Error Referencing Old CIFS Shares

Previously I used to use CIFS to connect to my shares on my NV+, but I've switched to AFP.
For some reason, something in Lion is still trying to get the CIFS shares and so when I open random applications such as Garage Band and others that use the media inspector to let me browse audio and picture files, I get an annoying error pop up that won't go away unless I close down the application. I'm trying to figure out where this old share is being referenced and how I can remove whatever reference there is so I can quit getting the pop up errors.
The system log shows this when I get the error...
10/11/11 3:09:22.142 AM NetAuthSysAgent: smb_mount: mount failed to nas-mccordnet (CIFS)._smb._tcp.local/pictures, syserr = No such file or directory
Is there a file that references these shares that I can delete or edit?

hwoess,
It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Visit http://www.novell.com/support and search the knowledgebase and/or check all
the other self support options and support programs available.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://forums.novell.com)
Be sure to read the forum FAQ about what to expect in the way of responses:
http://forums.novell.com/faq.php
If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Forums Team
http://forums.novell.com

Similar Messages

Random error accessing CIFS shares from Windows

I am setting up some CIFS shares to be used from Windows clients and in the process I had some random problems accessing the shares.
In hope of finding the answer I checked the CIFS Service and the Active Directory Service, and while watching the screen for Active Directory Service I saw that the "Selected Domain Controller" changed from one to another. I now stayed within this screen and noticed that the "Selected Domain Controller" continued to change and then I found the problem, because an unknown Domain Controller appeared. The IP was 216.150.17.8
I found that when ever this Domain Controller was the selected one, all access to CIFS shares from Windows clients failed! This is correct, because the 216.150.17.8 of course is unaware of all users in Our Domain
So the Questions are:
- what is happening?
- and how to solve this?
- why is a Domain Controller 216.150.17.8 sometimes the Selected Controller?
- where does this 216.150.17.8 come from?
Have You seen anything like this?

I now have found out why the DC changes - it is because the CIFS service is restarting ;-(
This is a log snip
2009-5-14 09:24:53 Executing start method ("exec /usr/lib/smbsrv/smbd start").
2009-5-14 09:24:53 Executing stop method (:kill).
2009-5-14 09:24:53 Stopping because all processes in service exited.
2009-5-14 09:24:39 Method "start" exited with status 0.
2009-5-14 09:23:48 Executing start method ("exec /usr/lib/smbsrv/smbd start").
smbd: NetBIOS services started
2009-5-14 09:23:48 Executing stop method (:kill).
2009-5-14 09:23:48 Stopping because all processes in service exited.
2009-5-14 09:23:34 Method "start" exited with status 0.
It seems to happen when I access the share and thereby force a uservalidation
Any ideas?

Accessing Windows CIFS Shares via Nautilus

Hi,
I've recently installed and configured Solaris 11, am having problems accessing Windows CIFS shares via Nautilus.
I've installed both samba (needed for CUPS to print to printers connect to a windows pc) and smb/client. The smb/client and samba services are running. The smb/server service is not installed.
I can print to any printer on the windows PC I'm trying to access via Nautilus, so I know my username/password for accessing the pc are correct.
I can also manually mount any share on the windows PC via the cli (eg mount -F smfs -o user=elin //elink/users /mnt), and browse the files directly that way, except the file permisssions don't seem to align with any unix user. Again this just shows that the username/password combination is ok.
For Samba, I'm using the default smb.conf file as /etc/samba/samba.conf. Workgroup is set to WORKGROUP in smb.conf.
On the Windows pc, in the security event viewer, I can see the auth request, however is failing with bad password (event ID 4776, error code 0x006a). In the default group policy object for networking, I've set to accept "LM & NT, NTLMv2 when neogiatated", as this allows legacy clients to connect. (Legacy meaning NT4, Win95, etc, and also has the benefit of allowing other OSes to connect as well).
I'm also able to access the WIndows PC CIFS shares from an Arch Linux based setup (running GNOME 3.2 w/ Nautilus 3.2), so I doubt it's the Windows side of things causing the problems. Additionally, when I was running Solaris 10u9 (just before upgrading to Sol11), I was able to access the shares via Nautilus as well.
So my question is:
1. Does Nautilus use Samba or the Oracle smb/client service to handle mount windows CIFS shares?
2. What log files or configuration files do I need to looking at to help with this error?
As a side question,
I've found that on a clean installation running the "Print Manager" accesses CUPS fine, but once you install a printer, it'll no longer connect to CUPS, unless run from the cli "sudo system-config-printers". So this is a permissions issue, where's the best place to fix/handle that one.

