AIX

 View Only
Expand all | Collapse all

SMB 3.0.2 Connection Error

  • 1.  SMB 3.0.2 Connection Error

    Posted Sun January 24, 2021 02:40 PM
    I'm running into an error trying to establish an SMB connection to an Azure fileshare.

    bash-5.0# mount -v smbc -n djvmimport.file.core.windows.net/djvmimport -o wrkgrp=AZURE,pver=3.0.2 /filesharetest /mnt/azureSMB3
    There was an error connecting the share or the server. Make sure the lsdev command shows that device nsmbc0 is in the Available state. Also make sure that the share name, user name and password are accurate


    The credential is stored using mksmbcred:
    bash-5.0# lssmbcred -s djvmimport.file.core.windows.net
    server: djvmimport.file.core.windows.net user: djvmimport

    I've installed Kerberos and SMB 3.0.2 on AIX 7200-03-02-1846

    bash-5.0# lslpp -l | grep krb5
    krb5.client.rte 1.16.1.4 COMMITTED Network Authentication Service
    krb5.client.samples 1.16.1.4 COMMITTED Network Authentication Service
    krb5.doc.en_US.html 1.16.1.4 COMMITTED Network Auth Service HTML
    krb5.doc.en_US.pdf 1.16.1.4 COMMITTED Network Auth Service PDF
    krb5.lic 1.16.1.4 COMMITTED Network Authentication Service
    krb5.server.rte 1.16.1.4 COMMITTED Network Authentication Service
    krb5.toolkit.adt 1.16.1.4 COMMITTED Network Authentication Service
    krb5.client.rte 1.16.1.4 COMMITTED Network Authentication Service
    krb5.server.rte 1.16.1.4 COMMITTED Network Authentication Service


    bash-5.0# lslpp -l smbc.rte
    Fileset Level State Description
    ----------------------------------------------------------------------------
    Path: /usr/lib/objrepos
    smbc.rte 7.1.302.3 COMMITTED AIX Runtime for SMB Client
    Path: /etc/objrepos
    smbc.rte 7.1.302.3 COMMITTED AIX Runtime for SMB Client

    I've confirmed nsmbc0 is available
    bash-5.0# lsdev | grep nsmbc0
    nsmbc0 Available N/A

    I've confirmed the parameters are valid, they work on a Linux VM. I've also confirmed the LPAR can reach the fileshare. 

    I'm looking for any clues on how to debug this to determine specifically what's failing during the connection attempt.

    Thanks!

    ------------------------------
    Dan Jones
    ------------------------------


  • 2.  RE: SMB 3.0.2 Connection Error

    Posted Mon January 25, 2021 04:26 AM

    Hi Dan,

    Did you follow all the steps to mentioned in the configuration document "SMBC_Configuration_1.3.4.pdf" available along with the SMB 3.0.2 web download fileset ? 

    Here is the link for the web download - 

    https://www-01.ibm.com/marketing/iwm/iwm/web/pickUrxNew.do?source=aixbp

    Thanks,
    Dimpu Kumar Nath
    AIX Development



    ------------------------------
    DIMPU NATH
    ------------------------------



  • 3.  RE: SMB 3.0.2 Connection Error

    Posted Mon January 25, 2021 04:26 AM

    Hi Dan,

    Did you follow the SMB 3.0.2 configuration document "SMBC_Configuration_1.3.4.pdf" available along with the web download of SMB 3.0.2 fileset ? 

    Here is the link -> https://www-01.ibm.com/marketing/iwm/iwm/web/pickUrxNew.do?source=aixbp

    If not please follow the steps as mentioned, i hope it will be helpful. 

    Thanks!



    ------------------------------
    DIMPU NATH
    ------------------------------



  • 4.  RE: SMB 3.0.2 Connection Error

    Posted Mon January 25, 2021 11:33 AM
    Yes, I'm using that documentation. I think I've narrowed it down to a Kerberos issue. I'm exploring that and will report back once I'm able to short that to ground.

    ------------------------------
    Dan Jones
    ------------------------------



  • 5.  RE: SMB 3.0.2 Connection Error

    Posted Sun June 13, 2021 06:13 PM
    Hi Dan; 
    Were you able to resolve this? We are experiencing the same symptoms.

