PAM Admin cannot mount their CIFS share on a Windows 2019 server. It fails with the following error:
Error: PAM-CM-0058: CIFS mount operation unsuccessful. Mount point: <mount path> Hostname: <Hostname>
Server or Share had SMB Encryption set to "Enabled"
Release : 3.4.x, 4.0.x
Component : PRIVILEGED ACCESS MANAGEMENT
Had PAM Admin run the following command on their CIFS Server:
Get-SmbShare -Name <ShareName> | Format-List -Property *
which the following setting came back as True:
EncryptData : True
By default, when SMB Encryption is enabled for a file share or server, only SMB 3.0, 3.02, and 3.1.1 clients are allowed to access the specified file shares. This enforces the administrator's intent of safeguarding the data for all clients that access the shares.
Therefore in PAM, when this setting in True, the SMB Version needs to be set to 3.0
Alternatively this message can be caused by a trailing space in the share name: