svn commit: r299225 - stable/9/sys/fs/nfsserver

[Rick Macklem]

Author: rmacklem
Date: Sat May  7 21:34:04 2016
New Revision: 299225
URL: https://svnweb.freebsd.org/changeset/base/299225

Log:
  MFC: r298523
  Allow the NFSv4 server to reply NFSERR_WRONGSEC for the SetClientID operation.
  
  It was reported via email that a Linux client couldn't do a Kerberized
  NFS mount when only "sec=krb5" was specified for the exports. The Linux
  client attempted a mount via krb5i and the server replied NFSERR_SERVERFAULT.
  Although NFSERR_WRONGSEC isn't listed as an error for SetClientID, I
  think it is the correct reply, so this patch enables that.
  I do not know if this fixes the mount attempt, but adding "krb5i" to the
  list of allowed security flavours does allow the mount to work.

Modified:
  stable/9/sys/fs/nfsserver/nfs_nfsdsubs.c
Directory Properties:
  stable/9/sys/   (props changed)
  stable/9/sys/fs/   (props changed)

Modified: stable/9/sys/fs/nfsserver/nfs_nfsdsubs.c
==============================================================================
--- stable/9/sys/fs/nfsserver/nfs_nfsdsubs.c	Sat May  7 20:23:26 2016	(r299224)
+++ stable/9/sys/fs/nfsserver/nfs_nfsdsubs.c	Sat May  7 21:34:04 2016	(r299225)
@@ -1130,6 +1130,7 @@ static short nfsv4err_setclientid[] = {
 	NFSERR_INVAL,
 	NFSERR_RESOURCE,
 	NFSERR_SERVERFAULT,
+	NFSERR_WRONGSEC,
 	0,
 };