Patch "Fix SMB3.1.1 guest authentication to Samba" has been added to the 4.9-stable tree
This is a note to let you know that I've just added the patch titled
Fix SMB3.1.1 guest authentication to Samba
to the 4.9-stable tree which can be found at:
http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git;a=summary
The filename of the patch is:
fix-smb3.1.1-guest-authentication-to-samba.patch
and it can be found in the queue-4.9 subdirectory.
If you, or anyone else, feels it should not be added to the stable tree, please let <[email protected]> know about it.
Quoted 1 line
From
23586b66d84ba3184b8820277f3fc42761640f87Mon Sep 17 00:00:00 2001
From: Steve French <[email protected]>
Date: Mon, 18 Sep 2017 18:18:45 -0500
Subject: Fix SMB3.1.1 guest authentication to Samba
From: Steve French <[email protected]>
commit 23586b66d84ba3184b8820277f3fc42761640f87 upstream.
Samba rejects SMB3.1.1 dialect (vers=3.1.1) negotiate requests from the kernel client due to the two byte pad at the end of the negotiate contexts.
--- fs/cifs/smb2pdu.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)
fs/cifs/smb2pdu.c +1 -1
@@ -366,7 +366,7 @@ assemble_neg_contexts(struct smb2_negotibuild_encrypt_ctxt ((struct smb2_encryption_neg_context *)pneg_ctxt); req->NegotiateContextOffset =cpu_to_le32 (OFFSET_OF_NEG_CONTEXT ); req->NegotiateContextCount =cpu_to_le16 (2 ); -inc_rfc1001_len (req,4 +sizeof (struct smb2_preauth_neg_context ) +2 +inc_rfc1001_len (req,4 +sizeof (struct smb2_preauth_neg_context ) + sizeof(struct smb2_encryption_neg_context)); /* calculate hash */ }#else
Patches currently in stable-queue which might be from [email protected] are
queue-4.9/cifs-release-cifs-root_cred-after-exit_cifs.patch queue-4.9/smb3-warn-user-if-trying-to-sign-connection-that-authenticated-as-guest.patch queue-4.9/smb3-don-t-ignore-o_sync-o_dsync-and-o_direct-flags.patch queue-4.9/fix-smb3.1.1-guest-authentication-to-samba.patch queue-4.9/cifs-release-auth_key.response-for-reconnect.patch queue-4.9/smb-validate-negotiate-to-protect-against-downgrade-even-if-signing-off.patch