From nobody Tue Jul 11 12:47:47 2023 X-Original-To: freebsd-questions@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4R0gdR5hf6z2tv1w for ; Tue, 11 Jul 2023 12:47:55 +0000 (UTC) (envelope-from paul@gromit.dlib.vt.edu) Received: from gromit.dlib.vt.edu (gromit.dlib.vt.edu [128.173.126.123]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4R0gdR3zGcz412L for ; Tue, 11 Jul 2023 12:47:55 +0000 (UTC) (envelope-from paul@gromit.dlib.vt.edu) Authentication-Results: mx1.freebsd.org; none Received: from [IPv6:2607:b400:24:0:e24b:ae59:33f5:583a] (unknown [IPv6:2607:b400:24:0:e24b:ae59:33f5:583a]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by gromit.dlib.vt.edu (Postfix) with ESMTPSA id A22C37AB32; Tue, 11 Jul 2023 08:47:47 -0400 (EDT) Message-ID: Subject: Re: SMB =?UTF-8?Q?authentication=E2=80=A6flakiness=3F?= From: Paul Mather To: paul beard , FreeBSD-questions Date: Tue, 11 Jul 2023 08:47:47 -0400 In-Reply-To: References: Content-Type: multipart/alternative; boundary="=-74VaJ/RozBh2vy91RBEG" User-Agent: Evolution 3.44.4-0ubuntu1 List-Id: User questions List-Archive: https://lists.freebsd.org/archives/freebsd-questions List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-questions@freebsd.org X-BeenThere: freebsd-questions@freebsd.org MIME-Version: 1.0 X-Rspamd-Queue-Id: 4R0gdR3zGcz412L X-Spamd-Bar: ---- X-Spamd-Result: default: False [-4.00 / 15.00]; REPLY(-4.00)[]; ASN(0.00)[asn:1312, ipnet:128.173.0.0/16, country:US] X-Rspamd-Pre-Result: action=no action; module=replies; Message is reply to one we originated X-ThisMailContainsUnwantedMimeParts: N --=-74VaJ/RozBh2vy91RBEG Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Mon, 2023-07-10 at 18:30 -0700, paul beard wrote: > having some trouble mounting an smb volume hosted by a wireless base > station running linux/busybox.=20 >=20 > smbutil works, mount_smbfs doesn't. password is in .nsmbrc, seems to > be readable by smbutil.=C2=A0 >=20 > smbutil view //www@omphalos > Share =C2=A0 =C2=A0 =C2=A0 =C2=A0Type =C2=A0 =C2=A0 =C2=A0 Comment > ------------------------------- > jffs =C2=A0 =C2=A0 =C2=A0 =C2=A0 disk =C2=A0 =C2=A0 =C2=A0 JFFS > storage =C2=A0 =C2=A0 =C2=A0disk =C2=A0 =C2=A0 =C2=A0 STORAGE > EFI =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0disk =C2=A0 =C2=A0 =C2=A0 EFI > IPC$ =C2=A0 =C2=A0 =C2=A0 =C2=A0 pipe =C2=A0 =C2=A0 =C2=A0 IPC Service (F= reshTomato Samba Server) >=20 > mount_smbfs -I omphalos -N //tmp/mnt/storage /mnt/storage > mount_smbfs: unable to open connection: syserr =3D Authentication error >=20 > tail -1 /etc/fstab=20 > //omphalos/STORAGE =C2=A0 =C2=A0 =C2=A0/mnt/storage =C2=A0 =C2=A0smbfs = =C2=A0 rw,noauto, -N,- > I192.168.0.1 00 >=20 > This all used to work, but a couple of firmware upgrades have taken > place. This was working yesterday after the latest update but now is > failing and I am not seeing what's wrong with it.=C2=A0 >=20 > The server offers Samba protocol version=C2=A0v1, v2 or mixed v1/v2. v1 > doesn't work at all, returns=C2=A0 > mount_smbfs: unable to open connection: syserr =3D RPC struct is bad >=20 >=20 > The others will allow smbutil to work but not mount_smbfs. > Logging=C2=A0isn't telling me much on the server side. I could mount the > disk on macOS but that's not working now either. smbutil still works > there but not mount_smbfs. When my OpenELEC server stopped supporting SMB1 by default I decided to bite the bullet and abandon mount_smbfs, which does not support anything higher than SMB1. =C2=A0(See the STANDARDS section of the mount_smbfs(8) manual page.) In my case, I switched to the sysutils/fusefs-smbnetfs port. =C2=A0It uses Samba4 under the hood, so supports both SMB2 and SMB3, making it more compatible with other OSes (like macOS). =C2=A0I found fusefs-smbnetfs a little bit of a pain to set up, but very reliable. =C2=A0Its main advantage= , for me, is supporting modern SMB standards. Cheers, Paul. --=-74VaJ/RozBh2vy91RBEG Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable
On Mon, 2023-07-10 at 18:30 -0700, paul beard= wrote:
having some troubl= e mounting an smb volume hosted by a wireless base station running linux/bu= sybox.

smbutil works, mount_smbfs doesn't. password is in .nsmbrc, = seems to be readable by smbutil. 

smbu= til view //www@omphalos
Share        Type   &nb= sp;   Comment
-------------------------------
jffs    =     disk       JFFS
storage     &nbs= p;disk       STORAGE
EFI         &nbs= p;disk       EFI
IPC$         pipe &n= bsp;     IPC Service (FreshTomato Samba Server)

mount_smbfs -I omphalos -N //tmp/mnt/storage /mnt/sto= rage
mount_smbfs: unable to open connection: syserr =3D Authentication e= rror

tail -1 /etc/fstab
//omphalos/STORAGE &n= bsp;    /mnt/storage    smbfs   rw,noauto, -N,-I19= 2.168.0.1 00

This all used to work, but a couple of firmware u= pgrades have taken place. This was working yesterday after the latest updat= e but now is failing and I am not seeing what's wrong with it. 
The server offers Samba protocol version v1, v2 or mixed = v1/v2. v1 doesn't work at all, returns 
= mount_smbfs: unable to open connection: syserr =3D RPC struct is bad

The others will allow smbutil to work but not mount= _smbfs. Logging isn't telling me much on the server side. I could moun= t the disk on macOS but that's not working now either. smbutil still works = there but not mount_smbfs.


=
When my OpenELEC server stopped supporting SMB1 by default I dec= ided to bite the bullet and abandon mount_smbfs, which does not support any= thing higher than SMB1.  (See the STANDARDS section of the mount_smbfs= (8) manual page.)

In my case, I switched to the sy= sutils/fusefs-smbnetfs port.  It uses Samba4 under the hood, so suppor= ts both SMB2 and SMB3, making it more compatible with other OSes (like macO= S).  I found fusefs-smbnetfs a little bit of a pain to set up, but ver= y reliable.  Its main advantage, for me, is supporting modern SMB stan= dards.

Cheers,

Paul.
--=-74VaJ/RozBh2vy91RBEG--