhook works but not the script that it starts.

    Something happens when I try to mount the volumes:
    mount_smbfs //ad2/loginhook/ /.loginhook/loginhook/

    /.loginhook/loginhook/ is 775 for admin:staff.

    I get two sorts of errors:
    In console it says: mount error
    In termnal it says: authentication error
    and when I add the password in the mount command it says:
    Unknown error: -1

    What am I doing wrong here?

    #372103
    bentoms
    Participant

    What’s the Path that you are trying to mount?

    #372134
    macmattias
    Participant

    The path is:
    //ad2/loginhook/

    or

    //ad2.media.loc/loginhook/

    Some more info:
    It is an 10.5.2 client, bound to the Active Directory that hosted on an Win 2008 server.
    Kerberos up and running and working.

    It also seems like it is some kind of trouble with the smb connection.

    If I try to mount like this:

    mount_smbfs //ad2.media.loc/loginhook /Volumes/loginhook/
    I get an password question, since I do not know what user it is I supply the current logged in user’s password. Then I get “Broken Pipe”.
    On the server the log says that I am not suppling an domain and I am trying to connect with NTLM not Kerberos.

    If I try this:
    mount_smbfs //MEDIA; ad2.media.loc/loginhook /Volumes/loginhook/
    Same result.

    This:
    mount_smbfs //[email protected]/loginhook /Volumes/loginhook/
    Password question and then I succed to login.

    I have tried to use the nsmb.conf (or nmsb.conf) file no change.

    Also I cannot to connect to the share in Finder, there I get an eldless loop of Authetication error.
    Need to force restart the finder to get out f it.

    Somehow the TGT isn’t used when I try to use smb to connect.
    Is there anyway to force smb to use it?

    #372164
    macmattias
    Participant

    Just thinking out loud here…
    Could this be a smb problem? That it is configured to use NTLM instead of anything else?
    Can I change that i smb.conf to say use Kerberos?
    If so – how?

    #372174
    macmattias
    Participant

    Some more info after today’s struggle.

    kinti -R – works for the logged in user.
    So does the gui kerb. app.

    Trying to connect to the 2008 server with:
    mount_smbfs -N //ad2.media.loc/testshare /Volumes/share
    Results in this error:
    mount error: broken pipe /Volumes/share

    The above post examples still works the same.

    So I added a Win 2003 server to the realm to this I can connect like this:
    mount_smbfs -N //03server.media.loc/testshare /Volumes/share

    With the tgt and all.

    So what is the trick here, or what am I missing?
    I am starting to suspect 10.5.2 isn’t up to the task of using it’s tools against a 2008 server.
    Not to my surprise since it is newer than 10.5.2. 🙂
    So Apple gimme 10.5.3!

Viewing 5 posts - 1 through 5 (of 5 total)
  • You must be logged in to reply to this topic.

Comments are closed