SDS@hd/Access/SMB - Revision history

H Schumacher: Corrected link

2026-04-10T09:18:39Z

Corrected link

← Older revision		Revision as of 11:18, 10 April 2026
Line 113:		Line 113:
	'''Nevertheless the ownership and access rights defined in this way are only simulated on the client and are not really transferred to the server.''' If access rights are changed on the client or files with other owners are created in shared folders, these changes only apply to the client and only until the next remount.		'''Nevertheless the ownership and access rights defined in this way are only simulated on the client and are not really transferred to the server.''' If access rights are changed on the client or files with other owners are created in shared folders, these changes only apply to the client and only until the next remount.

	If you need to work with the correct server side permissions, please follow the setup of a [[SDS@hd/Access/~~CIFS~~#~~Multiuser Environment~~\|MultiUser Setup]]		If you need to work with the correct server side permissions, please follow the setup of a [[SDS@hd/Access/SMB#Multiuser_Environment\|MultiUser Setup]]

	===== Preparations =====		===== Preparations =====

H Schumacher: added link to access page

2026-02-23T14:57:36Z

added link to access page

← Older revision		Revision as of 16:57, 23 February 2026
Line 3:		Line 3:
	== Prerequisites ==		== Prerequisites ==

	The SMB connection has to be established at least with protocol version SMB2.02, which is available since Windows Vista or OSX 10.7, and a NTLMv2 authentication level of "Send NTLMv2 responses only".		* The SMB connection has to be established at least with protocol version SMB2.02, which is available since Windows Vista or OSX 10.7, and a NTLMv2 authentication level of "Send NTLMv2 responses only".

	== Windows ==		== Windows ==
Line 10:		Line 10:

	=== Needed Information ===		=== Needed Information ===
	You need the following information:<br />		You need the following information (→ see [[SDS@hd/Access\|SDS@hd/Access]]):<br />
	'''Username:''' <code>BWSERVICESAD\<username></code><br />		'''Username:''' <code>BWSERVICESAD\<username></code><br />
	'''Password:''' <code><service_password></code><br />		'''Password:''' <code><service_password></code><br />
	'''Network Path''' in UNC syntax ''':''' <code>\\lsdf02.urz.uni-heidelberg.de\<sv_acronym></code>		'''Network Path''' in UNC syntax ''':''' <code>\\lsdf02.urz.uni-heidelberg.de\<sv_acronym></code>

	=== Instructions ===		=== Instructions ===

H Schumacher: Moved smbclient section to the end of the page

2026-01-15T15:50:45Z

Moved smbclient section to the end of the page

@@ Line 100: / Line 100: @@
 For this reason we can use the same [[Sds-hd_nfs#configure kerberos environment for SDS@hd|SSSD setup]] for cifs like we use for the kerberized nfs-Setup.
 -->
 === Mounting a SDS@hd Share ===
@@ Line 300: / Line 272: @@
 For further information about handling kerberos tickets take a look at [[SDS@hd/Access/NFS#Access_your_data|SDS@hd kerberos]]

H Schumacher: Tidied up section

2026-01-15T15:44:39Z

Tidied up section

← Older revision		Revision as of 17:44, 15 January 2026
Line 134:		Line 134:
	Information about settting up a kerberos environment for SDS@hd can be found [[SDS@hd/Access/Kerberos\|here]]'''.		Information about settting up a kerberos environment for SDS@hd can be found [[SDS@hd/Access/Kerberos\|here]]'''.