Replying to my own thread, as I have a possible but very-hackish solution.
To add some further details to my original post.
There are 4 PCs on the LAN.
1. Hellfire - OS = Solaris 11 11/11
2. Brimstone - OS = Arch Linux
3. Elink - OS = Win7 Pro x64 SP1
4. IsaacPC - OS = WinXP Home SP3
Attempting to connect to Elink from Hellfire, accessing CIFS shares via Nautulis fails. (Mounting shares via Nautulis fails, but works fine from CLI using 'mount' command which to my understanding uses the smb/client service to work). Elink also hosts all the printers on the LAN, a HP LJ1200 and an Epson Fax/Printer/Scanner.
Helfire does attempt to authenticate, as listed in the event logs on the Win7 PC (elink), but is returning bad password when using Nautulis. (but printing from hellfire to either printer on elink works fine, as does mounting CIFS shares using 'mount').
Booting the live CD of Solaris 11, also exhibits the same non-working behaviour when attempting to mount CIFS shares in Nautulis.
Attempting to access CIFS shares on elink from Brimstone (via Nautulis 3.2 within GNOME 3.2), or from IsaacPC works fine.
Hellfire configuration.
Samba is installed, but NOT running (samba is needed for accessing the printers on elink, as CUPS needs smbspool which is part of the samba package), and the native smb/client service is also running.
smb.conf is a direct copy of the default *.conf file, except the WORKGROUP is set to 'WORKGORUP'. There is a symlink to smb.conf in /etc/sfw/smb.conf -> /etc/samba/smb.conf
Onto the hackish-fix.
I've noticed that there are 2 copies of libsmbclient.so installed on the system, one in /usr/sfw/lib (part of the "libsmbclient" package) and another in /usr/lib/samba (part of the "samba" package).
"libsmbclient" appears to be based on samba 3.5.8 codebase, and is linked to the gvfsd-smb daemon (this is the software that Nautulis uses to talk SMB to access CIFS shares).
"samba" is based on the samba 3.5.10 codebase, and it's installation has nothing to do with GNOME or Nautulis in any manner.
Using any of the samba included tools to test SMB/CIFS functions, work with 1 minor exception (which I'll list below). eg, using smbclient I can list all shares on any PC on the LAN, etc.
So as a hunch, I renamed the libsmbclient.so.0 in /usr/sfw/lib, and symlinked /usr/sfw/lib/libsmbclient.so.0 -> /usr/lib/samba/libsmbclient.so.0 (so that gvfsd-smb is linked against the slightly newer version of the libsmbclient.so as included in the samba package located in /usr/lib/samba).
I rebooted Hellfire, and now I'm able to access CIFS shares via Nautulis, provided that some form of authentication is needed (that is a username and password is needed - guest access and blanks passwords don't work - but these IMO should be disabled immediately as part of a baseline security package in regards to Windows - so no harm there).
Now to the minor exception I noted earlier. When using smbclient to actually connect and transfer files, I get:
ld.so.1: smbclient: fatal: relocation error: file /usr/lib/libreadline.so.5: symbol tgetent: referenced symbol not found
As far as I know, tgetent is part of libtermcap.so, so I guess when building smbclient or libreadline.so, the link reference to termcap was left out? (or something like that). Anyway, that's another issue...

Running SubInACL after Robocopy in Destination CIFS share ?

