[linux-cifs-client] Kerberos5 support in cifs pathset [PATCH: 2/4] enables extended security in NEG... and SESSION_SETUP... requests when mounting with krb5i option

Q (Igor Mammedov) qwerty0987654321 at mail.ru
Tue Oct 30 15:23:19 GMT 2007


Jeff Layton wrote:
>> Jeff Layton wrote:
>> Simple pre parsing not only helps to decide whether do upcall or not, 
>> but can help to
>> determine if negotiation has been accepted by server or we need
>> continue negotiation.
> 
> I'd think that we can probably determine success or failure by the
> actual return code from the NegotiateProtocol reply itself. If it fails
> with certain return codes (maybe NT_STATUS_MORE_PROCESSING_REQUIRED?),
> then we'll know to hand the blob back to userspace and continue the
> negotiation.

 From what I've seen server often returns 
NT_STATUS_MORE_PROCESSING_REQUIRED when secblob is invalid so we cant 
use it for this purpose.


-- 

Best regards,

-------------------------
Igor Mammedov,
niallain "at" gmail.com






More information about the linux-cifs-client mailing list