Mount CIFS / Windowsshare with Kerberos ticket

Question

Hi there!
Uhm, I am trying to mount a Windows Share with
mount -t cifs //SERVERNAME/SHARE /mnt -o krb5
(Before that, I have requested a kerberos ticket with kinit username@DOMAIN which worked fine).
I'm then asked to give a password, but I don't know which password it could be (tried my Domainuserpassword, also with "-o krb5,username=username, which didn't work).
One of the other employees said that there's a package needed which is called key-request, so the kerberos ticket is forwarded to the server where it has to be compared.
But I really didn't find the package.
My questions are now:
1. Do you know how to mount a Windows Share (Server 2008) with Kerberos tickets?
2. Is the statement about the ticketforwarding true, and if yes, how can I do this on Arch?
EDIT// The output I get after mount..
1. "Password:
Permission denied"
2. "mount error(5): input/output error"
3. Nothing happens
Greetings
Last edited by Kielo (2010-10-08 13:54:55)

Answer 1

The Kerberos client code is unable to get a service ticket for your afp server & the afp client is trying to fall back and running out of options.
You will need to check a couple of things on the afp server:
1) check the principal name of the server: look in the file /Library/Preferences/com.apple.AppleFileServer.plist for the key "kerberosPrincipal"
it should look like "afpserver/fqdn@REALM
2) run:
klist -k
and verify that the principal name of the afp server is in the list.
On the OD Master:
run (as root):
kadmin.local -q "listprincs"
and verify that the principal name of the afp server is in the list.
Hope that gets you started
- Leland