Hi All,
Can someone please assist me as to why I got millions of Error 5 - Access Denied
when trying to copy the NTFS drive onto CIFS share using the following Robocopy script in Windows Server 2003 ?
robocopy.exe S: "\\CIFS\FILESHARE\ " *.* /xd "S:\System Volume Information" /xd F:\RECYCLER\ /e /r:0 /w:0 /xo /zb /copy:DTS /fp /nfl /ndl /np /tee /log:"X:\Temp\robocopy.log"
In the source Windows Server 2003, I connect using RDP into the server with the service account that is member of SERVER\Administrators (Local Administrator), this service account (DOMAIN\Service-EnterpriseVault) is also granted full access in the destination
CIFS share.
From the root drive on the NTFS drive S: I can see that the owner is SERVERname\Administrators, but how come I cannot copy millions of directory and files into the CIFS share ? and some of the folder I cannot browse through while I can browse it on the source
file server.
Do I have to execute the following script on the old Windows Server 2003 source server after the first copy finished?
subinacl.exe /subdirectories \\CIFS\FILESHARE\*.* /grant=Administrators=F /setowner=Administrators >> X:\Temp\SetInACL.log
and then run again the same Robocopy command.
Any kind of help and suggestion would be greatly appreciated.
Thanks.
/* Server Support Specialist */

Ok, so now I have to update the following script into:
From
the New File Server 2012 R2:
robocopy.exe
S: "\\CIFS\FILESHARE\ " *.*
/XA:O /xd "S:\System Volume Information" /xd F:\RECYCLER\ /e /r:0 /w:0 /xo /zb /copy:DTS /fp /nfl /ndl /np /tee /log:"X:\Temp\robocopy.log"
From
the old File Server 2008:
“FSAUtility -pm -s S: -d
\\CIFS\FILESHARE\
Is that correct ?
Two type of copy process.
/* Server Support Specialist */

Cannot mount multiple CIFS shares in /home

I have 2 users, Joe and Fred, who each have their own directory in /home. I also have a Netapp filer with a CIFS share called CorpData, which has subdirectories for Joe and Fred.
On the Arch Linux box, I have this for my fstab:
# /etc/fstab: static file system information
# <file system> <dir> <type> <options> <dump> <pass>
# /dev/sda1
UUID=d93def89-7611-43c8-a74f-e20bee64bd7e / ext4 rw,relatime 0 1
//10.1.1.141/CorpData/joe /home/joe cifs credentials=/etc/credentials,noserverino,_netdev,uid=joe,gid=users 0 0
//10.1.1.141/CorpData/fred /home/fred cifs credentials=/etc/credentials,noserverino,_netdev,uid=fred,gid=users 0 0
The problem is that at boot time, Joe's directory will be mounted, but Fred's will not. The reverse is true if I reverse the two entries in fstab.
If I issue the "mount -a" command after logging in, the second mount does get mounted, but also generates this error message:
mount error(16): Device or resource busy
Refer to the mount.cifs(8) manual page (e.g. man mount.cifs)
I did refer to man mount, but since only the second mount is failing, I don't know what I could try differently. There are many more directories in CorpData, so I don't want to just mount that entire share on /home.

Looking into this further, it seems that the server is not able to accept the second request so quickly after the first. Is there any way to insert a delay or sleep command between the two mount entries in fstab?

Can't add CIFS Share from iManager on OES

I recently install OES and have not been able to add a CIFS share from
iManager .
The error is:
Error: The given volume name could not be found on the specified server.
I've tried entering the path is various ways:
\vol1\share\
\vol1\share
vol1\share\
vol1\share
vol1:\share\
I've recreated the Pool and now have the volume name "VOLUME1" but still no
success.
Logger Screen reports:
GadgetManager......2796 Could not find resource file mapping for stylesheet:
NSSMgmt.xsl
GadgetManager......2796 Could not find resource file mapping for stylesheet:
NSSMgmt.xsl
Trying NCP protocol
Any suggestions?
Thank you.
Marc

