smb3: add support for IAKerb
authorSteve French <stfrench@microsoft.com>
Tue, 28 Jan 2025 07:04:23 +0000 (01:04 -0600)
committerSteve French <stfrench@microsoft.com>
Fri, 31 Jan 2025 18:51:44 +0000 (12:51 -0600)
commiteea5119fa5979c350af5783a8148eacdd4219715
tree86d874d324b904c3553ed155121d9bc2863db832
parent021840c1426c012a812f8b8d9413f3cf9d3e0b9b
smb3: add support for IAKerb

There are now more servers which advertise support for IAKerb (passthrough
Kerberos authentication via proxy).  IAKerb is a public extension industry
standard Kerberos protocol that allows a client without line-of-sight
to a Domain Controller to authenticate. There can be cases where we
would fail to mount if the server only advertises the OID for IAKerb
in SPNEGO/GSSAPI.  Add code to allow us to still upcall to userspace
in these cases to obtain the Kerberos ticket.

Signed-off-by: Steve French <stfrench@microsoft.com>
fs/smb/client/asn1.c
fs/smb/client/cifs_spnego.c
fs/smb/client/cifsglob.h
fs/smb/client/sess.c
fs/smb/client/smb2pdu.c