	==== ~~Tbd.~~ Single-User Environment ====		==== Single-User Environment ====

⚫	<pre>
	# new instructions
	# install smbclient
	# install ... see https://www.linode.com/docs/guides/linux-mount-smb-share/
	sudo nano /etc/fstab
	# add (leave out gid? gid needs explanation)
	//lsdf02.urz.uni-heidelberg.de/<sv_acronym> /mnt/mountpoint cifs user,vers=3,mfsymlinks,credentials=~/credentials,noauto 0 0
⚫	systemctl daemon-reload
	mount -t cifs -o username=hd_ac294,domain=BWSERVICESAD,vers=3,mfsymlinks //lsdf02.urz.uni-heidelberg.de/sd17D005 /mnt/mountpoint
	# credentials
	username=<username>
	password=<servicePassword>
	domain=BWSERVICESAD
⚫	</pre>

	A share can be mounted to a local directory, (e.g. /mnt/sds-hd ). Depending on your system setup, root privileges may be required.		A share can be mounted to a local directory, (e.g. /mnt/sds-hd ). Depending on your system setup, root privileges may be required.
Line 158:		Line 143:

	If you need to work with the correct server side permissions, please follow the setup of a [[SDS@hd/Access/CIFS#Multiuser Environment\|MultiUser Setup]]		If you need to work with the correct server side permissions, please follow the setup of a [[SDS@hd/Access/CIFS#Multiuser Environment\|MultiUser Setup]]

			===== Preparations =====
		⚫	<pre>
		⚫	# Create locally an empty directory to mount to
			mkdir </path/to/empty/folder>
		⚫	</pre>

	===== Mount over command line =====		===== Mount over command line =====

	<pre>		<pre>
⚫	# Create empty directory to mount to
	mkdir </mnt/sds-hd>

	# Mount
	sudo mount -t cifs -o username=<username>,domain=BWSERVICESAD,vers=3,mfsymlinks //lsdf02.urz.uni-heidelberg.de/<sv-acronym> </mnt/sds-hd>		sudo mount -t cifs -o username=<username>,domain=BWSERVICESAD,vers=3,mfsymlinks //lsdf02.urz.uni-heidelberg.de/<sv-acronym> </mnt/sds-hd>
	> Password:		> Password:

	# Check the details
⚫	df -h \| grep mnt
⚫	> //lsdf02.urz.uni-heidelberg.de/sd16j007 108T 6,6T 101T 7% /mnt/sds-hd
⚫	mount \| grep lsdf02
⚫	> //lsdf02.urz.uni-heidelberg.de/sd16j007 on /mnt/sds-hd type cifs > (rw,relatime,vers=3.1.1,cache=strict,username=xxxx,domain=BWSERVICESAD,uid=1000,forceuid,gid=0,noforcegid,addr=xxxxx,file_mode=0755,dir_mode=0755,soft,nounix,serverino,mapposix,rsize=1048576,wsize=1048576,echo_interval=60,actimeo=1)
	</pre>		</pre>

Line 179:		Line 159:

	<pre>		<pre>
	# Create empty directory to mount to
	mkdir </mnt/mountpoint>

	# Open /etc/fstab		# Open /etc/fstab
	sudo nano /etc/fstab		sudo nano /etc/fstab
	# Add the following		# Add the following
	//lsdf02.urz.uni-heidelberg.de/<sv_acronym> <~~mnt~~/~~mountpoint~~> cifs uid=1000,gid=1000,user,vers=3,mfsymlinks,credentials=<$HOME/credentialsfile>,noauto 0 0		//lsdf02.urz.uni-heidelberg.de/<sv_acronym> </path/to/empty/folder> cifs uid=1000,gid=1000,user,vers=3,mfsymlinks,credentials=<$HOME/.credentialsfile>,noauto 0 0
			# Make the system use the changed file
		⚫	systemctl daemon-reload

	# Make credentialsfile		# Make credentialsfile
	cat /<$HOME/credentialsfile>		cat /<$HOME/.credentialsfile>
	username=ab_ xy123		username=ab_ xy123
	password=<~~servicepassword~~>		password=<servicePassword>
	domain=BWSERVICESAD		domain=BWSERVICESAD

			# Mount by providing the same path as was used in /etc/fstab
	# Invoke the prepared mount
	mount </~~mnt~~/~~mountpoint~~>		mount </path/to/empty/folder>
			</pre>

