Rhel

Red Hat Enterprise Linux 7 - 掛載 Windows 共享問題

  • February 12, 2021

已經擁有共享和 NTFS 權限Everyone - 完全控制//10.180.102.11/Data.

我已經//10.180.102.11/Data在加入的文件伺服器域下設置了共享。

我想訪問 . 下的所有子目錄和文件//10.180.102.11/Data/IT_Folder/Projects

mount -t cifs //10.180.102.11/Data/IT_Folder/Projects /share -o username=guest,password="",vers=1.0

我越來越 NT_STATUS_ACCESS_DENIED

我需要安裝其他東西嗎?我需要配置一些東西嗎?

最後更新 :

SMB Session Authentication Failure

Client Name: \\xx.xx.xx.xx
Client Address: xx.xx.xx.xx:40006
User Name: 
Session ID: 0x204029000002D
Status: The user account has been automatically locked because too many invalid logon attempts or password change attempts have been requested. (0xC0000234)
SPN: session setup failed before the SPN could be queried
SPN Validation Policy: SPN optional / no validation

Guidance:

You should expect this error when attempting to connect to shares using incorrect credentials.

This error does not always indicate a problem with authorization, but mainly authentication. It is more common with non-Windows clients.

This error can occur when using incorrect usernames and passwords with NTLM, mismatched LmCompatibility settings between client and server, an incorrect service principal name, duplicate Kerberos service principal names, incorrect Kerberos ticket-granting service tickets, or Guest accounts without Guest access enabled

要做的第一件事是使用有效的使用者名和密碼,第二是停止使用過時的 SMB v1。

嘗試這樣的事情,用contoso.com您的 AD 域、realuser真正有效的使用者名和whatever相應的密碼替換。我在此範例中使用了 SMB v3.0,因為所有受支持的 Windows 伺服器都直接處理此問題。

mount -t cifs //10.180.102.11/Data/IT_Folder/Projects /share -o 'domain=contoso.com,username=realuser,password=whatever,vers=3.0'

一旦這可行,我強烈建議您將憑據從命令行移出並放入安全文件中。密碼仍然以明文形式儲存,但至少不在公開可讀的文件中

cat >/etc/smb_credentials <<'EOF'
domain=contoso.com
username=realuser
password=whatever
EOF

chown root:root /etc/smb_credentials
chmod 600 /etc/smb_credentials          # user: read/write, group+others: no access

mount -t cifs //10.180.102.11/Data/IT_Folder/Projects /share -o 'credentials=/etc/smb_credentials,vers=3.0'

引用自:https://unix.stackexchange.com/questions/634052