The source of the CIFS issue is the cluster snapin.
The CIFS functionally is included in the cluster snapin for cluster
services version 1.6 (NetWare 6.0) and 1.7 (NetWare 6.5).
Unfortunately, with Cluster Services 1.8 (OES and NetWare 6.5 SP3),
Novell dropped the CIFS functionality from the cluster snapin. So when
you install an OES/NetWare server, or when you install SP3 to an
existing Server, you will loose the CIFS snapin.
Note that reinstalling SP3 will not bring you back the CIFS
functionality as it is actually the cause of the disappearence.
To get back the CIFS functionality, you have to get the NCS 1.7 cluster
snapins. The latest version of these snapins can be found in NW65SP2 in
the file NCS.ZIP. Unpack these file somewhere and use the files NCS.JAR
and NCSRES.JAR from this ZIP file to replace the corresponding files of
your ConsoleOne installation.
Marcel Cox
http://support.novell.com/forums

Unable to access CIFS shares using SSL Web portal

Hello,
i have deployed Cisco Clientless Web VPN on my ASA5515.
I'm having an issue when I try to browse a file server (access CIFS shares) from the WEB VPN portal. I am prompted for login, and after logging in I get the "Error contacting host" immediately. it's seem like a bug on ASA ? i saw that on Cisco Web site : bug CSCsl94183
I already DONE those things :
1- reload the ASA
2- upgrade to the latest software release
3- test different web browser ( Firefox, IE, Chrome)
1- ASA Platform is 5515 running latest software release (9.1.4)
2- File server running Windows 2008 R2
3- Clients is using Firefox.
4- When I establish SSL VPN connection using Cisco AnyConnect I have no problems accessing files or folders on the same server.
NOTE : I have 2 other CIFS server running Window 2003 and there is no issue. the issue is happening ONLY with the server running Window 2008 R2

I've also seen this exact problem. We have several Windows 2008 R2 servers, one of our Domain controllers has been migrated to 2008 R2. I can access shares on the Windows 2008 R2 domain controller, but not a deicated (member) file share server.

[SOLVED]Setting up Arch to read CIFS shares but no smb.conf

I am trying to ACCESS CIFS shares from another computer. Other clients can access these shares without issue. I am NOT trying to host files from Arch.
Reading I have done: wiki pages on SAMBA and SMBCLIENT.
Reading the SMBCLIENT wiki page, it apparently states that only the package smbclient should be installed, which I did.
But, following the SMBCLIENT wiki, it shows to issue:
#smbclient -L
#smbclient
both error saying smb.conf can not be read. BTW, is the -L to just list the shares available from any place?
Questions:
1. So, should smb.conf be created to use smbclient? This package evidently does not install smb.conf in any form.
2. Does the SAMBA package need to be installed to use smbclient? Samba does install a smb.conf.something.
Any tips you have so I can read CIFS shares will be appreciated.
Thanks
steve.
Last edited by stevepa (2012-11-30 03:22:49)

Reporting my results at resolving my issues
1. installing smbclient provides the described ftp-like environment while accessing CIFS shares. It works fine. I used
$smbclient //OMV/steve -Usteve%omv
to access my share on the OMV server. I could list, get and put files. I still get the message about no smb.conf file but it works.
2. Installing gvfs-smb package allowed Thunar to display the shares. In my case, I do a Ctrl-L and then smb://OMV/steve and I can display the shared content perfectly! Click to remember password or it apparently does not work.
Hope this helps someone.
Steve.

