All of lore.kernel.org
 help / color / mirror / Atom feed
* [PATCH] cifs: ignore everything in SPNEGO blob after mechTypes
@ 2013-03-11 13:52 Jeff Layton
       [not found] ` <1363009939-2264-1-git-send-email-jlayton-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org>
  0 siblings, 1 reply; 6+ messages in thread
From: Jeff Layton @ 2013-03-11 13:52 UTC (permalink / raw)
  To: smfrench-Re5JQEeQqe8AvxtiuMwx3w
  Cc: linux-cifs-u79uwXL29TY76Z2rM5mHXA,
	jason-U1lxkLAfC+FTYOaJdQCKXFaTQe2KTcn/,
	elliot.li.tech-Re5JQEeQqe8AvxtiuMwx3w

We've had several reports of people attempting to mount Windows 8 shares
and getting failures with a return code of -EINVAL. The default sec=
mode changed recently to sec=ntlmssp. With that, we expect and parse a
SPNEGO blob from the server in the NEGOTIATE reply.

The current decode_negTokenInit function first parses all of the
mechTypes and then tries to parse the rest of the negTokenInit reply.
The parser however currently expects a mechListMIC or nothing to follow the
mechTypes, but Windows 8 puts a mechToken field there instead to carry
some info for the new NegoEx stuff.

In practice, we don't do anything with the fields after the mechTypes
anyway so I don't see any real benefit in continuing to parse them.
This patch just has the kernel ignore the fields after the mechTypes.
We'll probably need to reinstate some of this if we ever want to support
NegoEx.

Reported-by: Jason Burgess <jason-U1lxkLAfC+FTYOaJdQCKXFaTQe2KTcn/@public.gmane.org>
Reported-by: Yan Li <elliot.li.tech-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org>
Signed-off-by: Jeff Layton <jlayton-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org>
---
 fs/cifs/asn1.c | 53 +++++------------------------------------------------
 1 file changed, 5 insertions(+), 48 deletions(-)

diff --git a/fs/cifs/asn1.c b/fs/cifs/asn1.c
index cfd1ce3..1d36db1 100644
--- a/fs/cifs/asn1.c
+++ b/fs/cifs/asn1.c
@@ -614,53 +614,10 @@ decode_negTokenInit(unsigned char *security_blob, int length,
 		}
 	}
 
-	/* mechlistMIC */
-	if (asn1_header_decode(&ctx, &end, &cls, &con, &tag) == 0) {
-		/* Check if we have reached the end of the blob, but with
-		   no mechListMic (e.g. NTLMSSP instead of KRB5) */
-		if (ctx.error == ASN1_ERR_DEC_EMPTY)
-			goto decode_negtoken_exit;
-		cFYI(1, "Error decoding last part negTokenInit exit3");
-		return 0;
-	} else if ((cls != ASN1_CTX) || (con != ASN1_CON)) {
-		/* tag = 3 indicating mechListMIC */
-		cFYI(1, "Exit 4 cls = %d con = %d tag = %d end = %p (%d)",
-			cls, con, tag, end, *end);
-		return 0;
-	}
-
-	/* sequence */
-	if (asn1_header_decode(&ctx, &end, &cls, &con, &tag) == 0) {
-		cFYI(1, "Error decoding last part negTokenInit exit5");
-		return 0;
-	} else if ((cls != ASN1_UNI) || (con != ASN1_CON)
-		   || (tag != ASN1_SEQ)) {
-		cFYI(1, "cls = %d con = %d tag = %d end = %p (%d)",
-			cls, con, tag, end, *end);
-	}
-
-	/* sequence of */
-	if (asn1_header_decode(&ctx, &end, &cls, &con, &tag) == 0) {
-		cFYI(1, "Error decoding last part negTokenInit exit 7");
-		return 0;
-	} else if ((cls != ASN1_CTX) || (con != ASN1_CON)) {
-		cFYI(1, "Exit 8 cls = %d con = %d tag = %d end = %p (%d)",
-			cls, con, tag, end, *end);
-		return 0;
-	}
-
-	/* general string */
-	if (asn1_header_decode(&ctx, &end, &cls, &con, &tag) == 0) {
-		cFYI(1, "Error decoding last part negTokenInit exit9");
-		return 0;
-	} else if ((cls != ASN1_UNI) || (con != ASN1_PRI)
-		   || (tag != ASN1_GENSTR)) {
-		cFYI(1, "Exit10 cls = %d con = %d tag = %d end = %p (%d)",
-			cls, con, tag, end, *end);
-		return 0;
-	}
-	cFYI(1, "Need to call asn1_octets_decode() function for %s",
-		ctx.pointer);	/* is this UTF-8 or ASCII? */
-decode_negtoken_exit:
+	/*
+	 * We currently ignore anything at the end of the SPNEGO blob after
+	 * the mechTypes have been parsed, since none of that info is
+	 * used at the moment.
+	 */
 	return 1;
 }
-- 
1.7.11.7

