Commits · 23a306120fcb2879ed2b814716c1cb2a8eb74f72 · Kirill Smelkov / linux

14 May, 2010 40 commits

NFS: Reduce the stack footprint of nfs_proc_symlink() · 23a30612
Trond Myklebust authored Apr 16, 2010
```
Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>
```
23a30612
NFS: Reduce the stack footprint of nfs_proc_create · eb872f0c
Trond Myklebust authored Apr 16, 2010
```
Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>
```
eb872f0c
NFS: Reduce the stack footprint of nfs_rmdir · 39967ddf
Trond Myklebust authored Apr 16, 2010
```
Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>
```
39967ddf
NFS: Reduce stack footprint of nfs_proc_remove() · d346890b
Trond Myklebust authored Apr 16, 2010
```
Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>
```
d346890b
NFS: Reduce stack footprint of nfs3_proc_readlink() · 3b14d654
Trond Myklebust authored Apr 16, 2010
```
Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>
```
3b14d654
NFS: Reduce the stack footprint of nfs_link() · 136f2627
Trond Myklebust authored Apr 16, 2010
```
Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>
```
136f2627
NFS: Reduce stack footprint of nfs_readdir() · aa49b4cf
Trond Myklebust authored Apr 16, 2010
```
Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>
```
aa49b4cf
NFS: Reduce stack footprint of nfs3_proc_rename() and nfs4_proc_rename() · 011fff72
Trond Myklebust authored Apr 16, 2010
```
Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>
```
011fff72
NFS: Reduce stack footprint of nfs_revalidate_inode() · a3cba2aa
Trond Myklebust authored Apr 16, 2010
```
Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>
```
a3cba2aa
NFSv4: Reduce stack footprint of nfs4_proc_access() and nfs3_proc_access() · c407d41a
Trond Myklebust authored Apr 16, 2010
```
Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>
```
c407d41a
NFSv4: Reduce the stack footprint of nfs4_remote_referral_get_sb · 4f727296
Trond Myklebust authored Apr 16, 2010
```
Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>
```
4f727296
NFSv4: Reduce stack footprint of nfs4_get_root() · 8bac9db9
Trond Myklebust authored Apr 16, 2010
```
Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>
```
8bac9db9
NFS: Reduce the stack footprint of nfs_follow_remote_path() · 04ffdbe2
Trond Myklebust authored Apr 16, 2010
```
Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>
```
04ffdbe2
NFS: Reduce the stack footprint of nfs_lookup · e1fb4d05
Trond Myklebust authored Apr 16, 2010
```
Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>
```
e1fb4d05
NFSv4: Reduce the stack footprint of try_location() · 364d015e
Trond Myklebust authored Apr 16, 2010
```
Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>
```
364d015e
NFS: Reduce the stack footprint of nfs_create_server · fbca779a
Trond Myklebust authored Apr 16, 2010
```
Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>
```
fbca779a
NFS: Reduce the stack footprint of nfs_follow_mountpoint() · a4d7f168
Trond Myklebust authored Apr 16, 2010
```
Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>
```
a4d7f168

NFSv4: Eliminate nfs4_path_walk() · 815409d2

Trond Myklebust authored Apr 16, 2010

All we really want is the ability to retrieve the root file handle. We no
longer need the ability to walk down the path, since that is now done in
nfs_follow_remote_path().
Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>

815409d2

NFS: Add helper functions for allocating filehandles and fattr structs · 2d36bfde

Trond Myklebust authored Apr 16, 2010

NFS Filehandles and struct fattr are really too large to be allocated on
the stack. This patch adds in a couple of helper functions to allocate them
dynamically instead.
Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>

2d36bfde

gss_krb5: Advertise rc4-hmac enctype support in the rpcsec_gss/krb5 upcall · fc54a0c6