Cannot access CIFS shares from Windows 2008R2 on NSS3000

Hi,
I am trying to upgrade our 2008 domain to 2008R2 but with that last version we cannot access to cifs shares on the NSS3000. Access from all other clients are OK. It was 100% OK under 2008...
Whether I use the IP or the FQDN, I got an error from Windows 2008R2. From IP, I got "No process is on the other end of pipe." and from network Gui, I got "Windows cannot access \\nas0026CB647BC6. Check the spelling of the name...blabla. Details : Error Code : 0x80070035, The network path was not found".
On the NAS, I got this errors in the cifs logs :
Feb 24 14:12:45 NAS0026cb647bc6 winbindd[28457]: rpc_api_pipe: Remote machine WIN2008-PDC.bluemoon.holywell.leics pipe \NETLOGON fnum 0x4002returned critical error. Error was NT_STATUS_PIPE_DISCONNECTED
Feb 24 14:12:45 NAS0026cb647bc6 winbindd[28457]: [2011/02/24 14:12:45, 0] rpc_client/cli_pipe.c:rpc_api_pipe(790)
Feb 24 14:12:45 NAS0026cb647bc6 winbindd[28457]: rpc_api_pipe: Remote machine WIN2008-PDC.bluemoon.holywell.leics pipe \NETLOGON fnum 0x4002returned critical error. Error was NT_STATUS_PIPE_DISCONNECTED
Feb 24 14:12:45 NAS0026cb647bc6 winbindd[28457]: [2011/02/24 14:12:45, 0] rpc_client/cli_pipe.c:rpc_api_pipe(790)
Feb 24 14:12:45 NAS0026cb647bc6 winbindd[28457]: rpc_api_pipe: Remote machine WIN2008-PDC.bluemoon.holywell.leics pipe \NETLOGON fnum 0x4002returned critical error. Error was NT_STATUS_PIPE_DISCONNECTED
Feb 24 14:12:45 NAS0026cb647bc6 winbindd[28457]: [2011/02/24 14:12:45, 0] rpc_client/cli_pipe.c:rpc_api_pipe(790)
Feb 24 14:12:45 NAS0026cb647bc6 winbindd[28457]: rpc_api_pipe: Remote machine WIN2008-PDC.bluemoon.holywell.leics pipe \NETLOGON fnum 0x4002returned critical error. Error was NT_STATUS_PIPE_DISCONNECTED
Feb 24 14:12:45 NAS0026cb647bc6 winbindd[28457]: [2011/02/24 14:12:45, 0] rpc_client/cli_pipe.c:rpc_api_pipe(790)
Feb 24 14:12:45 NAS0026cb647bc6 winbindd[28457]: rpc_api_pipe: Remote machine WIN2008-PDC.bluemoon.holywell.leics pipe \NETLOGON fnum 0x4002returned critical error. Error was NT_STATUS_PIPE_DISCONNECTED
Feb 24 14:12:48 NAS0026cb647bc6 winbindd[28457]: [2011/02/24 14:12:48, 0] rpc_client/cli_pipe.c:rpc_api_pipe(790)
It is likely to be an incompatibility between Windows 2008R2 smbv2 and the NSS3000 smbd but I can't find any firmware update and I can't find the process to allow in the registry.
I can ping it, I can connect on the web interface, I can connect on FTP but no CIFS at all.
Firmware version running is 1.20.1. Hardware rev : V03.
Any idea?

Hi SpaceBass, have you looked into sharepoints or into Netinfo manager. I have been playing around with sharepoints and it does let me enter non local users into the sharing prefs- albeit manually. Only thing is , depending on the number of macs you have, it could be a long and tedious job entering it all by hand. Netinfo may have an easier way, I'll do some more digging and post back.
Cheers.

Read-only CIFS share--5320 NAS Gateway Cluster

Is it possible to share CIFS shares read-only using Active Directory authentication, then revert to normal read-write operation? We would like to make information available while we are finishing an incremental copy from an old data source.