	# Check ~~the~~ details		===== Check details =====
			<pre>
	mount \| grep cifs
		⚫	df -h \| grep mnt
	//lsdf02.urz.uni-heidelberg.de/sd16j007 on /mnt/mountpoint type cifs (rw,relatime,vers=3.1.1,cache=strict,username=xxxx,domain=BWSERVICESAD,uid=1000,forceuid,gid=0,noforcegid,addr=xxxxx,file_mode=0755,dir_mode=0755,soft,nounix,serverino,mapposix,rsize=1048576,wsize=1048576,echo_interval=60,actimeo=1)
		⚫	> //lsdf02.urz.uni-heidelberg.de/sd16j007 108T 6,6T 101T 7% /mnt/sds-hd
		⚫	mount \| grep lsdf02
		⚫	> //lsdf02.urz.uni-heidelberg.de/sd16j007 on /mnt/sds-hd type cifs > (rw,relatime,vers=3.1.1,cache=strict,username=xxxx,domain=BWSERVICESAD,uid=1000,forceuid,gid=0,noforcegid,addr=xxxxx,file_mode=0755,dir_mode=0755,soft,nounix,serverino,mapposix,rsize=1048576,wsize=1048576,echo_interval=60,actimeo=1)
			</pre>

			===== Remove mount =====
			<pre>
			umount </path/to/mounted/folder>
	</pre>		</pre>

H Schumacher: changed formatting

2026-01-15T15:18:14Z

changed formatting

← Older revision		Revision as of 17:18, 15 January 2026
Line 160:		Line 160:

	===== Mount over command line =====		===== Mount over command line =====

	'''Example:'''

	<pre>		<pre>
			# Create empty directory to mount to
	$ mkdir /mnt/sds-hd		mkdir </mnt/sds-hd>

			# Mount
	$ sudo mount -t cifs -o username=~~hd_xy123~~,domain=BWSERVICESAD,vers=3,mfsymlinks //lsdf02.urz.uni-heidelberg.de/<sv-acronym> /mnt/sds-hd		sudo mount -t cifs -o username=<username>,domain=BWSERVICESAD,vers=3,mfsymlinks //lsdf02.urz.uni-heidelberg.de/<sv-acronym> </mnt/sds-hd>
	Password:		> Password:

			# Check the details
	$ df -h \| grep ~~sds-hd~~		df -h \| grep mnt
	//lsdf02.urz.uni-heidelberg.de/sd16j007 108T 6,6T 101T 7% /mnt/sds-hd		> //lsdf02.urz.uni-heidelberg.de/sd16j007 108T 6,6T 101T 7% /mnt/sds-hd

		⚫	mount \| grep lsdf02
	$ cd /mnt/sds-hd/
		⚫	> //lsdf02.urz.uni-heidelberg.de/sd16j007 on /mnt/sds-hd type cifs > (rw,relatime,vers=3.1.1,cache=strict,username=xxxx,domain=BWSERVICESAD,uid=1000,forceuid,gid=0,noforcegid,addr=xxxxx,file_mode=0755,dir_mode=0755,soft,nounix,serverino,mapposix,rsize=1048576,wsize=1048576,echo_interval=60,actimeo=1)
	$ ls
	</pre>
	Verify the success of the mount invoking the mount command without any arguments:
	<pre>
⚫	$ mount \| grep lsdf02
⚫	//lsdf02.urz.uni-heidelberg.de/sd16j007 on /mnt/sds-hd type cifs (rw,relatime,vers=3.1.1,cache=strict,username=xxxx,domain=BWSERVICESAD,uid=1000,forceuid,gid=0,noforcegid,addr=xxxxx,file_mode=0755,dir_mode=0755,soft,nounix,serverino,mapposix,rsize=1048576,wsize=1048576,echo_interval=60,actimeo=1)
	</pre>		</pre>