Trond Myklebust authored Apr 08, 2010

Update the upcall info indicating which Kerberos enctypes
the kernel supports
Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>

fc54a0c6

gss_krb5: Add support for rc4-hmac encryption · fffdaef2

Kevin Coffman authored Mar 17, 2010

Add necessary changes to add kernel support for the rc4-hmac Kerberos
encryption type used by Microsoft and described in rfc4757.
Signed-off-by: Kevin Coffman <kwc@citi.umich.edu>
Signed-off-by: Steve Dickson <steved@redhat.com>
Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>

fffdaef2

gss_krb5: Use confounder length in wrap code · 5af46547

Kevin Coffman authored Mar 17, 2010

All encryption types use a confounder at the beginning of the
wrap token.  In all encryption types except arcfour-hmac, the
confounder is the same as the blocksize.  arcfour-hmac has a
blocksize of one, but uses an eight byte confounder.

Add an entry to the crypto framework definitions for the
confounder length and change the wrap/unwrap code to use
the confounder length rather than assuming it is always
the blocksize.
Signed-off-by: Kevin Coffman <kwc@citi.umich.edu>
Signed-off-by: Steve Dickson <steved@redhat.com>
Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>

5af46547

gssd_krb5: More arcfour-hmac support · 1dbd9029

Kevin Coffman authored Mar 17, 2010

For the arcfour-hmac support, the make_seq_num and get_seq_num
functions need access to the kerberos context structure.
This will be used in a later patch.
Signed-off-by: Kevin Coffman <kwc@citi.umich.edu>
Signed-off-by: Steve Dickson <steved@redhat.com>
Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>

1dbd9029

gss_krb5: Save the raw session key in the context · fc263a91

Kevin Coffman authored Mar 17, 2010

This is needed for deriving arcfour-hmac keys "on the fly"
using the sequence number or checksu
Signed-off-by: Kevin Coffman <kwc@citi.umich.edu>
Signed-off-by: Steve Dickson <steved@redhat.com>
Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>

fc263a91

gssd_krb5: arcfour-hmac support · 8b237076

Kevin Coffman authored Mar 17, 2010

For arcfour-hmac support, the make_checksum function needs a usage
field to correctly calculate the checksum differently for MIC and
WRAP tokens.
Signed-off-by: Kevin Coffman <kwc@citi.umich.edu>
Signed-off-by: Steve Dickson <steved@redhat.com>
Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>

8b237076

gss_krb5: Advertise AES enctype support in the rpcsec_gss/krb5 upcall · bf6d359c

Trond Myklebust authored Apr 08, 2010

Update upcall info indicating which Kerberos enctypes
the kernel supports
Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>

bf6d359c

gss_krb5: add remaining pieces to enable AES encryption support · 934a95aa

Kevin Coffman authored Mar 17, 2010

Add the remaining pieces to enable support for Kerberos AES
encryption types.
Signed-off-by: Kevin Coffman <kwc@citi.umich.edu>
Signed-off-by: Steve Dickson <steved@redhat.com>
Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>

934a95aa

gss_krb5: add support for new token formats in rfc4121 · de9c17eb

Kevin Coffman authored Mar 17, 2010

This is a step toward support for AES encryption types which are
required to use the new token formats defined in rfc4121.
Signed-off-by: Kevin Coffman <kwc@citi.umich.edu>
[SteveD: Fixed a typo in gss_verify_mic_v2()]
Signed-off-by: Steve Dickson <steved@redhat.com>
[Trond: Got rid of the TEST_ROTATE/TEST_EXTRA_COUNT crap]
Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>

de9c17eb

xdr: Add an export for the helper function write_bytes_to_xdr_buf() · c43abaed

Kevin Coffman authored Mar 17, 2010

Signed-off-by: Kevin Coffman <kwc@citi.umich.edu>
Signed-off-by: Steve Dickson <steved@redhat.com>
Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>

c43abaed

gss_krb5: Advertise triple-des enctype support in the rpcsec_gss/krb5 upcall · 4018bf3e