I have the same problem so I think I will try to explain it from my point of view and see if we get any comments.
I have a Real Strorage 7110 (Try & Buy)
What my windows guys would like and what they do already on Windows Systems:
Real Disk Layout = G:\shome\username
share "shome" => G:\shome (Default ACL)
User (Owner) = Full Access=rwx+inheritance
Other = x+inheritance
Domain Admin = Full Access=rwx+inheritanceshare "username" => G:\shome\username (Default ACL)
Inherit from above (shome)
Group Staff = rx+inheritanceBy the looks the Sun way is to setup up every share with all the relevant ACL, since you can not setup ACL on the directory above (project). Am I correct
Real Disk layout /export/shome/username
share "username"
User (Owner) = Full Access=rwx+inheritance
Other = x+inheritance
Domain Admin = Full Access=rwx+inheritance
Group Staff = rx+inheritanceThanks
Andrew

Datapump via passwordless CIFS share to ZFS appliance

Hello,
In a project I'm involved in we want to export Oracle databases on Windows via datapump directly to a ZFS appliance.
However datapump run's on the system account so we cannot use drive letters to the CIFS share. UNC path's should be possible however this should be passwordless.
Anybody an idea how to setup passwordless CIFS shares on a ZFS Appliance.
Regards,
Laurens

I have the same problem on a CMSDK db and a ASDB in a Portal enviroment whit CIFS and SSO.
On Windows 2003 server datapump have the two errors
CMSDK Database
ORA-31693: Table data object "CMSDK"."ODMM_CONTENTSTORE" failed to load/unload and is being skipped due to error:
ORA-06564: object EXP_DP does not exist
ORA-31693: Table data object "CMSDK"."ODMM_NONINDEXEDSTORE" failed to load/unload and is being skipped due to error:
ORA-06564: object EXP_DP does not exist
ASDB Database
ORA-31693: Table data object "PORTAL"."WWNLS_STRINGS$" failed to load/unload and is being skipped due to error:
ORA-06564: object EXP_DP does not exist
ORA-31693: Table data object "ORASSO"."WWNLS_STRINGS$" failed to load/unload and is being skipped due to error:
ORA-06564: object EXP_DP does not exist
Regards

LION CIFS shares broken in finder

Since the upgrade to lion I cannot consistantly copy files to/from CIFS shares on my Solaris server. This still works perfectly on all my Snow Leopard machines, but Lion continually gives errors when working with the network drives (the most common error is the "unexpected error occurred - error code -50")
Finder will consistantly give this error when copying/moving files between network shares, but the trusty terminal will copy the files without fail or errror.
I've already tried the nsmb.conf streams=no fix, but no joy...

All you can do is submit a bug report to Apple. Apple reimplemented Samba in Lion. I'm sure the goal was interoperability with Windows. They probably didn't care much about interoperability with someone else's reimplementation of SMB. Can you use NFS instead?

CIFS Kernel Module Needed for A7600-F. Can't mount CIFS Shares.

Does anyone have, or could compile a CIFS Kernel for the A10 (A7600-F) please.
I am trying to mount CIFS shares on my NAS, nut don't have the cifs.ko file required.
Help would be greatly appreciated.
Thanks.
Model Number: Levono A7600-F
Android Version 4.4.2
Kernel Version: 3.4.67
Build Number: A7600F_A442_000_022_140829_ROW
The tablet was rooted using Kingo Root.

Hi Gmarkall,
You really seem to know what you're doing.
I need the same module files for my A10-70 (A7600-F).
Are you able to complie these please?
Lenovo make the source code available here
http://support.lenovo.com/gb/en/products/tablets/a-series/a10-70-tablet?TabName=Downloads
I've tried to do this myself, but can't figure it out.
Can you help me please?
Thanks
Moderator comment: This post and its replies below were pulled out of an old thread about a different model and merged here. Subjects here and below edited to match. Was: Re: CIFS Kernel Module? - can't mount CIFS share on IdeaPad A2109

