Highlighted
Absent Member.
Absent Member.
1649 views

error while mounting a cifs share

Hi,

if I mount a cifs share with the admin account, everything is ok
(cn=admin,O=UBC).

If I try to do it with a normal user in a different OU, then mounting is
not executed.

/var/log/cifs/cifs.log looks like:
Nov 28 10:31:42 seneca CIFS[14556]: WARNING: AUTH: Authentication failed
due to password mismatch for user cn=muehlbauer.OU=UBUsers.O=UBC, Err :-1642

Nov 28 10:31:42 seneca CIFS[14556]: WARNING: CODIR: SESNotLoggedIn:
Failed to authenticate user: muehlbauer from x.y.z.a, nwErr: -1642,
cifsErr: 0

Nov 28 10:31:42 seneca CIFS[14556]: WARNING: AUTH: SessionSetup : Login
Failed -nwLoginError is -1642, cifslogin err 0, dest ip :x.y.z.a

Configuration:

- SLES10-SP4 and OES2-SP3 (fully patched) => CIFS-share with access to NDS
- Standalone client only belonging to a workgroup with WinXP-SP3 without
Netware
Client (tried different login methods: "muehlbauer" oder
"seneca\muehlbauer" but
no success)
- Universal Password is set for OU=UBUsers.O=UBC

Any ideas?

Thanks and best regards

Bernhard
Labels (2)
0 Likes
7 Replies
Highlighted
Knowledge Partner
Knowledge Partner

Re: error while mounting a cifs share

On 28.11.2011 10:52, Bernhard Muehlbauer wrote:
> Hi,
>
> if I mount a cifs share with the admin account, everything is ok
> (cn=admin,O=UBC).
>
> If I try to do it with a normal user in a different OU, then mounting is
> not executed.
>
> /var/log/cifs/cifs.log looks like:
> Nov 28 10:31:42 seneca CIFS[14556]: WARNING: AUTH: Authentication failed
> due to password mismatch for user cn=muehlbauer.OU=UBUsers.O=UBC, Err
> :-1642
>
> Nov 28 10:31:42 seneca CIFS[14556]: WARNING: CODIR: SESNotLoggedIn:
> Failed to authenticate user: muehlbauer from x.y.z.a, nwErr: -1642,
> cifsErr: 0
>
> Nov 28 10:31:42 seneca CIFS[14556]: WARNING: AUTH: SessionSetup : Login
> Failed -nwLoginError is -1642, cifslogin err 0, dest ip :x.y.z.a
>
> Configuration:
>
> - SLES10-SP4 and OES2-SP3 (fully patched) => CIFS-share with access to NDS
> - Standalone client only belonging to a workgroup with WinXP-SP3 without
> Netware
> Client (tried different login methods: "muehlbauer" oder
> "seneca\muehlbauer" but
> no success)
> - Universal Password is set for OU=UBUsers.O=UBC
>
> Any ideas?


Well, the error message is loud and clear. Wrong password. There's
usually very few doubts that this error really means what it says.

You may have a universal password policy configured and assigned to the
user in question, but are you sure the universal password ever actually
got set for this user? E.G, did the user ever login to eDir with a NMAS
enabled client (which would then sync the NDS and UP, if the UP policy
is configured)?
You may want to try to manually set the universal password through iManager.

CU,
--
Massimo Rosen
Novell Knowledge Partner
No emails please!
http://www.cfc-it.de
CU,
--
Massimo Rosen
Micro Focus Knowledge Partner
No emails please!
http://www.cfc-it.de
0 Likes
Highlighted
Absent Member.
Absent Member.

Re: error while mounting a cifs share

Universal password policy configured and assigned to the users.

Universal password set in iManager for admin and muehlbauer
=> admin: ok
=> muehlbauer: error

May be it has something to do with different OUs?



> You may have a universal password policy configured and assigned to the
> user in question, but are you sure the universal password ever actually
> got set for this user? E.G, did the user ever login to eDir with a NMAS
> enabled client (which would then sync the NDS and UP, if the UP policy
> is configured)?
> You may want to try to manually set the universal password through
> iManager.
>
> CU,


0 Likes
Highlighted
Knowledge Partner
Knowledge Partner

Re: error while mounting a cifs share

On 28.11.2011 11:43, Bernhard Muehlbauer wrote:
> Universal password policy configured and assigned to the users.
>
> Universal password set in iManager for admin and muehlbauer
> => admin: ok
> => muehlbauer: error


What error?

> May be it has something to do with different OUs?


Possible. Where's the policy assigned to? Note that assignments to OUs
only flow down the tree to subcontainers, when the assigned OU is also a
eDir partition. Sounds like that's not the case here, and the UP policy
is simply not assigned to the users container.

CU,
--
Massimo Rosen
Novell Knowledge Partner
No emails please!
http://www.cfc-it.de
CU,
--
Massimo Rosen
Micro Focus Knowledge Partner
No emails please!
http://www.cfc-it.de
0 Likes
Highlighted
Absent Member.
Absent Member.

Re: error while mounting a cifs share

.... problem solved.
I had a mismatch in the passwords of NDS and UPW.

Yet one question. Is it absolutely neccessary to define
a new password in UPW or can the UPW be synced with
the password of NDS?
0 Likes
Highlighted
Knowledge Partner
Knowledge Partner

Re: error while mounting a cifs share

On 28.11.2011 14:19, Bernhard Muehlbauer wrote:
> ... problem solved.
> I had a mismatch in the passwords of NDS and UPW.
>
> Yet one question. Is it absolutely neccessary to define
> a new password in UPW or can the UPW be synced with
> the password of NDS?


The UP will automatically sync with the NDS password, as soon as a user
with a NMAS enabled client logs in to the tree, or when the password
gets chnaged from an NMAS enabled client (which includes ConsoleOne and
iManager).

E.G, a user now only has a ND password. His client has NMAS installed
and enabled (should be the default for any Novell client in the last 10
years or so). Now you assign a UP-Policy to that user.

The next time he logs in, the client "sees" the Policy, attempts to
login using the universal password, fails (it's not set yet), then
attempts to login with the NDS password, succeeds, and as soon as it
succeeds, will write the same password to the UP. From then on, only the
UP will be used, unless a client is used that doesn't have NMAS enabled.

CU,
--
Massimo Rosen
Novell Knowledge Partner
No emails please!
http://www.cfc-it.de
CU,
--
Massimo Rosen
Micro Focus Knowledge Partner
No emails please!
http://www.cfc-it.de
0 Likes
Highlighted
Absent Member.
Absent Member.

Re: error while mounting a cifs share

Massimo,

thanks for your detailed info.



0 Likes
Highlighted
Knowledge Partner
Knowledge Partner

Re: error while mounting a cifs share

On 29.11.2011 07:49, Bernhard Muehlbauer wrote:
> Massimo,
>
> thanks for your detailed info.
>


You're welcome.

A word of caution though: The UP is by default case-sensitive, whereas
the NDS password is not. That *can* occasionally lead to confusion.

E.G, a users password is "password" in NDS. Now he logs in the first
time after an universal password policy is set from his client, but he
typos his password as "passWord". That is what his UP will be set to,
and from then on, he can only login with "passWord", and "password" will
suddenly fail.

CU,
--
Massimo Rosen
Novell Knowledge Partner
No emails please!
http://www.cfc-it.de
CU,
--
Massimo Rosen
Micro Focus Knowledge Partner
No emails please!
http://www.cfc-it.de
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.