]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
smb3: add support for IAKerb
authorSteve French <stfrench@microsoft.com>
Tue, 28 Jan 2025 07:04:23 +0000 (01:04 -0600)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Sat, 22 Mar 2025 19:54:28 +0000 (12:54 -0700)
commitbeb97eba4cd840462f18cb2b2539b0240e04f553
treeb70838c6261e544c9ae4117d46d898e4813b89a7
parentf415148282969058eec1e14f90170916a30e32be
smb3: add support for IAKerb

[ Upstream commit eea5119fa5979c350af5783a8148eacdd4219715 ]

There are now more servers which advertise support for IAKerb (passthrough
Kerberos authentication via proxy).  IAKerb is a public extension industry
standard Kerberos protocol that allows a client without line-of-sight
to a Domain Controller to authenticate. There can be cases where we
would fail to mount if the server only advertises the OID for IAKerb
in SPNEGO/GSSAPI.  Add code to allow us to still upcall to userspace
in these cases to obtain the Kerberos ticket.

Signed-off-by: Steve French <stfrench@microsoft.com>
Stable-dep-of: 605b249ea967 ("smb: client: Fix match_session bug preventing session reuse")
Signed-off-by: Sasha Levin <sashal@kernel.org>
fs/smb/client/asn1.c
fs/smb/client/cifs_spnego.c
fs/smb/client/cifsglob.h
fs/smb/client/sess.c
fs/smb/client/smb2pdu.c