Samba/cifs shares using AD for Authentication

Hi,
I am trying to make use of the internal cifs shares in Solaris 11.1 but I am running into road blocks - can anyone shed light on this for me?
I won't bore you with my first and abortive attempt at configuring auth with native kerperos and simply say that have decided to go with the third party product PBIS Open for the authentication.
setup is a breeze and I can see the shares from elsewhere but for the life of me I cannot mount the shares. For the record the setup that was most successful went in this order:
SAMBA
pkg install service/file-system/smb
zpool create xpool /var/tmp/xpool
zfs set sharesmb=on xpool
zfs create -o nbmand=on xpool/fs1
zfs get -r share xpool
svcadm enable -r smb/server
smbadm show-shares host
smbadm enable-user AD.DOMAIN\\user
WORKAROUND to point to a working test DC:
xx.xx.xx.xx      AD.DOMAIN >> /etc/hosts
smbadm join -u user AD.Domain
PBIS:
cd /var/tmp/pbis-open-7.5.3.1536.solaris.sparcv9.pkg/
./install.sh
svccfg -s system/name-service/switch
setprop config/password = astring: "files lsass"
setprop config/group = astring: "files lsass"
setprop config/host = astring: "files dns mdns4_minimal [NOTFOUND=return] mdns4"
svcadm refresh name-service/switch
domainjoin-cli join AD.DOMAIN user
After which I can ssh into the host as an ad user but I can't mount (get permission denied).
/var/adm/messages shows:
Jan 22 15:52:14 host smbd[1635]: [ID 649633 daemon.notice] ndr_rpc_bind[tid=8]: \\ADDC.fqdn\PIPE\srvsvc: smb/client authentication failed (114)
Jan 22 15:52:14 host smbd[1635]: [ID 649633 daemon.notice] ndr_rpc_bind[tid=8]: \\ADDC.fqdn\PIPE\lsarpc: smb/client authentication failed (114)
Jan 22 15:52:14 host smbd[1635]: [ID 649633 daemon.notice] ndr_rpc_bind[tid=8]: \\ADDC.fqdn\PIPE\srvsvc: smb/client authentication failed (114)
Jan 22 15:52:14 host smbd[1635]: [ID 649633 daemon.notice] ndr_rpc_bind[tid=8]: \\ADDC.fqdn\PIPE\lsarpc: smb/client authentication failed (114)
Jan 22 15:52:14 host smbd[1635]: [ID 702911 daemon.notice] smbd_dc_monitor: domain service not responding
and the DC logs show:
Log Name:      System
Source:        Microsoft-Windows-Security-Kerberos
Date:          22/01/2014 3:46:54 PM
Event ID:      3
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      ADDC.fqdn
Description:
A Kerberos Error Message was received:
on logon session
Client Time:
Server Time: 5:46:54.0000 1/22/2014 Z
Error Code: 0xd KDC_ERR_BADOPTION
Extended Error: 0xc00000bb KLIN(0)
Client Realm:
Client Name:
Server Realm: AD.DOMAIN
Server Name: [email protected]
Target Name: [email protected]@AD.DOMAIN
Error Text:
File: 9
Line: f09
Error Data is in record data.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
    <Provider Name="Microsoft-Windows-Security-Kerberos" Guid="{98E6CFCB-EE0A-41E0-A57B-622D4E1B30B1}" EventSourceName="Kerberos" />
    <EventID Qualifiers="32768">3</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2014-01-22T05:46:54.000000000Z" />
    <EventRecordID>476941</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>System</Channel>
    <Computer>ADDC.fqdn</Computer>
    <Security />
</System>
<EventData>
    <Data Name="LogonSession">
    </Data>
    <Data Name="ClientTime">
    </Data>
    <Data Name="ServerTime">5:46:54.0000 1/22/2014 Z</Data>
    <Data Name="ErrorCode">0xd</Data>
    <Data Name="ErrorMessage">KDC_ERR_BADOPTION</Data>
    <Data Name="ExtendedError">0xc00000bb KLIN(0)</Data>
    <Data Name="ClientRealm">
    </Data>
    <Data Name="ClientName">
    </Data>
    <Data Name="ServerRealm">STAFF-TEST.AD.GRIFFITH.EDU.AU</Data>
    <Data Name="ServerName">[email protected]</Data>
    <Data Name="TargetName">[email protected]@AD.DOMAIN</Data>
    <Data Name="ErrorText">
    </Data>
    <Data Name="File">9</Data>
    <Data Name="Line">f09</Data>
    <Binary>3015A103020103A20E040CBB0000C00000000003000000</Binary>
</EventData>
</Event>

