Ryan,

Regarding Issue 1;
In OnTab 7 CIFS SMB signing is by default enabled (Network Appliance Field Alert Notice #248 June 24, 2005)

You 'mount -t smbfs' will not function properly with this feauture enabled.

To solve this problem you can either;
- disable smb signing : options cifs.disable_server_smbsign on
or
- use the 'mount.cifs' command to mount your shares under Linux.

Good luck,

Miklas

On Tue, 2005-08-02 at 08:09 -0400, Ryan Kather wrote:
Greetings,

I am having some difficulties accessing our filers with OnTap 7 via Linux.
 Perhaps someone in this list could point me in the right direction.

The version of Linux is Open Enterprise Server (minimal install) which
makes it functionally equivalent to SuSE Linux Enterprise Server 9 SP1.
It is running Kernel 2.6.5-155-smp and Samba 3.0.14a (originally 3.0.9 but
updated when issues surfaced).

The filers I have tried accessing consist of FAS270s and a R200.  They are
using FlexVols and OnTap 7.  Data shares are available via CIFS and NFS
and are configured with NTFS Security Mode.  The filers are members of an
Active Directory Domain (Windows Server 2003 PDC).

I have a number of odd issues that have surfaced.

Issue 1;
--------
smbmount returns permission denied and odd path presentation.

The Linux box is a member of the active directory domain.  I can use
wbinfo to list domain users and groups, as well as getent passwd and
group.  I am able to authenticate via kerberos, and can use smbmount
against Windows server shares fine.

However, when I attempt to mount a share on a NetApp filer using mount -t
smbfs -o username=someuser,workgroup=THEDOMAIN //NETAPP/SHARE /mnt/SHARE
the operation appears to complete successfully.  If I enter mount I can
see the /mnt/SHARE as active.  If I travese into the /mnt/SHARE folder and
type ls I get a permission denied error.  Syslog shows kernel: smb_lookup:
find /// failed, error=-13.  After some digging it appears that error=-13
is an EACCESS authentication issue.  So I assumed I did not have
permissions.

If I type ls -alFG from the /mnt folder in Linux there is no /mnt/SHARE
directory.  If I type ls there is one, and if I unmount /mnt/SHARE then
type ls -alFG the directory is there.

In further troubleshooting I can browse the share from Windows, and from
the same Linux workstation smbclient //NETAPP/SHARE -U someuser -W
THEDOMAIN allows me to browse succesfully.

Issue 2;
--------
/bin/ls: reading directory .: Cannot allocate memory

If I mount the same share via cifs (mount -t cifs -o
user=someuser,domain=THEDOMAIN //NETAPP/SHARE /mnt/SHARE) the operation
completes with no error.  If I cd into /mnt/SHARE then type ls I get the
error above (/bin/ls: reading directory .: Cannot allocate memory).  If I
continue to type ls it will eventually display the directory.  If I cd
into a subfolder the error returns.

Both of these operations work fine against a Windows 2003 Server share.
Does anyone have any ideas?  The messages file on the filer itself does
not provide any significant error messages.

Thank you very much for any information anyone can provide.

Linux Config Files;
--------------
smb.conf--

[global]
   workgroup = THEDOMAIN
   realm = THEDOMAIN.COM
   idmap uid = 10000-20000
   idmap gid = 10000-20000
   security = ADS
   netbios name = LINUXBOX
   password server = PDC.THEDOMAIN.COM
   encrypt passwords = yes
   log level = 5
   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
   wins server = 10.0.0.1 10.0.0.2
   name resolve order = wins lmhosts hosts bcast
   winbind enum users = yes
   winbind enum groups = yes
   winbind use default domain = yes

krb5.conf--

[libdefaults]
        default_realm = THEDOMAIN.COM

[realms]
        THEDOMAIN.COM = {
                kdc = pdc.thedomain.com
        }

[domain_realm]
        .thedomain.com = THEDOMAIN.COM

[logging]
        default = SYSLOG:NOTICE:DAEMON
        kdc = FILE:/var/log/kdc.log
        kadmind = FILE:/var/log/kadmind.log

[appdefaults]
        pam = {
                ticket_lifetime = 1d
                renew_lifetime = 1d
                forwardable = true
                proxiable = false
                retain_after_close = false
                minimum_uid = 0
                debug = false
        }

*************************************************************************************************************

 
Op deze e-mail is een disclaimer van toepassing, ga naar www.multikabel.nl/emaildisclaimer
 
A disclaimer is applicable to this email, please refer to www.multikabel.nl/emaildisclaimer
 
*************************************************************************************************************