How to do CIFS client on hpux 11iv3 authenticating to ADS2003 using kerberos

[Jozef Sith]

How to do CIFS client on hpux 11iv3 authenticating to ADS2003 using kerberos?
With ntlm authentication, no problem.
How to do step by step with kerberos 5 authentication?
I have dc1.ad.xyz.com and dc2.ad.xyz.com server, fs3.ad.xyz.com server, remote share TEST on fs3, mount point on my hp-ux server /mnt/adshare, user test_acc with password 4hpux2AD, in the cifsclient.cfg is authenticationMethod = kerberos;
Best Regards Joe

[Shibin_2]

What's your CIFS version ?

Some threads related to this.

http://h30499.www3.hp.com/t5/System-Administration/How-to-configure-kerberos-for-cifs-server-in-HPUX-11-31/m-p/4514074#M366162

http://h30499.www3.hp.com/t5/System-Administration/Configuring-kerberos-for-CIFS/m-p/4603989#M376098

[Jozef Sith]

# swlist -l product |grep -i kerberos
KRB5-Client B.11.31 Kerberos V5 Client Version 1.3.5.03
PAM-Kerberos D.01.26 PAM-Kerberos Version 1.26
krb5client E.1.6.2.07 Kerberos V5 Client Version 1.6.2.07
# swlist -l product |grep -i ldap
LdapUxClient B.04.20 LDAP-UX Client Services
NisLdapServer B.04.20 The NIS/LDAP Gateway (ypldapd)
# swlist -l product |grep -i cifs
CIFS-CFSM A.02.04.01 HP CIFS File System Module
CIFS-Client A.02.02.02 HP CIFS Client
CIFS-Development A.02.04.01 HP CIFS Server Source Code Files
CIFS-Server A.02.04.01 HP CIFS Server (Samba) File and Print Services

[Earl_Crowder]

Jozef,

An excellent document by Eric Roseme:

http://bizsupport1.austin.hp.com/bc/docs/support/SupportManual/c02564031/c02564031.pdf

Step-by-step setting up kerberos, ldap, cifs.

Earl

[Jozef Sith]

Hello Earl,
thank you very much.

This document is really cool, but I need the other HP-UX CIFS client only. Everything else is on the side Windows.

I do not see it clearly, what I have on the side HP-UX.

Joe

[Jozef Sith]

For NTLM authentication, I set in the file /etc/rc.config.d/cifsclient: RUN_CIFSCLIENT=1

then run CIFS client:
/sbin/init.d/cifsclient start

and type 2 commands:
/usr/bin/mkdir -p -m u=rwx,g=rx,o=rx /mnt/adshare && \
/usr/sbin/mount -F cifs -o username=test_acc,password=4hpux2AD fs3:/TEST /mnt/adshare
and that's all.
I'm looking for the same procedure as done with Kerberos authentication.

# cifslist
Mounted Object________Mountpoint_______State
--------------------------------------------
\\FS3\TEST____________/mnt/adshare_____M
================================================
Server____Local User____Remote User___Domain___State
----------------------------------------------------
fs3_______root__________test_acc_______________L
#