NFS: don't negotiate when user specifies sec flavor
authorBryan Schumaker <bjschuma@netapp.com>
Wed, 13 Apr 2011 18:31:30 +0000 (14:31 -0400)
committerTrond Myklebust <Trond.Myklebust@netapp.com>
Wed, 13 Apr 2011 19:12:23 +0000 (15:12 -0400)
We were always attempting sec flavor negotiation, even if the user
told us a specific sec flavor to use.  If that sec flavor fails,
we should return an error rather than continuing with sec flavor
negotiation.

Signed-off-by: Bryan Schumaker <bjschuma@netapp.com>
Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>
fs/nfs/nfs4proc.c
fs/nfs/super.c

index 7e27ebf5be5d10ae28f600b7ce313d17a3886b6a..b8e1ac69b7430a83c25fee8735933cb5bc75e292 100644 (file)
@@ -46,6 +46,7 @@
 #include <linux/nfs4.h>
 #include <linux/nfs_fs.h>
 #include <linux/nfs_page.h>
+#include <linux/nfs_mount.h>
 #include <linux/namei.h>
 #include <linux/mount.h>
 #include <linux/module.h>
@@ -2234,7 +2235,7 @@ static int nfs4_proc_get_root(struct nfs_server *server, struct nfs_fh *fhandle,
                              struct nfs_fsinfo *info)
 {
        int status = nfs4_lookup_root(server, fhandle, info);
-       if (status == -EPERM)
+       if ((status == -EPERM) && !(server->flags & NFS_MOUNT_SECFLAVOUR))
                status = nfs4_find_root_sec(server, fhandle, info);
        if (status == 0)
                status = nfs4_server_capabilities(server, fhandle);
index 685a8a7bd17baf751a1b788a75af1265f38d8660..75bcc3f0e0b5371fa3e6dc09918ecff843af14cb 100644 (file)
@@ -1004,6 +1004,7 @@ static int nfs_parse_security_flavors(char *value,
                return 0;
        }
 
+       mnt->flags |= NFS_MOUNT_SECFLAVOUR;
        mnt->auth_flavor_len = 1;
        return 1;
 }