Re: mounting CIFS share (tcp/455) with FreeBSD and mount_smbfs(8)

[Reko Turja]

-Original Message- 
From: O. Hartmann 
Subject: mounting CIFS share (tcp/455) with FreeBSD and mount_smbfs(8) 
>
> I need to mount a CIFS share from windows server 2012 r2 via CIFS, tcp/445 as 
> NetBIOS
> service (tcp/139) has been deprecated due to serious vulnerability issues. 
> .
> .
> .
> I desperately need CIFS and I need tcp/445 since tcp/139 is from now on 
> firewalled. 

There's actually alternative available that's far more UNIX-friendly and not 
depending on the SAMBA foibles.

https://technet.microsoft.com/en-us/library/jj574143.aspx?f=255&MSPPError=-2147217396

Of course, you need to have admin access to the server or get the admins enable 
NFS on it.

-Reko

(I've used the Windows NFS the other way around- FreeBSD NFS shares mounted 
with on Win7.)
___
freebsd-current@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-current
To unsubscribe, send any mail to "freebsd-current-unsubscr...@freebsd.org"

mounting CIFS share (tcp/455) with FreeBSD and mount_smbfs(8)

[O. Hartmann]

I need to mount a CIFS share from windows server 2012 r2 via CIFS, tcp/445 as 
NetBIOS
service (tcp/139) has been deprecated due to serious vulnerability issues. 

Until the disabling of NetBIOS and tcp/139 we used successfully autofs and 
mount_smbfs.
this is no longer working. I tried to force autofs/mount_smbfs to bind to port 
445 on the
server via ://@xxx.xxx.xxx.xxx:445/sharename, but this doesn't work.

Trying to mount a share from a samba 4.3 server (FreeBSD CURRENT, net/samba43, 
both most
recent sources), where I configured samba_server via smb ports = 445 to use 
port tcp 445
only and only SMB2 and SMB3 (server min protocol = SMB2) protocols via the 
following
command:

mount_smbfs -I xxx.xxx.xxx.xxx -U a_user -W \
WORKGROUP //a_u...@xxx.xxx.xxx.xxx:445/sharename /mnt

results in the error

mount_smbfs: unable to open connection: syserr = RPC struct is bad

Setting "smb ports = 139,445" and "server min protocol = NT1" seems to work, 
the share
can be bound, but this is SMB over tcp/139 and not CIFS.

I desperately need CIFS and I need tcp/445 since tcp/139 is from now on 
firewalled. 

So: what do I miss here?

Kind regards and thank you in advance,

O. Hartmann


pgp8RwhBhyUTM.pgp
Description: OpenPGP digital signature