Skip to contentSkip to conversation

Let NFS3 krb5 mounts survive a krb5 ticket expiration

PATCH In review Mark Goodman 2 participants 2 messages Sep 23, 2004

Subsystems (3)
Networking NFS client NFS server
lore
Share & tools
lore

Mark Goodman

author
#0 lore raw

PATCH 1/1 Let NFS3 krb5 mounts survive a krb5 ticket expiration

In my environment, this patch lets NFS3 krb5 mounts survive a krb5 ticket expiration. It applies to 2.6.9-rc2. Please consider applying.

Signed-off-by Mark Goodman <[email protected]>
net/sunrpc/auth_gss/auth_gss.c 2004-09-23 00:06:56.159602248 -0700 renamed from net/sunrpc/auth_gss/auth_gss.c.orig 2004-09-23 00:07:28.891626224 -0700 +3 -0
@@ -742,6 +742,9 @@ gss_marshal(struct rpc_task *task, u32 *
                   &verf_buf, &mic);
    if(maj_stat != 0){
        printk("gss_marshal: gss_get_mic FAILED (%d)\n", maj_stat);
+        if (maj_stat == GSS_S_CONTEXT_EXPIRED) {
+            cred->cr_flags |= RPCAUTH_CRED_DEAD;
+        }
        goto out_put_ctx;
    }
    p = xdr_encode_opaque(p, NULL, mic.len);
#1 lore raw
Quoted 2 lines · Mark Goodman

In my environment, this patch lets NFS3 krb5 mounts survive a krb5 ticket expiration. It applies to 2.6.9-rc2. Please consider applying.

See patches 2, 3, and 4 at
http://www.citi.umich.edu/projects/nfsv4/linux/kernel-patches/2.6.9-rc2-1/
which should make it to mainline soon.

--Bruce Fields

Quoted 22 lines
Signed-off-by Mark Goodman <[email protected]>

--- linux-2.6.9-rc2/net/sunrpc/auth_gss/auth_gss.c.orig 2004-09-23
00:07:28.891626224 -0700
+++ linux-2.6.9-rc2/net/sunrpc/auth_gss/auth_gss.c 2004-09-23
00:06:56.159602248 -0700

net/sunrpc/auth_gss/auth_gss.c 2004-09-23 00:06:56.159602248 -0700 renamed from net/sunrpc/auth_gss/auth_gss.c.orig 2004-09-23 00:07:28.891626224 -0700 +3 -1
@@ -742,6 +742,9 @@ gss_marshal(struct rpc_task *task, u32 *
                   &verf_buf, &mic);
    if(maj_stat != 0){
        printk("gss_marshal: gss_get_mic FAILED (%d)\n", maj_stat);
+        if (maj_stat == GSS_S_CONTEXT_EXPIRED) {
+            cred->cr_flags |= RPCAUTH_CRED_DEAD;
+        }
        goto out_put_ctx;
    }
    p = xdr_encode_opaque(p, NULL, mic.len);
 
-

To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to [email protected]
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/