[linux-cifs-client] Kerberos5 support in cifs pathset [PATCH:
2/4] enables extended security in NEG... and SESSION_SETUP... requests
when mounting with krb5i option
Q (Igor Mammedov)
qwerty0987654321 at mail.ru
Tue Oct 30 15:23:19 GMT 2007
Jeff Layton wrote:
>> Jeff Layton wrote:
>> Simple pre parsing not only helps to decide whether do upcall or not,
>> but can help to
>> determine if negotiation has been accepted by server or we need
>> continue negotiation.
>
> I'd think that we can probably determine success or failure by the
> actual return code from the NegotiateProtocol reply itself. If it fails
> with certain return codes (maybe NT_STATUS_MORE_PROCESSING_REQUIRED?),
> then we'll know to hand the blob back to userspace and continue the
> negotiation.
From what I've seen server often returns
NT_STATUS_MORE_PROCESSING_REQUIRED when secblob is invalid so we cant
use it for this purpose.
--
Best regards,
-------------------------
Igor Mammedov,
niallain "at" gmail.com
More information about the linux-cifs-client
mailing list