svn commit: r242220 - stable/9/sys/rpc/rpcsec_gss

Rick Macklem rmacklem at FreeBSD.org
Sun Oct 28 12:23:58 UTC 2012


Author: rmacklem
Date: Sun Oct 28 12:23:57 2012
New Revision: 242220
URL: http://svn.freebsd.org/changeset/base/242220

Log:
  MFC: r242090
  Modify the comment to take out the names and URL.

Modified:
  stable/9/sys/rpc/rpcsec_gss/svc_rpcsec_gss.c
Directory Properties:
  stable/9/sys/   (props changed)

Modified: stable/9/sys/rpc/rpcsec_gss/svc_rpcsec_gss.c
==============================================================================
--- stable/9/sys/rpc/rpcsec_gss/svc_rpcsec_gss.c	Sun Oct 28 12:12:45 2012	(r242219)
+++ stable/9/sys/rpc/rpcsec_gss/svc_rpcsec_gss.c	Sun Oct 28 12:23:57 2012	(r242220)
@@ -1025,12 +1025,9 @@ svc_rpc_gss_validate(struct svc_rpc_gss_
 		rpc_gss_log_status("gss_verify_mic", client->cl_mech,
 		    maj_stat, min_stat);
 		/*
-		 * Attila Bogar and Herbert Poeckl reported similar problems
-		 * w.r.t. a Linux NFS client doing a krb5 NFS mount against the
-		 * FreeBSD server. We determined this was a Linux bug:
-		 * http://www.spinics.net/lists/linux-nfs/msg32466.html, where
-		 * the mount failed to work because a Destroy operation with a
-		 * bogus encrypted checksum destroyed the authenticator handle.
+		 * A bug in some versions of the Linux client generates a
+		 * Destroy operation with a bogus encrypted checksum. Deleting
+		 * the credential handle for that case causes the mount to fail.
 		 * Since the checksum is bogus (gss_verify_mic() failed), it
 		 * doesn't make sense to destroy the handle and not doing so
 		 * fixes the Linux mount.


More information about the svn-src-stable-9 mailing list