^ permalink raw reply related	[flat|nested] 6+ messages in thread

* Re: [PATCH] cifs: ignore everything in SPNEGO blob after mechTypes
       [not found] ` <1363009939-2264-1-git-send-email-jlayton-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org>
@ 2013-03-12 18:27   ` Yan Li
       [not found]     ` <D964BE89-1509-4A58-B079-37F17449F4F5-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org>
  2013-03-17 14:37   ` Steve French
  1 sibling, 1 reply; 6+ messages in thread
From: Yan Li @ 2013-03-12 18:27 UTC (permalink / raw)
  To: Jeff Layton, smfrench-Re5JQEeQqe8AvxtiuMwx3w,
	linux-cifs-u79uwXL29TY76Z2rM5mHXA,
	jason-U1lxkLAfC+FTYOaJdQCKXFaTQe2KTcn/

Yes, this patch fixed the problem in the current kernel we encountered when trying to mount a directory shared from a Windows 8 Pro system.

Yan Li

On Mar 11, 2013, at 6:52 AM, Jeff Layton <jlayton-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org> wrote:

> We've had several reports of people attempting to mount Windows 8 shares
> and getting failures with a return code of -EINVAL. The default sec=
> mode changed recently to sec=ntlmssp. With that, we expect and parse a
> SPNEGO blob from the server in the NEGOTIATE reply.
> 
> The current decode_negTokenInit function first parses all of the
> mechTypes and then tries to parse the rest of the negTokenInit reply.
> The parser however currently expects a mechListMIC or nothing to follow the
> mechTypes, but Windows 8 puts a mechToken field there instead to carry
> some info for the new NegoEx stuff.
> 
> In practice, we don't do anything with the fields after the mechTypes
> anyway so I don't see any real benefit in continuing to parse them.
> This patch just has the kernel ignore the fields after the mechTypes.
> We'll probably need to reinstate some of this if we ever want to support
> NegoEx.
> 
> Reported-by: Jason Burgess <jason-U1lxkLAfC+FTYOaJdQCKXFaTQe2KTcn/@public.gmane.org>
> Reported-by: Yan Li <elliot.li.tech-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org>
> Signed-off-by: Jeff Layton <jlayton-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org>
> ---
> fs/cifs/asn1.c | 53 +++++------------------------------------------------
> 1 file changed, 5 insertions(+), 48 deletions(-)
> 
> diff --git a/fs/cifs/asn1.c b/fs/cifs/asn1.c
> index cfd1ce3..1d36db1 100644
> --- a/fs/cifs/asn1.c
> +++ b/fs/cifs/asn1.c
> @@ -614,53 +614,10 @@ decode_negTokenInit(unsigned char *security_blob, int length,
> 		}
> 	}
> 
> -	/* mechlistMIC */
> -	if (asn1_header_decode(&ctx, &end, &cls, &con, &tag) == 0) {
> -		/* Check if we have reached the end of the blob, but with
> -		   no mechListMic (e.g. NTLMSSP instead of KRB5) */
> -		if (ctx.error == ASN1_ERR_DEC_EMPTY)
> -			goto decode_negtoken_exit;
> -		cFYI(1, "Error decoding last part negTokenInit exit3");
> -		return 0;
> -	} else if ((cls != ASN1_CTX) || (con != ASN1_CON)) {
> -		/* tag = 3 indicating mechListMIC */
> -		cFYI(1, "Exit 4 cls = %d con = %d tag = %d end = %p (%d)",
> -			cls, con, tag, end, *end);
> -		return 0;
> -	}
> -
> -	/* sequence */
> -	if (asn1_header_decode(&ctx, &end, &cls, &con, &tag) == 0) {
> -		cFYI(1, "Error decoding last part negTokenInit exit5");
> -		return 0;
> -	} else if ((cls != ASN1_UNI) || (con != ASN1_CON)
> -		   || (tag != ASN1_SEQ)) {
> -		cFYI(1, "cls = %d con = %d tag = %d end = %p (%d)",
> -			cls, con, tag, end, *end);
> -	}
> -
> -	/* sequence of */
> -	if (asn1_header_decode(&ctx, &end, &cls, &con, &tag) == 0) {
> -		cFYI(1, "Error decoding last part negTokenInit exit 7");
> -		return 0;
> -	} else if ((cls != ASN1_CTX) || (con != ASN1_CON)) {
> -		cFYI(1, "Exit 8 cls = %d con = %d tag = %d end = %p (%d)",
> -			cls, con, tag, end, *end);
> -		return 0;
> -	}
> -
> -	/* general string */
> -	if (asn1_header_decode(&ctx, &end, &cls, &con, &tag) == 0) {
> -		cFYI(1, "Error decoding last part negTokenInit exit9");
> -		return 0;
> -	} else if ((cls != ASN1_UNI) || (con != ASN1_PRI)
> -		   || (tag != ASN1_GENSTR)) {
> -		cFYI(1, "Exit10 cls = %d con = %d tag = %d end = %p (%d)",
> -			cls, con, tag, end, *end);
> -		return 0;
> -	}
> -	cFYI(1, "Need to call asn1_octets_decode() function for %s",
> -		ctx.pointer);	/* is this UTF-8 or ASCII? */
> -decode_negtoken_exit:
> +	/*
> +	 * We currently ignore anything at the end of the SPNEGO blob after
> +	 * the mechTypes have been parsed, since none of that info is
> +	 * used at the moment.
> +	 */
> 	return 1;
> }
> -- 
> 1.7.11.7
> 

