[linux-cifs-client] cifs problems with ExtendedSecurity & asn1_octets_decode() function

[Steve French (IBM LTC)]

>

ExtendedSecurity is not completed in the client at this time.   NTLM and NTLM
encapsulated in Raw NTLMSSP are supported (not NTLM or Kerberos encapsulated in
SPNEGO - spnego is enabled using ExtendedSecurity which function is not
finished).   The suggested approach which I like best for finishing it off is
using ioctl upcalls to a slightly modified samba client tool which handles the
spnego packaging - and the cifs client treats each of the spnego negotion data
as opaque data at the end of the session setup frame


>
> From: bert hubert <ahu at ds9a.nl>
> Subject: [linux-cifs-client] cifs problems with ExtendedSecurity &
>         asn1_octets_decode() function
> To: linux-cifs-client at lists.samba.org
> Message-ID: <20040802113523.GA21156 at outpost.ds9a.nl>
> Content-Type: text/plain; charset=us-ascii
>
> All cifs versions I can see (in 2.6.6, in 2.6.8-rc2 and in the 1.17d
> tarball) die when ExtendedSecurity is on. With cifsFYI I see 'Need to call
> asn1_octets_decode() for this blah$@BLAH.NET', but this never happens, and
> this function is commented out.
>
> This message is followed by 'fs/cifs/connect.c: No session or bad tcon',
> 'CIFS vfs: leaving cifs_mount (xid = 6) rc = 1', 'CIFS vfs: cifs_mount
> failed w/return code = 1'.
>
> Then follows the  actual Oops is in do_kern_mount in dget. do_kern_mount was
> called from do_mount. 'Unable to handle kernel NULL pointer derference at
> virtual address 0000003d'.
>
> I turned on ExtendedSecurity because when trying to mount a share on an
> Windows 2000 sp4 machine, I get 'RCP_NT_PROTSEQ_NOT_SUPPORTED'. Any further
> clues would be appreciated, smbclient also can't talk to this machine,
> although it reports a 'general failure' instead, ethereal thinks this is a
> hardware failure.
>
> Thanks - please cc me as I'm not subscribed to this list.
>
> --
> http://www.PowerDNS.com      Open source, database driven DNS Software
> http://lartc.org           Linux Advanced Routing & Traffic Control HOWTO
>
> ------------------------------
>
> _______________________________________________
> linux-cifs-client mailing list
> linux-cifs-client at lists.samba.org
> http://lists.samba.org/mailman/listinfo/linux-cifs-client
>
> End of linux-cifs-client Digest, Vol 9, Issue 2
> ***********************************************