Trond Myklebust authored Apr 08, 2010

Update the upcall info indicating which Kerberos enctypes the kernel
supports.
Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>

4018bf3e

gss_krb5: add support for triple-des encryption · 958142e9

Kevin Coffman authored Mar 17, 2010

Add the final pieces to support the triple-des encryption type.
Signed-off-by: Kevin Coffman <kwc@citi.umich.edu>
Signed-off-by: Steve Dickson <steved@redhat.com>
Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>

958142e9

gss_krb5: Add upcall info indicating supported kerberos enctypes · 683ac665

Trond Myklebust authored Apr 08, 2010

The text based upcall now indicates which Kerberos encryption types are
supported by the kernel rpcsecgss code.  This is used by gssd to
determine which encryption types it should attempt to negotiate
when creating a context with a server.

The server principal's database and keytab encryption types are
what limits what it should negotiate.  Therefore, its keytab
should be created with only the enctypes listed by this file.

Currently we support des-cbc-crc, des-cbc-md4 and des-cbc-md5
Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>

683ac665

gss_krb5: handle new context format from gssd · 47d84807

Kevin Coffman authored Mar 17, 2010

For encryption types other than DES, gssd sends down context information
in a new format.  This new format includes the information needed to
support the new Kerberos GSS-API tokens defined in rfc4121.
Signed-off-by: Kevin Coffman <kwc@citi.umich.edu>
Signed-off-by: Steve Dickson <steved@redhat.com>
Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>

47d84807

gss_krb5: import functionality to derive keys into the kernel · 4891f2d0

Kevin Coffman authored Mar 17, 2010

Import the code to derive Kerberos keys from a base key into the
kernel.  This will allow us to change the format of the context
information sent down from gssd to include only a single key.
Signed-off-by: Kevin Coffman <kwc@citi.umich.edu>
Signed-off-by: Steve Dickson <steved@redhat.com>
Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>

4891f2d0

gss_krb5: add ability to have a keyed checksum (hmac) · e1f6c07b

Kevin Coffman authored Mar 17, 2010

Encryption types besides DES may use a keyed checksum (hmac).
Modify the make_checksum() function to allow for a key
and take care of enctype-specific processing such as truncating
the resulting hash.
Signed-off-by: Kevin Coffman <kwc@citi.umich.edu>
Signed-off-by: Steve Dickson <steved@redhat.com>
Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>

e1f6c07b

gss_krb5: introduce encryption type framework · 81d4a433

Kevin Coffman authored Mar 17, 2010

Add enctype framework and change functions to use the generic
values from it rather than the values hard-coded for des.
Signed-off-by: Kevin Coffman <kwc@citi.umich.edu>
Signed-off-by: Steve Dickson <steved@redhat.com>
Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>

81d4a433

gss_krb5: prepare for new context format · a8cc1cb7

Kevin Coffman authored Mar 17, 2010

Prepare for new context format by splitting out the old "v1"
context processing function
Signed-off-by: Kevin Coffman <kwc@citi.umich.edu>
Signed-off-by: Steve Dickson <steved@redhat.com>
Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>

a8cc1cb7

gss_krb5: split up functions in preparation of adding new enctypes · 1ac3719a

Kevin Coffman authored Mar 17, 2010

Add encryption type to the krb5 context structure and use it to switch
to the correct functions depending on the encryption type.
Signed-off-by: Kevin Coffman <kwc@citi.umich.edu>
Signed-off-by: Steve Dickson <steved@redhat.com>
Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>

1ac3719a

gss_krb5: Don't expect blocksize to always be 8 when calculating padding · 54ec3d46
J. Bruce Fields authored Mar 17, 2010
```
Signed-off-by: Steve Dickson <steved@redhat.com>
Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>
```
54ec3d46

gss_krb5: Added and improved code comments · 7561042f

Kevin Coffman authored Mar 17, 2010

Signed-off-by: Steve Dickson <steved@redhat.com>
Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>

7561042f