[pve-devel] applied: [PATCH pve-storage v2] cifs: use smbclient --use-kerberos for sec=krb5

[Fiona Ebner]

On Thu, 18 Dec 2025 10:32:43 +0100, Hannes Laimer wrote:
> With smbclient 4.22 (shipped with Debian trixie) `-U Guest -N` does
> not fall back to `no username` anymore, so our connection check can
> fail for Kerberos-authenticated shares. smbclient 4.17 (shipped with
> Debian bookworm) did fall back to an anonymous session, which then
> succeeded when Kerberos was used.
> 
> Passing `-U` is never correct for Kerberos. Detect Kerberos via
> `sec=krb5...` in the CIFS options and, in that case, avoid adding
> guest/username/domain mount options and run:
> 
> [...]

Applied, thanks!

[1/1] cifs: use smbclient --use-kerberos for sec=krb5
      commit: e6929878d90056ad914cacbc6fceca7ca14af7b6