^ permalink raw reply	[flat|nested] 6+ messages in thread

* Re: [PATCH] cifs: ignore everything in SPNEGO blob after mechTypes
       [not found]     ` <D964BE89-1509-4A58-B079-37F17449F4F5-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org>
@ 2013-03-14 11:41       ` Jeff Layton
  0 siblings, 0 replies; 6+ messages in thread
From: Jeff Layton @ 2013-03-14 11:41 UTC (permalink / raw)
  To: Yan Li
  Cc: smfrench-Re5JQEeQqe8AvxtiuMwx3w,
	linux-cifs-u79uwXL29TY76Z2rM5mHXA,
	jason-U1lxkLAfC+FTYOaJdQCKXFaTQe2KTcn/

On Tue, 12 Mar 2013 11:27:54 -0700
Yan Li <elliot.li.tech-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org> wrote:

> Yes, this patch fixed the problem in the current kernel we encountered when trying to mount a directory shared from a Windows 8 Pro system.
> 
> Yan Li
> 
> On Mar 11, 2013, at 6:52 AM, Jeff Layton <jlayton-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org> wrote:
> 
> > We've had several reports of people attempting to mount Windows 8 shares
> > and getting failures with a return code of -EINVAL. The default sec=
> > mode changed recently to sec=ntlmssp. With that, we expect and parse a
> > SPNEGO blob from the server in the NEGOTIATE reply.
> > 
> > The current decode_negTokenInit function first parses all of the
> > mechTypes and then tries to parse the rest of the negTokenInit reply.
> > The parser however currently expects a mechListMIC or nothing to follow the
> > mechTypes, but Windows 8 puts a mechToken field there instead to carry
> > some info for the new NegoEx stuff.
> > 
> > In practice, we don't do anything with the fields after the mechTypes
> > anyway so I don't see any real benefit in continuing to parse them.
> > This patch just has the kernel ignore the fields after the mechTypes.
> > We'll probably need to reinstate some of this if we ever want to support
> > NegoEx.
> > 
> > Reported-by: Jason Burgess <jason-U1lxkLAfC+FTYOaJdQCKXFaTQe2KTcn/@public.gmane.org>
> > Reported-by: Yan Li <elliot.li.tech-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org>
> > Signed-off-by: Jeff Layton <jlayton-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org>
> > ---
> > fs/cifs/asn1.c | 53 +++++------------------------------------------------
> > 1 file changed, 5 insertions(+), 48 deletions(-)
> > 
> > diff --git a/fs/cifs/asn1.c b/fs/cifs/asn1.c
> > index cfd1ce3..1d36db1 100644
> > --- a/fs/cifs/asn1.c
> > +++ b/fs/cifs/asn1.c
> > @@ -614,53 +614,10 @@ decode_negTokenInit(unsigned char *security_blob, int length,