Although setting up SMB server in Solaris 11.1 seems to be straight forward, yet there another important part to be completed on the Windows Side. the following link describes what to be done at the windows domain level
https://social.technet.microsoft.com/wiki/contents/articles/2751.kerberos-interoperability-step-by-step-guide-for-window…
Now, to be straight forward you have to do the following:
Use Ktpass on the Windows Server 2003/2008/2012R2 KDC to create the keytab file (a keytab is a file used to store the keys used by a host or service) and set up the account for the UNIX host, and then copy the keytab file to the UNIX system and merge the keytab file into /etc/krb5.keytab (check the documentation for your Kerberos Implementation as the keytab path may be different or configurable).
1.   From the command line, use the following command to generate the keytab file for the UNIX host, map the principal to the account, and set the host principal password.
C:> klist
this command will list the encrption type used by your server
C:> Ktpass –princ host/hostname@DNS-REALM-NAME –mapuser account -pass password –crypto ENCRYPTION-TYPE –out UNIXmachine.keytab
where
hostnameis the fully-qualified name of the host, for example, foobar.reskit.com.
DNS-REALM-NAME is the uppercase DNS name of the Windows Server 2003 domain; for example, RESKIT.COM.
account is the user account previously created for the UNIX host as performed in the procedure to create Computer and User Accounts.
password is a complex password to be set on the account.
ENCYRYPTION-TYPE is the encryption type used to encrypt the key. Either RC4-HMAC-NT (recommended), DES-CBC-MD5, or DES-CBC-CRC.
Note
In order to create a keytab using the RC4-HMAC-NT encryption type you need to use the ktpass.exe from Windows Server 2003 SP1 or later.
2.   Securely transfer the keytab file (UNIXmachine.keytab from the example above) to the UNIX host. Then, merge the keytab file with any existing keytab file for the UNIX computer.
The UNIX commands to merge the keytab file are:
% ktutil
ktutil: rkt UNIXmachine.keytab
ktutil: list
The output should appear similar to the following:
slot KVNO Principal
    1      1   host/[email protected]
ktutil: wkt /etc/krb5.keytab
ktutil: q
rejoin the domain using smbadm command as following
smbadm join -u username DOAMIN
where username = username created from step 1
the second part is where you have the issue \\ADDC.fqdn\PIPE\srvsvc: smb/client authentication failed
change the following in Domain group policy if you are using domain policy or Local policy is no group policy applied
GPO_name\Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options
add lsarpc to the following policy
Network access: Named pipes that can be accessed anonymously
gpupdate /force
observer your /var/adm/messages and see if these message stops or not

Mac not seeing SMB/CIFS shares that others computers can see

I set up a test that fails. There are three computers
1) A Mac running "Tiger"
2) PC running Windows 2000
3) A Linux server running Samba
Both Win2K and Linux export some SMB/CIFS shares
The Mac can "see" the Win2K shared files but when the Mac tries to connect to the Linux server the finder hangs and has has to be killed. Going to a terminal on the Mac and I type "smbclient -L <Linuxsevername> I see all the services on the linux machine. So I try "smbclient //rabbit/wsfiles/" (Where the names rabbit and wsfiles where cut and pasted from the smbclient -L output.) and I get an "Invalid network name" error. Yes, I have cnnectivity to "rabbit", ping, ssh, X11 and FTP work fine
On the Win2K PC I can access the Linux shares
The Linux server can access it's own shares using "smbclient"
Linux Samba must be working because I can access the shares from Win2K. Mac must be working because it can access shares from the PC. So I can argue that nothing could be broken but clearly something is. I have many years experiance with UNIX but have avoided PCs and PC networking.
Anyone have a list of things I can check?

Hi C JAbertson, check the logs in /Applications/Utilities/console see if they provide any clue to why.You are using SMB://rabbit/wsfiles/ format in the go to window? Have you got SMB enabled in Directory Access?
Cheers.

Error Referencing Old CIFS Shares

Similar Messages

Maybe you are looking for