    ------------------------------
    Ed Stuart
    ------------------------------



  • 6.  RE: SMB 3.0.2 Connection Error

    Posted Mon June 14, 2021 04:50 PM
    Hey Ed,

    I haven't been able to resolve it. I got stuck in Kerberos h*ll and had to put it aside to let my blood pressure lower. ;-)

    Dan

    ------------------------------
    Dan Jones
    ------------------------------



  • 7.  RE: SMB 3.0.2 Connection Error

    Posted Tue June 15, 2021 02:37 AM
    Hi Ed and Dan,

    Normally I follow these steps for setting up Kerberos and Mount for first time. I have just drafted the steps in a very simple way to follow, please try these (if you have not already). If after trying these steps does not resolved your problem then we may need to collect syslog and traces to see why mount is not happening. Please update. Thanks!

    Steps:

    On SMB server:

    Step1) ktpass.exe -princ host/<Client LPAR hostname>@AZURE -mapuser <user name> -pass <password> -ptype KRB5_NT_PRINCIPAL -out <hostname short>.keytab

    copy <hostname short>.keytab to client LPAR: /home/SMB3.0.2/Kerberos

    For Example:

    ktpass.exe -princ host/clientLPAR.in.ibm.com@AZURE -mapuser clientUser -pass clientPassword -ptype KRB5_NT_PRINCIPAL -out clientLPAR.keytab

    copy clientLPAR.keytab to clientLPAR.in.ibm.com: /home/SMB3.0.2/Kerberos

    On client LPAR:

    Step 1) chdev -l sys0 -a max_logname='64'

    Step 2) mkuser -R KRB5files SYSTEM=KRB5files registry=KRB5files  clientUser

    Step 3) Inside dir /home/SMB3.0.2/Kerberos
    (0) root @ clientUser: /home/SMB3.0.2/Kerberos

    # ls
    clientLPAR.keytab

    Step 4)
    (0) root @ clientUser: /home/SMB3.0.2/Kerberos
    # ktutil

    ktutil:  rkt clientLPAR.keytab

    ktutil:  wkt /etc/krb5/krb5.keytab

    ktutil:  q

    Step 5)
    (0) root @ clientUser: /home/SMB3.0.2/Kerberos

    # klist -k

    Key table: /etc/krb5/krb5.keytab

    Number of entries: 1

    [1] principal: host/clientLPAR.in.ibm.com@AZURE

            KVNO: 3

    Step 6)
    # installp -agXYd . smbc.rte

    Step 7)
    # mount -v smbc -n djvmimport.file.core.windows.net/djvmimport/<password> -o wrkgrp=AZURE,pver=3.0.2 /filesharetest /mnt/azureSMB3


    Thanks, 

    Dimpu Kumar Nath
    Email: dimpnath@in.ibm.com



    ------------------------------
    DIMPU NATH
    ------------------------------



  • 8.  RE: SMB 3.0.2 Connection Error

    Posted Wed June 16, 2021 04:17 PM
    Thanks Dimpu I'll give this a shot.

    ------------------------------
    Dan Jones
    ------------------------------



  • 9.  RE: SMB 3.0.2 Connection Error

    Posted Fri July 02, 2021 09:38 AM
    We resolved our issue. It looks like the SMB client must use Kerberos for authentication. Our original configuration used a local server account for the share access and that consistently failed. After we reconfigured the share to use an Active Directory domain account the mount was successful. The steps in the link that @DIMPU NATH sent were useful, but we also found that it helped to stop and restart smbdc after Kerberos was configured using mkkrb5clnt and the SMB credentials were added using mksmbcred.



    ------------------------------
    Ed Stuart
    ------------------------------



  • 10.  RE: SMB 3.0.2 Connection Error

    Posted Thu July 08, 2021 10:41 AM
    Thats great! I hope similar way Dan Jones can also try to resolve his issue. Please let me know if you have any further queries. Thanks!

    ------------------------------
    DIMPU NATH
    ------------------------------



  • 11.  RE: SMB 3.0.2 Connection Error

    Posted Wed March 09, 2022 10:43 AM
    Hi Dimpu,

    Thanks for the narrowed down detailed steps. Do you refer SMB server as Blob Storage and Client LPAR as where we need to do mount the Blob storage as a mount point?

    ------------------------------
    Marimuthu Veeraputhiran
    ------------------------------