Ubuntu – How to mount CIFS shares in Linux without password, using domain credentials

centoscifssssdUbuntu

I have Ubuntu 18.04 and CentOS 7 boxes, they are members of Windows domain (using sssd).
Linux users need to mount CIFS shares from domains fileservers. What should be done in order to provide passwordless mount, using Kerberos?
(I see a similar question, unfortunately without accepted answer Ubuntu map CIFS / SMB share using active domain credentials without password file)

Best Answer

Done, using pam_mount (Ubuntu18.04, part of MS Windows domain based on sssd):

apt install keyutils libpam-mount
Added to /etc/security/pam_mount.conf.xml

Related Solutions

Authenticate with Kerberos to a CIFS share provided by OpenSolaris

Current builds of OpenSolaris do not support Kerberos authentication for CIFS shares. The feature is apparently "forthcoming". References:

Windows – Mount Remote CIFS/SMB Share as Folder

Just to map a network share directory you would use this command:

net use \\Server\ShareName\Directory

This mapping would:

not be persistent
would have to be established and authenticated at user login
you would access the share using the UNC path, and not a local drive letter

If you want to access the network share through a location on your local C: drive, you'll want to set up a symbolic link:

mklink /d  C:\Folder\ShareName \\Server\ShareName\Directory

Now when you navigate to C:\Folder\Share you'll see the contents of \\\Server\Sharename\Directory. You'll still need to provide authentication for the resource with something like net use (or just be logged into a domain account on a domain system that has access) otherwise the link will probably error out angrily.

Best Answer

Related Solutions

Authenticate with Kerberos to a CIFS share provided by OpenSolaris

Windows – Mount Remote CIFS/SMB Share as Folder

Related Topic