> > 		}
> > 	}
> > 
> > -	/* mechlistMIC */
> > -	if (asn1_header_decode(&ctx, &end, &cls, &con, &tag) == 0) {
> > -		/* Check if we have reached the end of the blob, but with
> > -		   no mechListMic (e.g. NTLMSSP instead of KRB5) */
> > -		if (ctx.error == ASN1_ERR_DEC_EMPTY)
> > -			goto decode_negtoken_exit;
> > -		cFYI(1, "Error decoding last part negTokenInit exit3");
> > -		return 0;
> > -	} else if ((cls != ASN1_CTX) || (con != ASN1_CON)) {
> > -		/* tag = 3 indicating mechListMIC */
> > -		cFYI(1, "Exit 4 cls = %d con = %d tag = %d end = %p (%d)",
> > -			cls, con, tag, end, *end);
> > -		return 0;
> > -	}
> > -
> > -	/* sequence */
> > -	if (asn1_header_decode(&ctx, &end, &cls, &con, &tag) == 0) {
> > -		cFYI(1, "Error decoding last part negTokenInit exit5");
> > -		return 0;
> > -	} else if ((cls != ASN1_UNI) || (con != ASN1_CON)
> > -		   || (tag != ASN1_SEQ)) {
> > -		cFYI(1, "cls = %d con = %d tag = %d end = %p (%d)",
> > -			cls, con, tag, end, *end);
> > -	}
> > -
> > -	/* sequence of */
> > -	if (asn1_header_decode(&ctx, &end, &cls, &con, &tag) == 0) {
> > -		cFYI(1, "Error decoding last part negTokenInit exit 7");
> > -		return 0;
> > -	} else if ((cls != ASN1_CTX) || (con != ASN1_CON)) {
> > -		cFYI(1, "Exit 8 cls = %d con = %d tag = %d end = %p (%d)",
> > -			cls, con, tag, end, *end);
> > -		return 0;
> > -	}
> > -
> > -	/* general string */
> > -	if (asn1_header_decode(&ctx, &end, &cls, &con, &tag) == 0) {
> > -		cFYI(1, "Error decoding last part negTokenInit exit9");
> > -		return 0;
> > -	} else if ((cls != ASN1_UNI) || (con != ASN1_PRI)
> > -		   || (tag != ASN1_GENSTR)) {
> > -		cFYI(1, "Exit10 cls = %d con = %d tag = %d end = %p (%d)",
> > -			cls, con, tag, end, *end);
> > -		return 0;
> > -	}
> > -	cFYI(1, "Need to call asn1_octets_decode() function for %s",
> > -		ctx.pointer);	/* is this UTF-8 or ASCII? */
> > -decode_negtoken_exit:
> > +	/*
> > +	 * We currently ignore anything at the end of the SPNEGO blob after
> > +	 * the mechTypes have been parsed, since none of that info is
> > +	 * used at the moment.
> > +	 */
> > 	return 1;
> > }
> > -- 
> > 1.7.11.7
> > 
> 
> --
> To unsubscribe from this list: send the line "unsubscribe linux-cifs" in
> the body of a message to majordomo-u79uwXL29TY76Z2rM5mHXA@public.gmane.org
> More majordomo info at  http://vger.kernel.org/majordomo-info.html


Thanks for testing it...

Steve, I think this should probably go to stable too since 3.8 moved to
sec=ntlmssp as the default.


