Opened 3 years ago

Last modified 3 years ago

#270 new defect

Need to bypass initial connection test when mapping a Kerberos-authenticated share

Reported by: lewisr Owned by:
Priority: minor Milestone:
Component: Samba Client Plugin Version: Client 3.0.x
Keywords: Cc:

Description

We may not yet have a ticket when specifying a new mapping. Currently, whether the Kerberos option is checked or not, once the mapping is saved, we test the validity of the connection, which will fail unless we already have a ticket for the resource.

When the Use KRB5 checkbox is set, we need to just accept the mapping without testing.

Change History (3)

comment:1 Changed 3 years ago by psmedley

comment:2 Changed 3 years ago by psmedley

There's still a related issue where specifying an empty username results in it being replaced with guest...

comment:3 Changed 3 years ago by lewisr

I still get error code 65 (smbfs resource was not mounted to) with:

7-24-16 2:52 75,200 124 ndpsmb.dll

log.ndpsmb says:

2016/07/24 13:20:59.42: 9 2: NdpMountResource in
2016/07/24 13:20:59.43: 9 2: dircache_create: 10 seconds, 32 entries
2016/07/24 13:20:59.43: 9 2: dircache_create: 0x6747a0, rc = 0
2016/07/24 13:20:59.43: 9 2: checkMountResource in tid#2
2016/07/24 13:20:59.43: 1 2: Connecting to \\:kerberos\Shared using kerberos authentication. Master WORKGROUP:1
2016/07/24 13:20:59.44: 4 2: Server supports SMB2_10 protocol
2016/07/24 13:20:59.46: 1 2: session setup failed: NT_STATUS_INTERNAL_ERROR
2016/07/24 13:20:59.46: 4 2: did you forget to run kinit?
2016/07/24 13:20:59.46: 4 2:  smbwrp_disconnect
2016/07/24 13:20:59.47: 9 2: NdpMountResource rc=65

In this test, I had an expired tgt and several expired service tickets. Destroying all tickets yields the same result (as expected; just confirmed).

Note: See TracTickets for help on using tickets.