Commit b78724b7 authored by J. Bruce Fields's avatar J. Bruce Fields
Browse files

nfsd4: fail attempts to request gss on the backchannel 



We don't support gss on the backchannel.  We should state that fact up
front rather than just letting things continue and later making the
client try to figure out why the backchannel isn't working.

Trond suggested instead returning NFS4ERR_NOENT.  I think it would be
tricky for the client to distinguish between the case "I don't support
gss on the backchannel" and "I can't find that in my cache, please
create another context and try that instead", and I'd prefer something
that currently doesn't have any other meaning for this operation, hence
the (somewhat arbitrary) NFS4ERR_ENCR_ALG_UNSUPP.

Signed-off-by: default avatarJ. Bruce Fields <bfields@redhat.com>
parent 57266a6e

fs/nfsd/nfs4state.c

+25 −0
Original line number Diff line number Diff line
@@ -1872,6 +1872,24 @@ static __be32 check_backchannel_attrs(struct nfsd4_channel_attrs *ca) 
	return nfs_ok;

}



static __be32 nfsd4_check_cb_sec(struct nfsd4_cb_sec *cbs)

{

	switch (cbs->flavor) {

	case RPC_AUTH_NULL:

	case RPC_AUTH_UNIX:

		return nfs_ok;

	default:

		/*

		 * GSS case: the spec doesn't allow us to return this

		 * error.  But it also doesn't allow us not to support

		 * GSS.

		 * I'd rather this fail hard than return some error the

		 * client might think it can already handle:

		 */

		return nfserr_encr_alg_unsupp;

	}

}



__be32

nfsd4_create_session(struct svc_rqst *rqstp,

		     struct nfsd4_compound_state *cstate,
@@ -1887,6 +1905,9 @@ nfsd4_create_session(struct svc_rqst *rqstp, 


	if (cr_ses->flags & ~SESSION4_FLAG_MASK_A)

		return nfserr_inval;

	status = nfsd4_check_cb_sec(&cr_ses->cb_sec);

	if (status)

		return status;

	status = check_forechannel_attrs(&cr_ses->fore_channel, nn);

	if (status)

		return status;
@@ -1996,7 +2017,11 @@ __be32 nfsd4_backchannel_ctl(struct svc_rqst *rqstp, struct nfsd4_compound_state 
{

	struct nfsd4_session *session = cstate->session;

	struct nfsd_net *nn = net_generic(SVC_NET(rqstp), nfsd_net_id);

	__be32 status;



	status = nfsd4_check_cb_sec(&bc->bc_cb_sec);

	if (status)

		return status;

	spin_lock(&nn->client_lock);

	session->se_cb_prog = bc->bc_cb_program;

	session->se_cb_sec = bc->bc_cb_sec;

CRA Git | Maintained and supported by SUSTech CRA and CCSE