This is a note to let you know that I've just added the patch titled
Fix SMB3.1.1 guest authentication to Samba
to the 4.9-stable tree which can be found at:
http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git;a=summary
The filename of the patch is:
fix-smb3.1.1-guest-authentication-to-samba.patch
and it can be found in the queue-4.9 subdirectory.
If you, or anyone else, feels it should not be added to the stable tree,
please let <stable@xxxxxxxxxxxxxxx> know about it.
>From 23586b66d84ba3184b8820277f3fc42761640f87 Mon Sep 17 00:00:00 2001
From: Steve French <smfrench@xxxxxxxxx>
Date: Mon, 18 Sep 2017 18:18:45 -0500
Subject: Fix SMB3.1.1 guest authentication to Samba
From: Steve French <smfrench@xxxxxxxxx>
commit 23586b66d84ba3184b8820277f3fc42761640f87 upstream.
Samba rejects SMB3.1.1 dialect (vers=3.1.1) negotiate requests from
the kernel client due to the two byte pad at the end of the negotiate
contexts.
Signed-off-by: Steve French <smfrench@xxxxxxxxx>
Reviewed-by: Ronnie Sahlberg <lsahlber@xxxxxxxxxx>
Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
---
fs/cifs/smb2pdu.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
--- a/fs/cifs/smb2pdu.c
+++ b/fs/cifs/smb2pdu.c
@@ -366,7 +366,7 @@ assemble_neg_contexts(struct smb2_negoti
build_encrypt_ctxt((struct smb2_encryption_neg_context *)pneg_ctxt);
req->NegotiateContextOffset = cpu_to_le32(OFFSET_OF_NEG_CONTEXT);
req->NegotiateContextCount = cpu_to_le16(2);
- inc_rfc1001_len(req, 4 + sizeof(struct smb2_preauth_neg_context) + 2
+ inc_rfc1001_len(req, 4 + sizeof(struct smb2_preauth_neg_context)
+ sizeof(struct smb2_encryption_neg_context)); /* calculate hash */
}
#else
Patches currently in stable-queue which might be from smfrench@xxxxxxxxx are
queue-4.9/cifs-release-cifs-root_cred-after-exit_cifs.patch
queue-4.9/smb3-warn-user-if-trying-to-sign-connection-that-authenticated-as-guest.patch
queue-4.9/smb3-don-t-ignore-o_sync-o_dsync-and-o_direct-flags.patch
queue-4.9/fix-smb3.1.1-guest-authentication-to-samba.patch
queue-4.9/cifs-release-auth_key.response-for-reconnect.patch
queue-4.9/smb-validate-negotiate-to-protect-against-downgrade-even-if-signing-off.patch