H Schumacher: Added comments

2026-01-15T15:08:38Z

Added comments

← Older revision		Revision as of 17:08, 15 January 2026
Line 182:		Line 182:

	===== Mount over /etc/fstab =====		===== Mount over /etc/fstab =====

	'''Example:'''

	<pre>		<pre>
			# Create empty directory to mount to
	$ mkdir /mnt/mountpoint		mkdir </mnt/mountpoint>

	/etc/fstab		# Open /etc/fstab
			sudo nano /etc/fstab
⚫	//lsdf02.urz.uni-heidelberg.de/<sv_acronym> /mnt/mountpoint cifs uid=~~<YOUR_UID>~~,gid=~~<YOUR_GID>~~,user,vers=3,mfsymlinks,credentials=<~~path_to_user_HOME>~~/credentialsfile,noauto 0 0
			# Add the following
		⚫	//lsdf02.urz.uni-heidelberg.de/<sv_acronym> <mnt/mountpoint> cifs uid=1000,gid=1000,user,vers=3,mfsymlinks,credentials=<$HOME/credentialsfile>,noauto 0 0

	$ ~~cat~~ ~~/path_to_user_HOME/~~credentialsfile		# Make credentialsfile
			cat /<$HOME/credentialsfile>
	username=~~hd_~~ xy123		username=ab_ xy123
	password=<your_servicepassword>
			password=<servicepassword>
	domain=BWSERVICESAD		domain=BWSERVICESAD

			# Invoke the prepared mount
	$ mount /mnt/mountpoint		mount </mnt/mountpoint>
	</pre>

	Verify the success of the mount invoking the mount command without any arguments:
			# Check the details
	<pre>
	$ mount \| grep cifs		mount \| grep cifs
	//lsdf02.urz.uni-heidelberg.de/sd16j007 on /mnt/mountpoint type cifs (rw,relatime,vers=3.1.1,cache=strict,username=xxxx,domain=BWSERVICESAD,uid=1000,forceuid,gid=0,noforcegid,addr=xxxxx,file_mode=0755,dir_mode=0755,soft,nounix,serverino,mapposix,rsize=1048576,wsize=1048576,echo_interval=60,actimeo=1)		//lsdf02.urz.uni-heidelberg.de/sd16j007 on /mnt/mountpoint type cifs (rw,relatime,vers=3.1.1,cache=strict,username=xxxx,domain=BWSERVICESAD,uid=1000,forceuid,gid=0,noforcegid,addr=xxxxx,file_mode=0755,dir_mode=0755,soft,nounix,serverino,mapposix,rsize=1048576,wsize=1048576,echo_interval=60,actimeo=1)
	</pre>		</pre>

H Schumacher: Troubleshooting section added

2026-01-13T17:09:50Z

Troubleshooting section added

← Older revision		Revision as of 19:09, 13 January 2026
Line 41:		Line 41:

	<li><p>After logging in successfully, your network drive will appear under ''This PC''. You can now manipulate your files as accustomed.</p></li></ol>		<li><p>After logging in successfully, your network drive will appear under ''This PC''. You can now manipulate your files as accustomed.</p></li></ol>

			=== Troubleshooting ===
			* Errors:
			: This network folder is currently connected under a different name and password. Disconnect the already existing connection.
			: Multiple connections to a server from the same user while using different usernames is not allowed.
			: Disconnect old connections.
			*:: Solutions:
			:: Disconnect already exsting connections: Right click on "My PC". Click "Further Options". Click "Disconnect Drives". Keep in mind that Windows can't connect multiple network drives when they have different login information.
			:: Remove / adjust the login information by going to the credential management (Anmeldeinformationsverwaltung).
			* Error: "Your domain is not available. Make sure that you're connected to your organizational network."
			*: Solutions:
			: Make sure to be in the correct network, for example by connecting via VPN.
			: Do not use LAN and WLAN at the same time.

