Mounting an SMB ISO for Supermicro IPMI

Install and Configure Samba

Install samba a la these instructions.

Put the ISO in, e.g., /isos

Set up /etc/samba/smbd.conf something like

[share]
    comment = ISOs
    path = /isos
    browsable = yes
    writable = no
    read only = yes

And you create the authorised user

mgt.sjc.arrcus.com:/home/randy# smbpasswd -a randy
New SMB password:
Retype new SMB password:
Forcing Primary Group to 'Domain Users' for randy

Start and Stop Samba

systemctl restart smbd the server and try to mount it from the Supermicro IPMI. It does not mount. You do a tshark and see you have an auth problem.

# tshark -i ens5 -t a -f "port 139" -f "port 445"
...
20	14:59:34.465912	10.27.199.71	10.9.42.25	SMB	276	Session Setup AndX Request, User: \randy
11	14:59:34.416147	10.9.42.25	10.27.199.71	SMB	93	Session Setup AndX Response, Error: STATUS_LOGON_FAILURE

Make it Anonymous

You can spend infinite time trying to get the Supermicro IPMI to authenticate against your smbd, or ...

The hack is to set the share up to be without userid or password

[share]
    comment = ISOs
    path = /isos
    browsable = yes
    writable = no
    guest ok = yes
    guest account = nobody
    read only = yes

and then in the IPMI mount

smb-server-name-or-ip
\share\name-of-iso.iso

with blank username and password

Test

You can test from a host on the samba server's LAN with

/home/randy> smbclient '\\666.42.7.11\share'
Enter WORKGROUP\randy's password: 
Anonymous login successful
Try "help" to get a list of possible commands.
smb: \> ls
  .                                   D        0  Sun Jan 29 18:46:59 2023
  ..                                  D        0  Tue Jan 24 06:48:28 2023
  CorePure64-10.1.iso                 N 15548416  Tue Jun 11 09:47:24 2019
  super_grub2_disk_hybrid_2.04s1.iso      N 16361472  Sat Apr 25 22:07:30 2020

If you can not mount it after a bit; it may have gotten in some silly state. Log out of the IPMI, log back in, and try again.

Another problem that cost me a day, is some IPMI devices want ancient Samba protocols. So add

[global]
min protocol = NT1

A Bit of Security

Samba is a highly vulnerable protocol with a long history of disaster. When you are through using the server,

systemctl stop smbd
systemctl disable smbd

and re-enable and restart when you need it again.

2023.01.30

2.4 KiB Raw Permalink Blame History