-- 
Jeff Layton <jlayton-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org>

^ permalink raw reply	[flat|nested] 6+ messages in thread

* Re: [PATCH] cifs: ignore everything in SPNEGO blob after mechTypes
       [not found] ` <1363009939-2264-1-git-send-email-jlayton-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org>
  2013-03-12 18:27   ` Yan Li
@ 2013-03-17 14:37   ` Steve French
  2013-03-17 21:14     ` Andrew Bartlett
  1 sibling, 1 reply; 6+ messages in thread
From: Steve French @ 2013-03-17 14:37 UTC (permalink / raw)
  To: Jeff Layton
  Cc: linux-cifs-u79uwXL29TY76Z2rM5mHXA,
	jason-U1lxkLAfC+FTYOaJdQCKXFaTQe2KTcn/,
	elliot.li.tech-Re5JQEeQqe8AvxtiuMwx3w, samba-technical

The existing code is trying to dump the "principal" from the
mechListMic (presumably for debugging) in the SMB negotiate response.
In the trace I looked at Samba server set it to "NONE"  - is there a
case where we would ever need that?

On Mon, Mar 11, 2013 at 8:52 AM, Jeff Layton <jlayton-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org> wrote:
> We've had several reports of people attempting to mount Windows 8 shares
> and getting failures with a return code of -EINVAL. The default sec=
> mode changed recently to sec=ntlmssp. With that, we expect and parse a
> SPNEGO blob from the server in the NEGOTIATE reply.
>
> The current decode_negTokenInit function first parses all of the
> mechTypes and then tries to parse the rest of the negTokenInit reply.
> The parser however currently expects a mechListMIC or nothing to follow the
> mechTypes, but Windows 8 puts a mechToken field there instead to carry
> some info for the new NegoEx stuff.
>
> In practice, we don't do anything with the fields after the mechTypes
> anyway so I don't see any real benefit in continuing to parse them.
> This patch just has the kernel ignore the fields after the mechTypes.
> We'll probably need to reinstate some of this if we ever want to support
> NegoEx.
>
> Reported-by: Jason Burgess <jason-U1lxkLAfC+FTYOaJdQCKXFaTQe2KTcn/@public.gmane.org>
> Reported-by: Yan Li <elliot.li.tech-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org>
> Signed-off-by: Jeff Layton <jlayton-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org>
> ---
>  fs/cifs/asn1.c | 53 +++++------------------------------------------------
>  1 file changed, 5 insertions(+), 48 deletions(-)
>
> diff --git a/fs/cifs/asn1.c b/fs/cifs/asn1.c
> index cfd1ce3..1d36db1 100644
> --- a/fs/cifs/asn1.c
> +++ b/fs/cifs/asn1.c
> @@ -614,53 +614,10 @@ decode_negTokenInit(unsigned char *security_blob, int length,
>                 }
>         }
>
> -       /* mechlistMIC */
> -       if (asn1_header_decode(&ctx, &end, &cls, &con, &tag) == 0) {
> -               /* Check if we have reached the end of the blob, but with
> -                  no mechListMic (e.g. NTLMSSP instead of KRB5) */
> -               if (ctx.error == ASN1_ERR_DEC_EMPTY)
> -                       goto decode_negtoken_exit;
> -               cFYI(1, "Error decoding last part negTokenInit exit3");
> -               return 0;
> -       } else if ((cls != ASN1_CTX) || (con != ASN1_CON)) {
> -               /* tag = 3 indicating mechListMIC */
> -               cFYI(1, "Exit 4 cls = %d con = %d tag = %d end = %p (%d)",
> -                       cls, con, tag, end, *end);
> -               return 0;
> -       }
> -
> -       /* sequence */
> -       if (asn1_header_decode(&ctx, &end, &cls, &con, &tag) == 0) {
> -               cFYI(1, "Error decoding last part negTokenInit exit5");
> -               return 0;
> -       } else if ((cls != ASN1_UNI) || (con != ASN1_CON)
> -                  || (tag != ASN1_SEQ)) {
> -               cFYI(1, "cls = %d con = %d tag = %d end = %p (%d)",
> -                       cls, con, tag, end, *end);
> -       }
> -
> -       /* sequence of */
> -       if (asn1_header_decode(&ctx, &end, &cls, &con, &tag) == 0) {
> -               cFYI(1, "Error decoding last part negTokenInit exit 7");
> -               return 0;
> -       } else if ((cls != ASN1_CTX) || (con != ASN1_CON)) {
> -               cFYI(1, "Exit 8 cls = %d con = %d tag = %d end = %p (%d)",
> -                       cls, con, tag, end, *end);
> -               return 0;
> -       }
> -
> -       /* general string */
> -       if (asn1_header_decode(&ctx, &end, &cls, &con, &tag) == 0) {
> -               cFYI(1, "Error decoding last part negTokenInit exit9");
> -               return 0;
> -       } else if ((cls != ASN1_UNI) || (con != ASN1_PRI)
> -                  || (tag != ASN1_GENSTR)) {
> -               cFYI(1, "Exit10 cls = %d con = %d tag = %d end = %p (%d)",
> -                       cls, con, tag, end, *end);
> -               return 0;
> -       }
> -       cFYI(1, "Need to call asn1_octets_decode() function for %s",
> -               ctx.pointer);   /* is this UTF-8 or ASCII? */
> -decode_negtoken_exit:
> +       /*
> +        * We currently ignore anything at the end of the SPNEGO blob after
> +        * the mechTypes have been parsed, since none of that info is
> +        * used at the moment.
> +        */
>         return 1;
>  }
> --
> 1.7.11.7
>