	== MacOS ==		== MacOS ==

H Schumacher: Added warning regarding current file deletion issue

2025-08-28T08:14:37Z

Added warning regarding current file deletion issue

← Older revision		Revision as of 10:14, 28 August 2025
Line 192:		Line 192:

	==== Multiuser Environment ====		==== Multiuser Environment ====

			{\|style="background:#ffdeee; width:100%;"
			\|style="padding:5px; background:#f2cece; text-align:left"\|
			[[Image:Attention.svg\|center\|25px]]
			\|style="padding:5px; background:#f2cece; text-align:left"\|
			At the moment, file deletion is not possible with this setup. We are working on solving the issue.
			\|}

	By default, CIFS mounts only use a single set of user credentials (the mount credentials) when accessing a share. To support different user session on the same mountpoint and the correct permission/ownership processing, the mount options <pre>multiuser,cifsacl</pre> have to be used. Because the kernel cannot prompt for passwords, '''multiuser mounts are limited to mounts using passwordless sec= options, like with sec=krb5. Information about settting up a kerberos environment can be found [[SDS@hd/Access/Kerberos\|here]]'''		By default, CIFS mounts only use a single set of user credentials (the mount credentials) when accessing a share. To support different user session on the same mountpoint and the correct permission/ownership processing, the mount options <pre>multiuser,cifsacl</pre> have to be used. Because the kernel cannot prompt for passwords, '''multiuser mounts are limited to mounts using passwordless sec= options, like with sec=krb5. Information about settting up a kerberos environment can be found [[SDS@hd/Access/Kerberos\|here]]'''

H Schumacher: Removed Windows smb mount root folder option because it is not working

2025-03-06T18:59:41Z

Removed Windows smb mount root folder option because it is not working

← Older revision		Revision as of 20:59, 6 March 2025
Line 12:		Line 12:
	You need the following information:<br />		You need the following information:<br />
	'''Username:''' <code>BWSERVICESAD\<username></code><br />		'''Username:''' <code>BWSERVICESAD\<username></code><br />
	'''Password:''' ~~''ServicePassword''~~<br />		'''Password:''' <code><service_password></code><br />
	'''Network Path''' in UNC syntax ''':'''		'''Network Path''' in UNC syntax ''':''' <code>\\lsdf02.urz.uni-heidelberg.de\<sv_acronym></code>

	<syntaxhighlight lang="bash">
	# for mounting the root folder
	\\lsdf02.urz.uni-heidelberg.de\
	# for mounting a specific SV
	\\lsdf02.urz.uni-heidelberg.de\<sv-acronym>
	</syntaxhighlight>

	=== Instructions ===		=== Instructions ===

H Schumacher: formatting corrected

2025-01-10T11:30:02Z

formatting corrected

← Older revision		Revision as of 13:30, 10 January 2025
Line 15:		Line 15:
	'''Network Path''' in UNC syntax ''':'''		'''Network Path''' in UNC syntax ''':'''

	<syntaxhighlight lang="bash">~~# for mounting the root folder~~		<syntaxhighlight lang="bash">
		⚫	# for mounting the root folder
	\\lsdf02.urz.uni-heidelberg.de\		\\lsdf02.urz.uni-heidelberg.de\
⚫	# for mounting a ~~specific~~ SV
			# for mounting a specific SV
	\\lsdf02.urz.uni-heidelberg.de\<sv-acronym> ~~</syntaxhighlight>~~		\\lsdf02.urz.uni-heidelberg.de\<sv-acronym>
			</syntaxhighlight>

	=== Instructions ===		=== Instructions ===
Line 47:		Line 49:
	<li><p>After logging in successfully, your network drive will appear under ''This PC''. You can now manipulate your files as accustomed.</p></li></ol>		<li><p>After logging in successfully, your network drive will appear under ''This PC''. You can now manipulate your files as accustomed.</p></li></ol>

	== ~~Mac~~ ==		== MacOS ==

	Create a network drive with Finder.		Create a network drive with Finder.