IBM Support

IBM AIX: Install and configure smbc.rte

How To


Summary

This document describes how to install and configure the AIX® SMB client, smbc.rte.

Environment

NOTE: for the most current and complete installation and configuration instructions, refer to the document titled "SMBC_Configuration", available for download at https://www.ibm.com/resources/mrs/assets?source=aixbp in the "SMB client for AIX 3.0.2" offering.
The smbc.rte client is supported on these levels of AIX.
  • AIX 7.1 TL5 SP7 and higher
  • AIX 7.2 TL4 SP2 and higher
  • AIX 7.3 TL0 and higher
For AIX 7.1, download and install the file set in smbc_302_fileset_71.tar.gz. For AIX 7.2 or 7.3, download and install the file set in smbc_302_fileset_72.tar.gz.

Steps

The installation and configuration instructions make these assumptions.
  • The Kerberos server is Windows Active Directory
  • Active Directory is already configured with a domain for authenticating share users
  • Kerberos is not already installed and configured on AIX
  • The Kerberos Key Distribution Center (KDC) server is the same as the Kerberos admin server
  • There is only one Kerberos domain
1. Download the latest versions of the SMB client and Kerberos libraries from https://www.ibm.com/resources/mrs/assets?source=aixbp. The offering names are "SMB client for AIX 3.0.2" and "IBM Network Authentication Service for AIX 1.x.x.x".
2. Extract the contents of the Network Authentication Service tar file into a directory.
3. In that directory, install the file sets krb5.client.rte and krb5.lic.
4. Run the command mkkrb5clnt to configure Kerberos on AIX. You need the following information about the Kerberos server to be able to run the command.
  • The Kerberos realm name, which is typically the same as the Active Directory domain name in which the SMB share user exists
  • The fully qualified DNS domain name of the Kerberos server
  • The DNS domain portion of the Kerberos server DNS name
This example of the mkkrb5clnt command uses these values.
  • Kerberos server name: kserv.lab.ibm.com
  • Kerberos realm: KAD.LAB
  • Kerberos domain name (usually the same as the DNS domain name): lab.ibm.com
NOTE: These values are EXAMPLES ONLY. Do NOT use them on your system. You must substitute them with appropriate values for your environment.
# mkkrb5clnt -r KAD.LAB -d lab.ibm.com -s kserv.lab.ibm.com -c kserv.lab.ibm.com -D -i files
CRITICAL: The Kerberos realm name is case-sensitive. Most of the time, it must be specified in all uppercase letters, which is especially true with Active Directory. The Kerberos server and domain names can be in uppercase or lowercase; lowercase is recommended.
5. If the SMB share user exists, skip to step 7.
6. Create an SMB share user in Active Directory to mount shares onto AIX. The password for this user must be set to not require a password change at the next login and set to never expire. Do not create a corresponding user on AIX.
7. Grant the SMB share user access to the share or shares to be mounted on AIX.
8. Install the smbc.rte file set.
9. Mount the SMB share onto AIX. This example uses these values:
  • SMB share server: shareserv.lab.ibm.com
  • Kerberos realm: KAD.LAB
  • SMB share name: fileshare
  • AIX mount point: /mnt
  • SMB share user: smbcuser
  • SMB share user password: Passw0rd
NOTE: These values are EXAMPLES ONLY. Do NOT use them on your system. You must substitute them with appropriate values for your environment.
# mount -v smbc -n shareserv.lab.ibm.com/smbcuser/Passw0rd -o wrkgrp=KAD.LAB /fileshare /mnt
If the share fails to mount, open a support case, follow the instructions at https://www.ibm.com/support/pages/node/1396083 to gather test case data, and upload it to the case.

Additional Information

SUPPORT:

If the instructions in this document do not lead to resolution of the problem, follow these instructions to open a case.  The product must be under warranty or have an active and valid support contract.

a.  Document or take screen captures of all symptoms, errors, or messages.

b.  Capture any logs or data relevant to the issue.

c.  Contact IBM® to open a case.

   -For electronic support, visit the IBM Support Community:
     https://www.ibm.com/mysupport
   -If you require telephone support, visit this web page:
      https://www.ibm.com/planetwide/

d.  Provide a detailed description of the issue and reference this technote.

e.  Upload all of the details and data to the case.

   -You can attach files to the case in the IBM Support Community, or
   -Upload data to IBM test case server analysis at this URL:

    http://www.ibm.com/support/docview.wss?uid=ibm10733581

f.  Click here to submit feedback for this document.

Document Location

Worldwide

[{"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SWG10","label":"AIX"},"Component":"","Platform":[{"code":"PF002","label":"AIX"}],"Version":"All Versions","Edition":"","Line of Business":{"code":"LOB08","label":"Cognitive Systems"}}]

Document Information

Modified date:
21 August 2023

UID

ibm11275148

Page Feedback