Personal blog of Alex Muratov

Logger and CIFS share on a Windows 2008 R2 Server

Posted on November 22, 2013 | in ArcSight, Linux | by

ArcSightHere is a workaround for the issue with mounting a CIFS share (Windows 2008 R2 Server) at a Logger.
I followed usual procedure to configure a remote file system at a Logger.
All required parameters for CIFS share were specified:

step1

Surprisingly it did not work:

step2

I carefully checked parameters, login credentials – everything was correct. Furthermore, the same share was successfully mounted from another Linux box.

The next step was getting access to the Logger (via SSH) and checking logs:

Well, “logon failure”… It is weird, since credentials are correct!

What I found later, the CIFS kernel component has some security settings are located in the file /proc/fs/cifs/SecurityFlags

By default a Logger has this flag is set to 0x7:

This flag is the root cause of the problem – it is not compatible with Windows 2008 R2 Server. I had to change this flag to 0x81:

Now try again to mount the CIFS share:

step3

Success!

step4

Done.

TAGS: , ,

One Response to “Logger and CIFS share on a Windows 2008 R2 Server”

  1. Naseer says:

    Hi Alex,

    I have similar issue while configuring 2012R2 on RHEL 7.2 via CIFS for softeware logger v6.3.1. It says Logger cannot write to that location. infact i m able to read & write the files directly from RHEL server.

    any idea?

    Regards,
    MNM

Leave a Reply

BOINC

BOINC

Ads

Subscribe to Blog via Email

Enter your email address to subscribe to this blog and receive notifications of new posts by email.

Calendar

November 2013
M T W T F S S
« Jul   Jul »
 123
45678910
11121314151617
18192021222324
252627282930  
%d bloggers like this: