Patch "fs/cifs: correctly to anonymous authentication for the NTLM(v2) authentication" has been added to the 4.5-stable tree
This is a note to let you know that I've just added the patch titled
fs/cifs: correctly to anonymous authentication for the NTLM(v2) authentication
to the 4.5-stable tree which can be found at:
http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git;a=summary
The filename of the patch is:
fs-cifs-correctly-to-anonymous-authentication-for-the-ntlm-v2-authentication.patch
and it can be found in the queue-4.5 subdirectory.
If you, or anyone else, feels it should not be added to the stable tree, please let <[email protected]> know about it.
Quoted 1 line
From
1a967d6c9b39c226be1b45f13acd4d8a5ab3dc44Mon Sep 17 00:00:00 2001
From: Stefan Metzmacher <[email protected]>
Date: Tue, 3 May 2016 10:52:30 +0200
Subject: fs/cifs: correctly to anonymous authentication for the NTLM(v2) authentication
From: Stefan Metzmacher <[email protected]>
commit 1a967d6c9b39c226be1b45f13acd4d8a5ab3dc44 upstream.
Only server which map unknown users to guest will allow access using a non-null NTLMv2_Response.
For Samba it's the "map to guest = bad user" option.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11913
--- fs/cifs/sess.c | 32 ++++++++++++++++++-------------- 1 file changed, 18 insertions(+), 14 deletions(-)
fs/cifs/sess.c +18 -14
@@ -895,22 +895,26 @@ sess_auth_ntlmv2(struct sess_data *sess_/* LM2 password would be here if we supported it */ pSMB->req_no_secext.CaseInsensitivePasswordLength =0 ; -/* calculate nlmv2 response and session key */ - rc =setup_ntlmv2_rsp (ses, sess_data->nls_cp); -if (rc) { -cifs_dbg (VFS ,"Error %d during NTLMv2 authentication\n" , rc); - goto out; - } +if (ses->user_name !=NULL ) { +/* calculate nlmv2 response and session key */ + rc =setup_ntlmv2_rsp (ses, sess_data->nls_cp); +if (rc) { +cifs_dbg (VFS ,"Error %d during NTLMv2 authentication\n" , rc); + goto out; + } -memcpy (bcc_ptr, ses->auth_key.response +CIFS_SESS_KEY_SIZE , - ses->auth_key.len -CIFS_SESS_KEY_SIZE ); - bcc_ptr += ses->auth_key.len -CIFS_SESS_KEY_SIZE ; +memcpy (bcc_ptr, ses->auth_key.response +CIFS_SESS_KEY_SIZE , + ses->auth_key.len -CIFS_SESS_KEY_SIZE ); + bcc_ptr += ses->auth_key.len -CIFS_SESS_KEY_SIZE ; -/* set case sensitive password length after tilen may get -* assigned, tilen is 0 otherwise. -*/ - pSMB->req_no_secext.CaseSensitivePasswordLength = -cpu_to_le16 (ses->auth_key.len -CIFS_SESS_KEY_SIZE ); +/* set case sensitive password length after tilen may get +* assigned, tilen is 0 otherwise. +*/ + pSMB->req_no_secext.CaseSensitivePasswordLength = +cpu_to_le16 (ses->auth_key.len -CIFS_SESS_KEY_SIZE ); + }else { + pSMB->req_no_secext.CaseSensitivePasswordLength =0 ; + }if (ses->capabilities &CAP_UNICODE ) {if (sess_data->iov[0 ].iov_len %2 ) {
Patches currently in stable-queue which might be from [email protected] are
queue-4.5/fs-cifs-correctly-to-anonymous-authentication-for-the-ntlm-v1-authentication.patch queue-4.5/fs-cifs-correctly-to-anonymous-authentication-for-the-lanman-authentication.patch queue-4.5/fs-cifs-correctly-to-anonymous-authentication-for-the-ntlm-v2-authentication.patch queue-4.5/fs-cifs-correctly-to-anonymous-authentication-via-ntlmssp.patch