-- 
Thanks,

Steve

^ permalink raw reply	[flat|nested] 6+ messages in thread

* Re: [PATCH] cifs: ignore everything in SPNEGO blob after mechTypes
  2013-03-17 14:37   ` Steve French
@ 2013-03-17 21:14     ` Andrew Bartlett
  2013-03-17 22:00       ` Steve French
  0 siblings, 1 reply; 6+ messages in thread
From: Andrew Bartlett @ 2013-03-17 21:14 UTC (permalink / raw)
  To: Steve French
  Cc: linux-cifs, jason, samba-technical, Jeff Layton, elliot.li.tech

On Sun, 2013-03-17 at 09:37 -0500, Steve French wrote:
> The existing code is trying to dump the "principal" from the
> mechListMic (presumably for debugging) in the SMB negotiate response.
> In the trace I looked at Samba server set it to "NONE"  - is there a
> case where we would ever need that?

No, the "principal" should never be used, and isn't even useful for
debugging as you should just never use it.  It can be set to strange and
invalid values such as NONE and rfc....should_ignore

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org

^ permalink raw reply	[flat|nested] 6+ messages in thread

* Re: [PATCH] cifs: ignore everything in SPNEGO blob after mechTypes
  2013-03-17 21:14     ` Andrew Bartlett
@ 2013-03-17 22:00       ` Steve French
  0 siblings, 0 replies; 6+ messages in thread
From: Steve French @ 2013-03-17 22:00 UTC (permalink / raw)
  To: Andrew Bartlett
  Cc: linux-cifs, jason, samba-technical, Jeff Layton, elliot.li.tech

On Sun, Mar 17, 2013 at 4:14 PM, Andrew Bartlett <abartlet@samba.org> wrote:
> On Sun, 2013-03-17 at 09:37 -0500, Steve French wrote:
>> The existing code is trying to dump the "principal" from the
>> mechListMic (presumably for debugging) in the SMB negotiate response.
>> In the trace I looked at Samba server set it to "NONE"  - is there a
>> case where we would ever need that?
>
> No, the "principal" should never be used, and isn't even useful for
> debugging as you should just never use it.  It can be set to strange and
> invalid values such as NONE and rfc....should_ignore

Thanks - then it makes more sense to do as Jeff suggested and removing
the extra parsing.


-- 
Thanks,

Steve

^ permalink raw reply	[flat|nested] 6+ messages in thread

end of thread, other threads:[~2013-03-17 22:00 UTC | newest]

Thread overview: 6+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2013-03-11 13:52 [PATCH] cifs: ignore everything in SPNEGO blob after mechTypes Jeff Layton
     [not found] ` <1363009939-2264-1-git-send-email-jlayton-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org>
2013-03-12 18:27   ` Yan Li
     [not found]     ` <D964BE89-1509-4A58-B079-37F17449F4F5-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org>
2013-03-14 11:41       ` Jeff Layton
2013-03-17 14:37   ` Steve French
2013-03-17 21:14     ` Andrew Bartlett
2013-03-17 22:00       ` Steve French

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.