Operating System - HP-UX
1833862 Members
2362 Online
110063 Solutions
New Discussion

PAM-Kerberos and CIFSCLIENT

 
William Richard
Occasional Contributor

PAM-Kerberos and CIFSCLIENT

Hello,
I am attempting to connect to Win2k share for backup purposes. I have installed Samba and have downloaded the CIFS client. On the installation instructions it states to "Check if the PAM Kerberos has been installed (swlist -l product | grep PAM-Kerberos)" I did this and it is not found. The question is: Do I have to have PAM Kerberos installed for CIFS Client to work?

Also can I mount to the Win2k share without the CIFS client. I was able to "connect" with ./smbclient but it did not establish a mount.

Any help with this would be greatly appreciated. Thanks.
5 REPLIES 5
Vijaya Kumar_3
Respected Contributor

Re: PAM-Kerberos and CIFSCLIENT

I was trying this sometime back and i didnt succeed. Then i made some changes. I had a linux box to mount the windows share.

And then i share through NFS. Then i did a NFS mount in HP box. I am not sure whether we have smbmount command in HP-UX...may be you need to compile yourself.

here is the smbmount command syntax:

smbmount //winbox/C/foldername /root/backup
You may need to pass "-o user=administrator" if it requires authntication...

-Vijay
Known is a drop, unknown is ocean - visit me at http://vijay.theunixplace.com
Vijaya Kumar_3
Respected Contributor

Re: PAM-Kerberos and CIFSCLIENT

btw, i am not sure we need PAM-Kerberos. I think we dont need it...

-Vijay
Known is a drop, unknown is ocean - visit me at http://vijay.theunixplace.com
eric raeburn_1
New Member

Re: PAM-Kerberos and CIFSCLIENT

Support for Kerberos authentication was introduced in version A.01.09 of the CIFS Client, hence the CIFS Client executable (the daemon cifsclientd) is linked to Kerberos shared libraries, so that the Client can call the Kerberos functions. If the Kerberos libraries are not installed, the HPUX dynamic loader will give an error; the system will be unable to start the CIFS Client at all.

You get the Kerberos libraries for HPUX by installing PAM Kerberos. It is available at http://software.hp.com, it's free, it's easy, and it provides much better security for users' passwords than native CIFS authentication.

Good luck. Please post a reply if you have any further questions.
Steven E. Protter
Exalted Contributor

Re: PAM-Kerberos and CIFSCLIENT

You are better off having pam Kerebos installed. Lots of add applications need it for secure authentication. Thats why its a default item on the Core Os.

SEP
Steven E Protter
Owner of ISN Corporation
http://isnamerica.com
http://hpuxconsulting.com
Sponsor: http://hpux.ws
Twitter: http://twitter.com/hpuxlinux
Founder http://newdatacloud.com
Adisuria Wangsadinata_1
Honored Contributor

Re: PAM-Kerberos and CIFSCLIENT

Hi there,

Last time when I installed CIFS client without Kerberos, this will give me a 'coredump' when I try to start cifsclient.

But after I install Kerberos, everything work nice until now.

You can get the Kerberos software free from this url :

http://www.software.hp.com

And please look at this document about 'How to mount Windows-shares to HP-UX ? A brief intro to cifsmount' with this docID : UCIFSKBAN00000890. You can get the same document at this url below also :

http://itrc.hp.com/cki/bin/doc.pl/screen=ckiSearchResults?mode=id&searchString=UCIFSKBAN00000890

Hope this information can help you.

Best Regards,
AW
now working, next not working ... that's unix