Follow

Cannot Mount CIFS Share on RHEL Hardware with FIPS

Problem: RHEL compute nodes cannot mount CIFS shares to create instances from ISO, and RHEL storage nodes cannot mount CIFS shares to import VMs to templates

Cause: When FIPS mode is enabled the use of md4 and md5 are disabled which prevents users from using NTLM, NTLMv2 or NTLMSSP authentication. Also signing cannot be used since it uses md5. Any CIFS mount which uses these methods will break when FIPS mode is enabled.

Resolution:

  • Console or SSH into the compute and storage nodes
  • Check if FIPS is enabled: cat /proc/sys/crypto/fips_enabled. If it's set to 1, then FIPS is enabled and CIFS mounts will fail. If it's set to 0, then FIPS is disabled and CIFS mounts will succeed
  • To disable FIPS, run echo 0 > /proc/sys/crypto/fips_enabled
Was this article helpful?
0 out of 0 found this helpful
Have more questions? Submit a request

Comments