Commit 896a8fc2 authored May 26, 2013 by Jeff Layton Committed by Steve French Jun 24, 2013

cifs: update the default global_secflags to include "raw" NTLMv2

Before this patchset, the global_secflags could only offer up a single
sectype. With the new set though we have the ability to allow different
sectypes since we sort out the one to use after talking to the server.

Change the global_secflags to allow NTLMSSP or NTLMv2 by default. If the
server sets the extended security bit in the Negotiate response, then
we'll use NTLMSSP. If it doesn't then we'll use raw NTLMv2. Mounting a
LANMAN server will still require a sec= option by default.

Signed-off-by: Jeff Layton <jlayton@redhat.com>
Reviewed-by: Pavel Shilovsky <piastry@etersoft.ru>
Signed-off-by: Steve French <smfrench@gmail.com>

parent 3f618223

fs/cifs/cifsglob.h

+1 −1

Original line number	Diff line number	Diff line
		@@ -1340,7 +1340,7 @@ require use of the stronger protocol */
		#define CIFSSEC_MUST_SEAL 0x40040 /* not supported yet */
		#define CIFSSEC_MUST_NTLMSSP 0x80080 /* raw ntlmssp with ntlmv2 */

		#define CIFSSEC_DEF (CIFSSEC_MAY_SIGN \| CIFSSEC_MAY_NTLMSSP)
		#define CIFSSEC_DEF (CIFSSEC_MAY_SIGN \| CIFSSEC_MAY_NTLMV2 \| CIFSSEC_MAY_NTLMSSP)
		#define CIFSSEC_MAX (CIFSSEC_MUST_SIGN \| CIFSSEC_MUST_NTLMV2)
		#define CIFSSEC_AUTH_MASK (CIFSSEC_MAY_NTLM \| CIFSSEC_MAY_NTLMV2 \| CIFSSEC_MAY_LANMAN \| CIFSSEC_MAY_PLNTXT \| CIFSSEC_MAY_KRB5 \| CIFSSEC_MAY_NTLMSSP)
		/*

Admin message